ELSA LANCOM Business 6000, Manual

Page: 59 / 174

|
Operating modes and functions
59
|
ELSA LANCOM Business 6000
|
EN
The stations for which the filter rule should apply as sender or receiver of
the packets are specified here.
'Service'
The IP protocols, source and destination ports to which the filter rule
should apply are specified here.
Setting up filters under ELSA WEBconfig or Telnet
The configuration under WEBconfig or Telnet is somewhat more difficult than
under LANconfig .
Here the filter functions are set in the filter list which is based on the entries
of two other tables. The first is an object table in which the computer,
networks, protocols, etc. are defined as objects. The second is a rules table
in which source, target and action are described with the aid of the individual
objects. The actual filter list is generated from these two lists.
The filter list can also be created directly, but this is not required. Making the
required entries in the object and rules tables is sufficient for the filter list to
be generated. This ensures that no inconsistent entries are made in the filter
list.
What can be filtered? Source and target filters can be set for individual ports
or for ranges of ports. In addition, individual protocols or any combinations of
protocols (TCP/UDP/ICMP) can be filtered.
A previously defined action is executed as soon as a filter condition occurs.
Object table
The object table defines the elements or objects to be used in the rule table.
Objects can be:
Protocols
Single computers
Whole networks
Services
These elements can also be combined in any way. Objects can also be
defined hierarchically. Therefore, objects for the TCP and UDP protocols can
be defined first. Then objects can be added later for items such as FTP (= TCP
+ Ports 20 and 21), HTTP (= TCP + Port 80) and DNS (= TCP, UDP + Port 53).
They can then be combined to one object that contains all object definitions.