Comtrend Corporation ct-5611, Руководство пользователя

Страница: 75 / 80

74
The WAN interface on which these rules apply needs to be selected by the user.
Examples:
1. Filter Name : In_Filter1
Protocol : TCP
Source Address : 210.168.219.45
Source Subnet Mask : 255.255.0.0
Source Port : 80
Dest. Address :NA
Dest. Sub. Mask : NA
Dest. Port : NA
Selected WAN interface: mer_0_35/nas_0_35
This filter will ACCEPT all TCP packets coming from WAN interface
mer_0_35/nas_0_35 with IP Address/Sub. Mask 210.168.219.45/16 having a
source port of 80 irrespective of the destination. All other incoming packets on
this interface are DROPPED.
2.
Filter Name : In_Filter2
Protocol : UDP
Source Address : 210.168.219.45
Source Subnet Mask : 255.255.0.0
Source Port : 5060:6060
Dest. Address :192.168.1.45
Dest. Sub. Mask : 255.255.255.0
Dest. Port : 6060:7070
This rule will ACCEPT all UDP packets coming from WAN interface
mer_0_35/nas_0_35 with IP Address/Sub.Mask 210.168.219.45/16 and a
source port in the range of 5060 to 6060, destined to 192.168.1.45/24 and a
destination port in the range of 6060 to 7070. All other incoming packets on this
interface are DROPPED.
MAC Layer Filtering:
These rules help in the filtering of traffic at the Layer 2. MAC Filtering is only
effective on ATM PVCs configured in Bridge mode. After a Bridge mode PVC is
created, navigate to Advanced Setup -> Security -> MAC Filtering web page.
Global Policy:
When set to Forwarded the default filter behavior is to
Forward all MAC layer frames except those explicitly stated in the rules.
Setting it to Blocked changes the default filter behavior to Drop all
MAC layer frames except those explicitly stated in the rules.
To setup a rule:
Protocol Type: Can be either PPPoE, IPv4, IPv6, AppleTalk, IPX, NetBEUI, IGMP.
Destination MAC Address: Of the form, XX:XX:XX:XX:XX:XX. Frames with
this particular destination address will be Forwarded/Dropped depending on
whether the Global Policy is Blocked/Forwarded.