Patton electronics Access Server, Administrator'S Reference Manual

Page: 133 / 262

Defining a filter 133
Access Server Administrators’ Reference Guide 12 • Filter IP
• equal(1)—The port in the source IP packet is the same
• lessThan(2)—The port in the source IP packet is less than
• greaterThan(3)—The port in the source IP packet is greater than
Destination Port (filterIpDestinationPort)
Specifies the destination port number which the access server compares. The destination action will determine
how the destination port is treated.
• noCompare(0)—No Comparison to the destination port in the IP packet.
• equal(1)—The port in the destination IP packet Is the same
• lessThan(2)—The port in the destination IP packet is less than
• greaterThan(3)—The port in the destination IP packet is greater than
Action (filterIpDestinationPortCmp)
Specifies the action (TCP or UDP) which the access server compares. The destination action will determine
how the destination port is treated.
• noCompare(0)—No Comparison to the destination port in the IP packet.
• equal(1)—The port in the destination IP packet Is the same
• lessThan(2)—The port in the destination IP packet is less than
• greaterThan(3)—The port in the destination IP packet is greater than
Protocol (filterIpProtocol)
Specifies the IP Protocol number to use for filtering. Some examples of protocol numbers are 1 for ICMP; 6
for TCP; and 17 for UDP. A list of protocol numbers can be found in RFC 1340. A setting of 0 disables pro-
cessing based on protocol number.
TCP Established (filterIpTcpEstablished)
Specifies whether the filter should match only only those packets which indicate in the TCP header flags that
the connection is established. The following choices are available:
• anyPackets(0)—Applies the filter to all packets
• onlyEstablishedConnections(1)—Only applies the filter to established TCP connections
Default for dialin (filterIpDefaultDialin)
This option applies the filter to as a default filter for all dial-in users. If another filter is specified, either in
RADIUS or in the static user profiles, then all dial-in defaults are disabled and only the specified filters are
applied. The following choices are available:
• no(0)
• applyToDialin(1)