Cerio OW-200N2, Руководство пользователя

Страница: 228 / 290

User’s Manual
500mW eXtreme Power 11Na Outdoor Bridge
228
All packets are allowed by default. Deny rules could be added to the filter list to filter out unwanted packets and
leave remaining allowed.
Click “ Save ” button to add IP filter rule. Total of 20 rules maximum allowed in the IP Filter List. All rules can be edited
or removed from the List. Click Reboot button to activate your changes.
When you create rules in the IP Filter List, the prior rules maintain higher priority. To allow limited access from a
subnet to a destination network manager needs to create allow rules first and followed by deny rules. So, if you just
want one IP address to access the system via telnet from your subnet, not others, the Example 1 demonstrates it, not
rules in the Example 2.
Î
Î
Example 1 : Create a higher priority rule to allow IP address 192.168.2.2 Telnet access from LAN port first,
and deny Telnet access from remaining IP addresses in the same subnet.
Source Destination
Rule
IP/Mask Port IP/Mask Port
In/Out Protocol Listen Action Side
1 192.168.2.2/32 192.168.2.254/32 22 In TCP n Pass LAN
2 192.168.2.0/24 192.168.2.254/32 22 In TCP n Deny LAN
Î
Example 2 : All Telnet access to the system from the IP addresses of subnet 192.168.2.x works with the rule
1 of Example 2. The rule 2 won’t make any difference.
Source Destination
Rule
IP/Mask Port IP/Mask Port
In/Out Protocol Listen Action Side
1 192.168.2.0/24 192.168.2.254/32 22 In TCP n Deny LAN
2 192.168.2.2/32 192.168.2.254/32 22 In TCP n pass LAN