Telindus 1031, User And Reference Manual

Page: 251 / 394

Telindus 1031 Router Chapter 10
Reference manual Configuration attributes
241
telindus1031/management/accessList
Use this attribute to control the access from certain hosts or networks.
The access list filters incoming traffic, based on the source IP address. You can specify multiple entries
within the access list. When more than one entry applies to the same packet, then only the most specific
one is taken in consideration. I.e. the entry covering the smallest range. If not one entry matches, then
the packet is dropped. If the access list is empty, then all packets are forwarded.
The accessList table contains the following elements:
If you specify one entry or multiple entries for which the action is set to deny, then also specify at least
one entry for which the action is set to allow. Else all packets are dropped!
Example 1
This example shows an access list that only allows
traffic from subnet 192.168.48.0, except for packets
from station 192.168.48.10.
Example 2
The next example shows an access list that allows all
traffic, except the traffic from subnet 192.168.48.0.
The second entry is the rule to add if you want all pack-
ets that do not match the previous entries to be
allowed.
Element Description
sourceAddress
Use this element to set the IP source address of the
packet. The address may be a (sub)network address.
mask Use this element to set the IP subnet mask for the
sourceAddress . By combining an IP address with a
mask you can uniquely identify a range of addresses.
action Use this element to set the action when a packet
arrives with a source IP address that falls within the
specified address range.
The possible actions are:
Default:<empty>
Range: table, see below
Default:0.0.0.0
Range: up to 255.255.255.255
Default:255.255.255.255
Range: up to 255.255.255.255
Default:deny
Range: enumerated, see below
Value Description
deny The packet is dropped.
allow The packet is forwarded.