12 • Filter IP
Access Server Administrators’ Reference Guide
132
Defining a filter
Action (filterIpAction)
Specifies the action to take on a packet whether to block or pass the packet. The following options are avail-
able:
•
pass(0)—If pass is selected, checking will continue on to other filters until either a match occurs, a block
occurs, or there are no more filters remaining to check.
Note
If there are any applied PASS filters, then at least one of them must
match or the packet will be dropped.
•
block(1)—If a filter has block set and the filter matches the block, the packet is discarded and no further
processing is done.
•
wrap(2)—All packets received on the specified dialup link will be encapsulated in an extra IP header as
defined in RFC2003. The destination IP address of the wrapper is given by the destination IP setting in the
filter. The source IP address of the wrapper is the ethernet address of the remote access server.
All wrap filters are inbound only.
Source IP (filterIpSourceIp)
This is the Source IP address in the IP header, it is used when comparing a packet’s source address. Bit posi-
tions that are set to 1 will be compared and 0’s will be ignored. Thus, a setting of 0.0.0.0 will have the effect of
disabling source IP address comparison.
Source IP Mask (filterIpSourceMask)
This is the Source IP Mask (filterIpSourceMask) used when comparing a packet’s source address. Bit positions
that are set to 1 will be compared and 0’s will be ignored. Thus, a setting of 0.0.0.0 will have the effect of dis-
abling source IP address comparison.
Destination IP (filterIpDestinationIp)
This is the destination IP address in the IP header used when comparing a packet’s destination address. Bit
positions that are set to 1 will be compared and 0’s will be ignored. Thus, a setting of 0.0.0.0 will have the
effect of disabling destination IP address comparison.
Destination Mask (filterIpDestinationMask)
This is the destination mask used when comparing a packet’s destination address. Bit positions that are set to 1
will be compared and 0’s will be ignored. Thus, a setting of 0.0.0.0 will have the effect of disabling destination
IP address comparison.
Source Port (FilterIpSourcePort)
Specifies the source port number (TCP or UDP) that the access server compares. The source port action will
determine how the source port is treated.
Action (filterIpSourcePortCmp)
Specifies the Action (filterIpSourcePortCmp) that the access server compares. The source port action will deter-
mine how the source port is treated.
•
noCompare(0) – No Comparison to the source port in the IP packet.
Summary of Contents for Access Server
Page 24: ...Contents Access Server Administrators Reference Guide 24 ...
Page 28: ...About this guide Model 2960 RAS Getting Started Guide 28 ...
Page 58: ...5 Authentication Access Server Administrators Reference Guide 58 Static User Authentication ...
Page 94: ...7 Dial In Access Server Administrators Reference Guide 94 Dial In User Statistics window ...
Page 110: ...8 Dial Out Access Server Administrators Reference Guide 110 Dial Out User Statistics window ...
Page 134: ...12 Filter IP Access Server Administrators Reference Guide 134 Defining a filter ...
Page 174: ...17 MFR Version 2 Access Server Administrators Reference Guide 174 ...
Page 184: ...17 MFR Version 2 Access Server Administrators Reference Guide 184 MFR Version 2 Modify ...
Page 190: ...18 RIP Version 2 Access Server Administrators Reference Guide 190 RIP Version 2 Statistics ...
Page 196: ...19 SNMP Access Server Administrators Reference Guide 196 Out ...
Page 248: ...23 TCP Access Server Administrators Reference Guide 248 TCP Details ...
Page 252: ...24 UDP Access Server Administrators Reference Guide 252 Introduction ...
Page 258: ...26 License Access Server Administrators Reference Guide 258 End User License Agreement ...