Patton electronics 6511RC, Administrator'S Reference Manual

Page: 82 / 170

9 • IP Filtering Model 6511RC Matrix Switch Administrators’ Reference Guide
72 Introduction
Introduction
The access server software provides an IP filtering system that enables you to set up security as well as to provi-
sion services for selected customers. While IP filters are typically thought of as a security measure, many pro-
viders wish to limit some services a customer may have access to. These could include such things as limited
access only to an e-mail server or proxy server. IP filters also include the ability to encapsulate all packets
received on the specified dialup link in an extra IP header using RFC 2003. This would allow packets on a dial-
up link to be tunneled to a specific host.
Each filter is a defined list of parameters based upon attributes in the IP, TCP, and UDP headers. There are two
major steps to filter creation: first defining the filter, then applying it to a user connection. The same filter can
be shared by several users.
The access server enables 20 separate filters to be defined, of which up to 10 can be used on a single user con-
nection. A single filter can be assigned to a user via the Static Users Authentication. Multiple filters can be
assigned by using the RADIUS Filter-Id attribute.
Filters can be configured with default settings that are used for all dial-in sessions. If any filters are applied
through either RADIUS or the Static User filter parameter, then all of the dial-in defaults will be disabled and
only the specified filters will be applied.
Click on Filter IP under the Configuration Menu to display the IP Filtering Overview main window (see
figure 37 ). The following sections describe each of the parameters found in the IP Filtering Overview main win-
dow.
Figure 37. IP Filtering Overview main window
Defining a filter
To define a new filter, select a number and a name, then click on the Define button to submit the request. The
number and name must not already exist in the IP FILTER list, and the number must be an integer between 1
and 20. To delete a filter, enter just the ID number without a name and click on the Define button.