mirror of
https://github.com/netbirdio/docs.git
synced 2026-04-16 07:26:35 +00:00
Add port ranges to acl docs
This commit is contained in:
Binary file not shown.
|
Before Width: | Height: | Size: 201 KiB After Width: | Height: | Size: 195 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 190 KiB After Width: | Height: | Size: 249 KiB |
@@ -67,14 +67,21 @@ There is a `Default` policy, which configures a default mesh connection between
|
|||||||
## Managing Policies
|
## Managing Policies
|
||||||
|
|
||||||
### Creating Policies
|
### Creating Policies
|
||||||
After accessing the `Access Control` > `Policies` tab, click on the `Add policy` button to create a new policy. In the popup, specify source and destination groups, and add Posture Checks if needed. Make sure to set traffic direction only when TCP or UDP protocols are selected. Finally, provide a name and description for your policy.
|
After accessing the `Access Control` > `Policies` tab, click on the `Add policy` button to create a new policy.
|
||||||
|
In the popup, specify connection `Source` and `Destination` groups. You can select existing groups or create new ones by entering a name in the input box.
|
||||||
|
|
||||||
|
<Note>
|
||||||
|
We recommend using [identity provider (IdP) integrations](/how-to/idp-sync) to provision your user groups from the IdP.
|
||||||
|
</Note>
|
||||||
|
|
||||||
|
You can limit access to specific protocol and ports by selecting the `Protocol` and providing the port numbers in the `Ports` field.
|
||||||
|
Starting version `0.48` NetBird supports port ranges in policies, allowing you to specify a range of ports in the format `start-end` (e.g., `8000-9000`).
|
||||||
|
Make sure to set traffic direction only when TCP or UDP protocols are selected. Finally, provide a name and description for your policy.
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
<img src="/docs-static/img/overview/create-rule.png" alt="high-level-dia" className="imagewrapper"/>
|
<img src="/docs-static/img/overview/create-rule.png" alt="high-level-dia" className="imagewrapper"/>
|
||||||
</p>
|
</p>
|
||||||
|
If necessary, you can also add a [posture checks](/how-to/manage-posture-checks) to the policy. Posture checks are used to ensure that the peer meets certain security requirements before allowing it to connect. You can select from predefined posture checks or create custom ones.
|
||||||
|
|
||||||
If necessary, you can create new groups simply by entering new names in the input box for either the source or destination lists.
|
|
||||||
|
|
||||||
Once you have finished configuring the policy, click `Add Policy` to save it. You will then see your new policy in the table.
|
Once you have finished configuring the policy, click `Add Policy` to save it. You will then see your new policy in the table.
|
||||||
<p>
|
<p>
|
||||||
|
|||||||
Reference in New Issue
Block a user