ZyXEL Communications Prestige 662HW Series, User Manual

Page: 312 / 458

Prestige 662HW Series User’s Guide
33-2 Filter Configuration
Start
Fetch First
Filter Set
Fetch First
Filter Rule
Active?
Execute
Filter Rule
Fetch Next
Filter Rule
Next filter
Rule
Available?
Fetch Next
Filter Set
Next Filter Set
Available?
Accept Packet Drop Packet
Yes
No
Yes
No
Yes
Packet
intoFilter
Filter Set
Forward
Drop
No
Check
Next
Rule
Figure 33-2 Filter Rule Process
You can apply up to four filter sets to a particular port to block various types of packets. Because each
filter set can have up to six rules, you can have a maximum of 24 rules active for a single port.
For incoming packets, your Prestige applies data filters only. Packets are processed depending on
whether a match is found. The following sections describe how to configure filter sets.
The Filter Structure of the Prestige
A filter set consists of one or more filter rules. Usually, you would group related rules, for example, all
the rules for NetBIOS, into a single set and give it a descriptive name. You can configure up to twelve
filter sets with six rules in each set, for a total of 72 filter rules in the system.