BinTec X4000, Руководство пользователя

Страница: 337 / 498

X4000 User’s Guide 337
Access Security
10
You can define filters in IP
➧
A
CCESS
L
ISTS
➧
F
ILTER
:
Field Meaning
Description Designation of the filter. Note that only the first
10 or 15 characters are visible in other menus.
Index Cannot be changed here. X4000 automatically
issues a number to new filters defined here.
Protocol Defines a protocol. Possible values:
any, icmp, ggp, ip, tcp, egp, igp, pup, chaos,
udp, hmp, xns_idp, rdp, rsvp, gre, esp, ah, tlsp,
skip, kryptolan, iso-ip, igrp, ospf, ipip, ipx-in-ip,
vrrp, l2tp.
any matches any protocol, tcp matches only
TCP data packets, etc.
Type Only if Protocol = icmp. Possible values:
any, echo reply, destination unreachable,
source quench, redirect, echo, time exceeded,
param problem, timestamp, timestamp reply,
address mask, address mask reply.
See RFC 792.
Connection State If Protocol = tcp, you can define a filter based
on the status of the TCP connection. Possible
values:
■
established: All TCP packets that would not
open any new connection on routing over
X4000 match the filter.
■
any: All TCP packets match the filter.
Source Address Source IP address of the data packets that
matches the filter.
Source Mask Source Netmask. The combination of Source
Address and Source Mask describes a range
of IP addresses that match the filter.
Source Port Source port number or range of source port
numbers that matches the filter.