Patton electronics 3095, Справочное руководство администратора

Страница: 92 / 200

11 • Filter IP mDSL DACS Administrators’ Reference Guide
90 Introduction
Introduction
The DACS software provides an IP filtering system that enables you to set up security for the internal manage-
ment system.
Each filter is a defined list of parameters based upon attributes in the IP, TCP, and UDP headers. There are two
major steps to filter creation: first defining the filter, then applying it to a user connection. The same filter can
be shared by several users.
The DACS enables 20 separate filters to be defined, of which up to 10 can be used during a single user connec-
tion. Since the IP connections in the 3095 are only for the superuser and the monitor user, these will be the
only two users. The application of the filters is done on the Filter IP main web page.
Click on Filter IP under the Configuration Menu to display the FIlter IP main window (see figure 25).
Figure 25. Filter IP main window
Defining a filter
This section gives a brief summary on defining a filter. For a complete discussion with filter examples, see the
final section.
To define a new filter, enter an ID number (filterIpId) and a name (filterIpName), then click on the
Submit
Query button to submit the request. The ID number and name must not already exist in the IP FILTER list,
and the number must be an integer between 1 and 20. To delete a filter, enter just the ID number without a
name and click on the
Submit Query button.
Note Block filters take priority, therefore any applied and matching block
filters will drop the packet. Next, pass filters are examined, if PASS fil-
ters have been defined, then at least one of them must match or else
the packet will be dropped. After the block and pass filters are exam-
ined, the WRAP filter, if it exists, will be applied.