Perle 833IS, Руководство пользователя

Страница: 126 / 340

IP Filter
110 Perle 833IS User Guide
Filters will be used by the Perle 833IS Server in the following way:
1. The user record for the dial-in user will be checked. If the record has been
configured to Disable Server Filters, then only the user assigned filters will be
checked. Proceed to point 4.
2.
Incoming data packets are compared with the filters assigned to the server
starting with the first filter in the Server Filter Assignment list. As soon as the
packet matches one of the filters, then the packet is accepted or rejected and no
further checking is done.
3.
If the packet does not match any of the filters assigned to the server, then the user
record will be checked. If there are no user assigned filters, then the server default
action will be carried out to accept or reject the packet and no further checks are
done.
4. The incoming data packet will be compared to the filters assigned to the user,
starting with the first filter in the User Filter Assignment list. As soon as the
packet matches one of the filters, then the packet will be accepted or rejected.
5.
If the packet does not match any user assigned filters, then the user default action
will be carried out to accept or reject the packet.
Packet filtering works in conjunction with the RADIUS and Shared User Database
security systems.
Shared User Database
Filters can be configured and assigned to a user record on the Remote Perle 833IS.
These records will be sent to the Local Perle 833IS when a user dials in and makes a
connection.
RADIUS
To use packet filtering with the RADIUS security server:
1. Define the filters on the Perle 833IS Server.
2. Configure the user record on the RADIUS server with the names of the filters to
be assigned to the User.
3. When a user dials into the Perle 833IS, the name of the filters will be sent from
the RADIUS server to the Perle 833IS.
Filter Definition
Up to 50 filters can be assigned for the IP protocol. IP filters can specify the Address,
Mask, Sub-Protocol and Port of the IP packet. The filters can accept or reject