
19
645M 4G/LTE CELLULAR ROUTER
MN032003EN March 2017 www.eaton.com
ADD CUSTOM IP filters
You can define up to 20 IP filters. Each IP filter is identified by a
unique number (from 1 to 20). Click Add to add the filter to the
Custom IP Filters table. Once all filters have been added, click
Save & Apply to save all changes.
An IP packet goes through the filtering logic:
1. An IP packet is received on one of the interfaces and is
destined to the 645M unit
OR
2. An IP packet is sent by the 645M unit
OR
3. An IP packet is forwarded by the 645M unit.
The filtering logic is the following:
if exists(filter[1]) AND match(packet, filter[1]) then
apply(action[1])
else if exists(filter[2]) AND match(packet, filter[2]) then
apply(action[2])
else if exists(filter[3]) AND match(packet, filter[3]) then
apply(action[3])…
else if exists(filter[20]) AND match(packet, filter[20]) then
apply(action[20])
else process packet normally.
Where:
exists(filter[n]) -> The user as defined filter number n.
match(packet, filter[n]) -> The IP packet matches filter number n.
apply(action[n]) -> The action identified in filter number n.
Each criteria has an Any radio-button that matches all values for
that criteria.
Each criteria has an Exclude check-box that inverts the sense of
the match.
•
Filter number
Each IP filter is identified by a unique number from 1 to 20.
Use Add to create new rules; use Edit to update
existing rules
•
Enabled
Each IP filter can be independently enabled or disabled
•
Source IP address
The source IP Address or subnet that will satisfy this criteria
If the Exclude field is checked, it means that in order for the
packet to match with this criteria, it must NOT have this source
IP address (or NOT be in the given source IP address range).
•
Destination IP address
The destination IP Address or subnet that will match
If the Exclude field is checked, it means that for the packet to
match this filter, it must NOT have this destination IP address
(or NOT be in the given destination IP address range).
3.3.3 IP filtering
Figure 24 . Router – IP filtering
3 645M web interface