BinTec X3200, Руководство пользователя

Страница: 289 / 419

X3200 User’s Guide 289
Access Security
7
You can define filters in IP
➧
A
CCESS
L
ISTS
➧
F
ILTER
:
Field Meaning
Description Designation of the filter. Note that only the first
10 or 15 characters are visible in other menus.
Index Cannot be changed here. X3200 automatically
issues a number to newly defined filters.
Protocol Defines a protocol. Possible values:
any, icmp, ggp, ip, tcp, egp, igp, pup, chaos,
udp, hmp, xns_idp, rdp, rsvp, gre, esp, ah, tlsp,
skip, kryptolan, iso_ip, igrp, ospf, ipip, ipx_in_ip,
vrrp, l2tp.
any matches any protocol, tcp matches only
TCP data packets, etc.
Connection State If Protocol =
tcp, you can define a filter based
on the status of the TCP connection. Possible
values:
established: All TCP packets that would not
open any new TCP connection on routing over
X3200 match the filter.
any: All TCP packets match the filter.
Type Only if Protocol = icmp. Possible values:
any, echo reply, destination unreachable,
source quench, redirect, echo, time exceeded,
param problem, timestamp, timestamp reply,
address mask, address mask reply.
See RFC 792.
Source / Destination
Address Source and destination IP address of the data
packets that match the filter.
Source / Destination
Mask The combination of Address and Mask defines
a range of IP addresses that match the filter.
Source / Destination
Port Range of port numbers that match the filter.