ZyXEL Communications Prestige 662HW Series, Руководство пользователя

Страница: 323 / 458

Prestige 662HW Series User’s Guide
Filter Configuration 33-13
Figure 33-13 Menu 21.1.6.1 Sample Filter Rules Summary
33.7 Applying Filters and Factory Defaults
This section shows you where to apply the filter(s) after you design it (them). Sets of factory default
filter rules have been configured in menu 21 (but have not been applied) to filter traffic.
Table 33-5 Filter Sets Table
FILTER SETS DESCRIPTION
Input Filter Sets: Apply filters for incoming traffic. You may apply protocol or device
filter rules. See earlier in this chapter for information on filters.
Output Filter Sets: Apply filters for traffic leaving the Prestige. You may apply filter rules
for protocol or device filters. See earlier in this section for
information on types of filters.
Call Filter Sets: Apply filters to decide if a packet should be allowed to trigger a call.
33.7.1 Ethernet Traffic
You seldom need to filter Ethernet traffic; however, the filter sets may be useful to block certain
packets, reduce traffic and prevent security breaches. Go to menu 3.1 (shown next) and type the
number(s) of the filter set(s) that you want to apply as appropriate. You can choose up to four filter
sets (from twelve) by typing their numbers separated by commas, for example, 3, 4, 6, 11. The factory
Menu 21.1.6 - Filter Rules Summary
# A Type Filter Rules M m n
- - ---- --------------------------------------------------------------- - - -
1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F
2 N
3 N
4 N
5 N
6 N
M = N means an action can be taken immediately.
The action is to drop the packet ( m = D ) if the
action is matched and to forward the packet
immediately ( n = F ) if the action is not matched no
matter whether there are more rules to be
checked (there aren’t in this example).
This shows you that you have
configured and activated ( A = Y ) a
TCP/IP filter rule ( Type = IP , Pr = 6 )
for destination telnet ports ( DP =
23 ).