BinTec X3200, Руководство пользователя

Страница: 297 / 419

X3200 User’s Guide 297
Access Security
7
To do Proceed as follows to define filters and rules:
Filters
➤
Go to IP
➧
A
CCESS
L
ISTS
➧
F
ILTERS
.
➤
Add a new entry with ADD or select an existing entry and confirm with Re-
turn to change it.
➤
Enter Description.
➤
Select Protocol.
➤
Enter Source Address, if applicable.
➤
Enter Source Mask, if applicable.
➤
Select Source Port.
➤
Enter Specify Port, if applicable.
➤
Enter Destination Address, if applicable.
➤
Enter Destination Mask, if applicable.
➤
Select Destination Port.
➤
Enter Specify Port, if applicable.
➤
Press SAVE.
➤
Repeat these steps until you have defined all the desired filters.
Ensure that you don’t lock yourself out when configuring the filters. For exam-
ple, if you link the first filter to a rule that executes Action =
Allow M, only what
you have expressly allowed with the filter actually gets through. It may easily
occur that your telnet access to
X3200 is no longer allowed as soon as you
enter the rule and confirm with SAVE.
■
Do not use filters in the LAN interface ( IP
➧
A
CCESS
L
ISTS
➧
I
NTERFACES
➧
E
DIT
First Rule = none) if you access X3200 from the LAN
over telnet.
■
If you access X3200 via the serial interface or ISDN login, at least nothing
can happen to you during configuration.
Do not forget to define a filter, if necessary, for enabling the remaining data
packets (Protocol =
any, Source Port = any, Destination Port = any).