NEXPEED NR304G-4W User’s Manual
NexComm Systems, Inc. 65 PAGE
Configuration example
Step1:
filter forwards the packet satisfied by the following conditions:
(conf)# filter in 10 pass tcp src 210.123.2.1/32 dst 168.126.10.1/32:23
=>Admit the packet of telnet access (port no. 23) of source IP address 210.123.2.1 and
destination IP address 168.126.10.1
(conf)# filter in 20 pass tcp src 210.123.2.1/32 dst 168.126.11.1/32:23
=> Admit the packet of telnet access (port no. 23) of source IP address 210.123.2.1 and
destination IP address 168.126.11.1
(conf)# filter in 30 block tcp dst 168.126.10.1/32:23
=> Block the packet of telnet access (port no. 23) of source IP address 168.126.10.1
(conf)# filter in 40 block tcp dst 168.126.11.1/32:23
=> Block the packet of telnet access (port no. 23) of IP address 168.126.11.1
(conf)# filter in 50 pass src 0.0.0.0/0 dst 0.0.0.0/0
=> Admit all packets unsatisfied by the above conditions of the filter. Unless these
settings are made all packets which don’t satisfy the above conditions will be blocked.
Step2:
Verifying the filters.
(conf)# show filter
fid
flag
source address block
destination address block
------------------------------------------------------------------------
I-10
tcp =O
210.123.2.1
/32
168.126.10.1
/32:
23
I-20
tcp =O
210.123.2.1
/32
168.126.11.1
/32:
23
I-30
tcp =X
168.126.10.1
/32:
23
I-40
tcp =X
168.126.11.1
/32:
23
I-50
=O
(conf)#
Step3:
Applying the filters to the interface.
(conf)# filter port lan
=> Apply the filter function to the packet to the LAN interface.
