ETIC IPL-I1128, User Manual, Page: 33 / 56

CONFIGURATION
IPL-M156 / IPL-I1128 / IPL-L134 router User manual ref. 9017109-01
Page 33
11 Restricting the rights of a remote user
A remote user filter applies to the IP frames received from an
authenticated remote user.
Once the user has been authenticated and the PPP connection or the has
been set, the router applies the filter assigned to the user who has been
recognized; the remote user filter checks the destination IP address and
port number.
25 remote user filters can be configured and assigned individually to each
of the users declared in the user list.
11.1 Filter structure
A filter is a table made of several lines; each line is called a rule.
A rule defines what decision the filter has to make when it receives a
particular IP frame from the Internet; the decision can be Reject or
Authorize.
Each rule of the filter is composed a two fields which defines a data flow :
•
Service : Protocol (telnet, http…),
•
Host : destination IP@.
To avoid to be obliged to describe what the filter has to do with any
possible data flow, the filter policy has to be selected.
The filter policy is the policy the firewall has to apply when it encounters
an IP frame not described by one of the rules of the filter.
The policy can be
•
“Drop all the IP frames not described by one of the rules”;
or
•
“Accept all the IP frames not described by one of the rules”.
The first policy is generally the right one because it is cautious.