Garland M1G1ACE, Installation Manual

Page: 19 / 23

Edit Filter:
1. Name : ICMP
2. Ports : [unav| i | o | ]
3. Counter Used : YES
4. Source MAC Address :
5. Destination MAC Address:
6. VLAN ID :
7. Layer 3 : IP
8. Source IP address :
9. Destination IP address :
a. DSCP :
b. Layer 4 :1
0: Exit
Enter menu selection:
The ICMP filter is complete
Press
to return to the Row 1 Filters screen
Figure 69: ICMP filter is complete
Page 19 Ver 1.
6
Garland Technology M1G1ACE (Code Version:1.0.21)
Row 1 Filters ***FILTER CONFIGURATION NOT SAVED OR APPLIED***
#: Name Ports Count
1: src IP fltA [Unav|i o| | ] 0
2: Case 432A [unav| i | |i o] 0
3: Case 432A dmac [unav| i | |i o] 0
4: abc [unav|i | o | ] 0
5: DSCP=21 [unav| | |i o ] 0
-> 6: ICMP [unav| i | o | ] 0
u:cursor up d:cursor down t:filter up g:filter down
a:add e:edit i:insert x:delete
v:view c:clear count r:reset h:help
0:exit *** s:SAVE AND APPLY FILTERS ***
Select:
The next filter we will develop is the
Email send capture filter Emails
are sent to tcp port 587. We will create a filter to capture
email send
and send them to a monitoring port.
Figure 70: Completed the 6th filter - ICMP filter
Edit Filter:
1. Name : email send
2. Ports : [unav|i o | | ]
3. Counter Used : YES
4. Source MAC Address :
5. Destination MAC Address:
6. VLAN ID :
7. Layer 3 :
0: Exit
Enter menu selection:7
Next Filter Email send capture filter
Using the previously described commands, create a filter named
email
send
which will go from A2 -> C2.
Press
to select layer 3
Figure 71: create email send filter
Row 1 Filter now has six filters complete
Edit Filter:
1. Name : email send
2. Ports : [unav|i o | | ]
3. Counter Used : YES
4. Source MAC Address :
5. Destination MAC Address:
6. VLAN ID :
7. Layer 3 :
0: Exit
Enter menu selection:7
i.IP:
n.non-IP
e.no-filter
any other key.no change
Select layer 3 type[no filter]:
Select Layer 3
Selecting Layer 3 brings up more menu selections. Press
i to select
IP
Figure 72: Select IP
Edit Filter:
1. Name : email send
2. Ports : [unav|i o | | ]
3. Counter Used : YES
4. Source MAC Address :
5. Destination MAC Address:
6. VLAN ID :
7. Layer 3 : IP
8. Source IP address :
9. Destination IP address :
a. DSCP :
b. Layer 4 :
0: Exit
Enter menu selection:b
filter on layer 4(IP protocol)?[N]:
Pressing b will change the menu again
Press
b to select layer 4. A new line is added to the bottom of the
menu.
Figure 73: Select layer 4
Edit Filter:
1. Name : email send
2. Ports : [unav|i o | | ]
3. Counter Used : YES
4. Source MAC Address :
5. Destination MAC Address:
6. VLAN ID :
7. Layer 3 : IP
8. Source IP address :
9. Destination IP address :
a. DSCP :
b. Layer 4 :
0: Exit
Enter menu selection:b
filter on layer 4(IP protocol)?[N]:y
t.tcp:
u.udp
h.other
any other key.no change
IP protocol[0]:
Pressing y will set up for selection of protocol
Press
y to select protocol will add more menu selections.
Figure 74: Set up selecting the protocol
email send capture filter
M1G2ACE/M1G2DCE
M1G1ACE/M1G1DCE
M1G2ACE/M1G2DCE M1G1ACE/M1G1DCE