Cambium Networks PMP 450 AP, Планирование и руководство по установке

Страница: 180 / 287

Chapter 3: System planning Security planning
Page
3-50
• To block a subscriber from using FTP, you can filter Ports 20 and 21 (the FTP ports) for both the
TCP and UDP protocols.
• To block a subscriber from access to SNMP, you can filter Ports 161 and 162 (the SNMP ports) for
both the TCP and UDP protocols.
Protocol and Port Filtering with NAT Disabled
Where NAT is disabled on the SM/BHS, the filtering can be enabled for both protocols and the three
user-defined ports. Using the check boxes on the interface, it can be either:
• Allow all protocols except those that user wish to block.
•
Block all protocols except those that user wish to allow.
Allow or block any of the following protocols:
• PPPoE (Point to Point Protocol over Ethernet)
• Any or all the following IPv4 (Internet Protocol version 4) protocols:
o
SMB (Network Neighborhood)
o
SNMP
o
Bootp Client
o
Bootp Server
o
Up to 3 user-defined ports
o
All other IPv4 traffic (see Figure 29 )
•
Any or all of the following IPv6 (Internet Protocol version 6) protocols:
o
SMB (Network Neighborhood)
o
SNMP
o
Bootp Client
o
Bootp Server
o
Up to 3 user-defined ports
o
All other IPv6 traffic (see Figure 29)
• Filter Direction – Upstream and Downstream
•
ARP (Address Resolution Protocol)
Figure 61 Categorical protocol filtering
Note
In only the SNMP case, filtering occurs before the packet interacts with the protocol stack.