62
Configuring Protocols
V!CAS
ip.accesslists
This menu displays the IP Access Lists. The V!CAS has an Allow list and
a Deny list based on the mode of the entries configured here. Each entry
specifies an interface to monitor incoming traffic on and defines a set of
IP packets.
IP packets are tested to see if they match deny/allow entries. The de-
cision whether to route the packet is based on the following algorithm
Using Source and Destination Port Numbers
Along with the source and destination addresses, the Internet Protocol
uses source and destination ports numbers, to identify data connections
uniquely. The client side generates a number (xyz) which is used as the
V!CAS Setup Tool
BinTec Communications GmbH
[
IP
][
ACCESS
]
: IP Access Lists
vicas
M (Mode) values are: a (Allow), d (Deny)
Access Lists configured:
M Prt
Int./Partner
Src Address
Src Port
Dst Address
Dst Port
a
tcp
dialup1
any
any
any
any
d
tcp
dialup1
any
any
any
21
d
tcp
dialup1
210.1.2.3/24
any
any
23
d
tcp
dialup1
any
25-103
any
clients
ADD
DELETE
EXIT
IP
A
CCESS
L
ISTS
Allow List
empty?
Deny List
empty?
Match an
Allow entry?
Match a
Deny entry?
Route packet!
Discard packet!
yes
yes
yes
no
no
no
yes
no
Incoming
packet