Etic Telecom RAS Series, Руководство по установке

Страница: 56 / 74

SETUP
Page 56
DOC_DEV_Router setup guide_A
16.2 Main filter
16.2.1 Main filter organisation
•
Main filter structure
For a better organisation, the main filter is divided in two tables; both having the same structure.
The “VPN” filter : It filter s the packets transmitted inside the VPNs.
The “WAN” filter : It filters the packets transmitted outside the VPNs
Each of that two filters is made of
a filter policy
and
a filter table each line of which is a filter rule
•
Main filter default policy
The default policy is the decision which will be applied if a packet does not match any of the rules of the
filter.
The WAN to LAN and the LAN to WAN traffic are regarded separately because the decision can be opposite
for a packet coming from the WAN or coming from the LAN :
WAN to LAN : Th
e default policy can be “Accept” or “drop”.
LAN to WAN : The default policy can also be “Accept” or “drop”.
For instance, if the default policy assigned the WAN to LAN traffic is “drop”, it means that an IP packet which
does not match any of the rules of the main filter will be rejected.