Digi Connect IT 16, Руководство пользователя

Страница: 564 / 756

Firewall Packet filtering
Digi Connect IT® 16/48 User Guide 564
Packet filtering
By default, one preconfigured packet filtering rule, Allow all outgoing traffic , is enabled and
monitors traffic going to and from the Connect IT 16/48 device. The predefined settings are intended
to block unauthorized inbound traffic while providing an unrestricted flow of outgoing data. You can
modify the default packet filtering rule and create additional rules to define how the device accepts or
rejects traffic that is forwarded through the device.
Configure packet filtering
Required configuration items
n
The action that the packet filtering rule will perform, either Accept , Reject , or Drop .
n
The source firewall zone: Packets originating from interfaces on this zone will be monitored by
this rule.
n
The destination firewall zone: Packets destined for interfaces on this zone will be accepted,
rejected, or dropped by this rule.
Additional configuration requirements
n
A label for the rule.
n
The IP version to be matched, either IPv4 , IPv6 , or Any .
n
The protocol to be matched, one of:
l
TCP
l
UDP
l
ICMP
l
ICMP6
l
Any
To configure a packet filtering rule:

WebUI
1. Log into the Connect IT 16/48 WebUI as a user with full Admin access rights.
2. On the menu, click System . Under Configuration , click Device Configuration .
The Configuration window is displayed.