Patton electronics Access Server, Administrator'S Reference Manual

Page: 130 / 262

12 • Filter IP Access Server Administrators’ Reference Guide
130 Introduction
Introduction
The access server software provides an IP filtering system that enables you to set up security as well as to provi-
sion services for selected customers. While IP filters are typically thought of as a security measure, many pro-
viders wish to limit some services a customer may have access to. These could include such things as limited
access only to an e-mail server or proxy server. IP filters also include the ability to encapsulate all packets
received on the specified dialup link in an extra IP header using RFC 2003. This would allow packets on a dial-
up link to be tunneled to a specific host.
Each filter is a defined list of parameters based upon attributes in the IP, TCP, and UDP headers. There are two
major steps to filter creation: first defining the filter, then applying it to a user connection. The same filter can
be shared by several users.
The access server enables 20 separate filters to be defined, of which up to 10 can used during a single user con-
nection. A single filter can be assigned to a user via the Static Users Authentication. Multiple filters can be
assigned by using the RADIUS Filter-Id attribute.
Filters can be configured with default settings that are used for all dial-in sessions. If any filters are applied
through either RADIUS or the Static User filter parameter, then all of the dial-in defaults will be disabled and
only the specified filters will be applied.
Click on
Filter
IP under the
Configuration Menu
to display the
FIlter IP
main window (see figure 38).
Figure 38. Filter IP main window
Defining a filter
To define a new filter, select a number and a name, then click on the
Submit Query
button to submit the
request. The number and name must not already exist in the IP FILTER list, and the number must be an inte-
ger between 1 and 20. To delete a filter, enter just the ID number without a name and click on the
Submit
Query
button.