Setting up End-User Access
Creating a Network Filter
Cisco Small Business NSS2000 Series Administration Guide
89
5
select those filters that "allow" certain types of connections. For example,
you might only want to allow FTP connections.
STEP 3
Click Change Policy.
Creating a Network Filter
The Active Network Access Filters table on the Network Filters page displays
currently defined filters. These filters control if access to the NSS from specified
hosts is granted or denied on a per-protocol basis. Each device in your network is
assigned a fixed 48-bit MAC address and changeable 32-bit IP address. When
you define a filter, it grants or denies access via the specified protocol from the
specified IP/MAC address or range of IP addresses.
NOTE:
If you set the default policy to Drop
and you want to enable FTP connections, make
sure you set the FTP connection type on the
host to "active". (If you set the connection type
to "passive" you can connect to the NSS but are
not able to list, transfer the data, and so on.)
NOTE:
When you define a new filter, any
existing connections that would normally be
denied by this rule remain in tact. These
connections are denied during the next attempt
to connect to the NSS.
