ETIC SIG, User Manual, Page: 61 / 83

CONFIGURATION
SIG Router & VPN server User’s guide ref. 9017409-01
Page 61
Configure successively the WAN traffic rules using the same method.
Step 1 : Select the default policy
“LAN to WAN” parameter :
That parameter sets what the filter will decide if an IP packet coming from
the LAN does not match any f the rules of the filter :
If the value “Accept” is selected, the IP packet will be transmitted to the
VPN.
If the value “Drop” is selected, the IP packet will be rejected.
“WAN to LAN” parameter :
That parameter sets what the filter will decide if an IP packet coming from
the WAN does not match any f the rules of the filter :
If the value “Accept” is selected, the IP packet will be transmitted to the
LAN.
If the value “Drop” is selected, the IP packet will be rejected.
The cautious default policy is to choose the value “Drop”; at the
opposite, if the value “Accept” is selected, a frame which does not match
any of the rules of the filter is transmitted.
Step 2 : Add a rule to the filter
Click the “add a rule” button.
“Direction” parameter :
Select the direction of the data flow to which the rule applies.
“Action” parameter :
Select the value “Accept” if the IP packet has to be transmitted in the
selected direction.
Select the value “Drop” if the IP packet has to be rejected.
“Protocol” parameter :
Select the level 3 protocol concerned.
“Source IP address” & “Source port” parameters :
Enter the value of the source IP address and the source port number.
It is possible to enter a range of source IP addresses and not a single IP
address by selecting a netmask value from 1 to 32; It is the number of
binary 1 of the netmask; for instance, the value 24 means 255.255.255.0;
the value 16 means 255.255.0.0.