ADTRAN TOTAL ACCESS 600R, Системное руководство

Страница: 109 / 196

Total Access 600R System Manual Section 4 User Interface Guide
61200600L1-1A © 2002 ADTRAN, Inc. 109
S
ECURITY
> F
ILTERS
> I
NTERFACES
The unit can block packets in and out of an interface by use of the filters. They are set up in two steps:
1) define the types of packets that would be of interest in the
S
ECURITY
> F
ILTERS
> F
ILTER
D
EFINES
menu,
and 2) set up the filter type and combination of defines that will cause a packet block.
S
ECURITY
> F
ILTERS
> I
NTERFACES
(T1[0])
Define the filters for the T1 interfaces from this menu.
S
ECURITY
> F
ILTERS
> I
NTERFACES
(T1[0]) > S
UB
-I
NTERFACE
If the
L2 P
ROTOCOL
is
F
RAME
R
ELAY
, the
SUB
-
INTERFACE
will be
FRE [0.X]
, where the [0.X] represents the
T1 physical and logical ports, respectively. The T1 physical port is always 0. The X represents the Frame
Relay logical port and will always be a number 0-9 corresponding to the interface number under
L2 P
ROTOCOL
> C
ONFIG
> DLCI M
APPING
. This is a read-only field.
If the
L2 P
ROTOCOL
is
PPP
, the
SUB
-
INTERFACE
is
PPP [0.0]
. The [0.0] represents the T1 physical and
logical ports, respectively. This is a read-only field.
S
ECURITY
> F
ILTERS
> I
NTERFACES
(T1[0]) > S
ET
-
UP
Enable the T1 interface filtering and define filters from this menu.
The T1 interface will only appear in the
S
ECURITY
> F
ILTERS
> I
NTERFACE
list if the
L2
P
ROTOCOL
is set to
F
RAME
R
ELAY
or
PPP
.
I
N FROM
VC
The packets which come into the unit can be filtered in three ways:
D
ISABLE
(
DEF
) Turns off packet input filtering. No incoming packets are blocked.
B
LOCK
A
LL
All incoming packets from the WAN are blocked except as defined
in the
S
ECURITY
> F
ILTERS
> I
NTERFACES
> S
ETUP
> I
N
E
XCEPTIONS
list.
F
ORWARD
A
LL
No incoming packets from the WAN are blocked except as defined
in the
S
ECURITY
> F
ILTERS
> I
NTERFACES
> S
ETUP
> I
N
E
XCEPTIONS
list.
I
N
E
XCEPTIONS
This is a list of up to 32 filter entries which can be combined using the operations field. The
operations are performed in the order they appear on the list.