3Com 4007, Implementation Manual, Page: 588 / 684

588 C
HAPTER
22: Q
O
S
AND
RSVP
Figure 68 shows an example with TCP drop control disabled.
Figure 68 QoS Control Action (Drop Control Disabled)
With the QoS Classifier and QoS Control definition shown in Figure 68
(TCP control is not enabled), any attempt by a client on the End-user
network to establish a TCP connection to a server on the Admin network
fails.
This next example illustrates how TCP one-way-filtering can be effective.
Figure 69 shows the same situation, but with TCP drop control enabled to
filter only those packets with the SYN=1 and ACK=0 signature.
Figure 69 QoS Control Action (Drop Control Enabled)
QoS Classifier:
Source IP:
0.0.0.0
Destination IP:
10.1.1.0
QoS Control Action:
Drop all
10.1.1.254 10.1.2.254
Admin
End-user
network
QoS Classifier:
Source IP:
0.0.0.0
Destination IP:
10.1.1.0
QoS Control Action:
Drop only
(SYN=1, ACK=0)
10.1.1.254 10.1.2.254
Admin
End-user
network