ZyXEL Communications 641 manual 1 TCP/IP Filter Rule, Protocol and Device Filter Sets

Page 83

Prestige 641 ADSL Internet Access Router

and port number before NAT/SUA for outgoing packets and after NAT/SUA for incoming packets. On the other hand, the generic, or device filters are applied to the raw packets that appear on the wire. They are applied at the point when the Prestige is receiving and sending the packets; i.e. the interface. The interface can be an Ethernet, or any other hardware port. The following diagram illustrates this.

Incoming

Device

Filters

Interface

Outgoing

Device

Filters

S U A

S U A

Incoming

Protocol

Filters

Outgoing

Protocol

Filters

Route

Figure 8-3 Protocol and Device Filter Sets

8.4.1 TCP/IP Filter Rule

This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fields in the IP and the upper layer protocol, e.g., UDP and TCP, headers.

To configure a TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press Enter to open Menu 21.1.1 - TCP/IP Filter Rule, as shown next.

Filter Configuration

8-5

Image 83

Contents Prestige Trademarks Adsl Internet Access Router CopyrightDisclaimer Federal Communications Commission FCC Interference Statement ZyXEL Limited Warranty Mail Customer SupportTable of Contents Chapter Internet Access Chapter Remote Node TCP/IP Configuration 10-1 Index List of Figures Internet Access Application1-3Xii List of Figures Xiii List of Tables List of Tables Preface About Your Adsl Internet Access RouterAdvanced Applications Chapters Structure of this ManualWhat is ADSL? What is DSL?Features of the Prestige Prestige 641 Adsl Internet Access RouterNetworking Compatibility NAT/SUA for single-IP-address Internet AccessMultiple Protocol Support Dhcp SupportInternet Single User Account Internet Access`Applications for the Prestige LAN to LAN ApplicationLAN-to-LAN Application Front Panel LED Description Hardware Installation & Initial SetupFront Panel LEDs of P641 Prestige 641 Rear Panel and ConnectionsPrestige 641 Rear Panel Additional Installation RequirementsTelephone Microfilters HousingInitial Screen Power On Your PrestigePower-On Display Entering PasswordOperation Press/read Description Main Menu CommandsNavigating the SMT Interface Menu Title Description System Management Terminal Interface SummaryMain Menu Summary Filename conventions Changing the System PasswordResetting the Prestige Menu 1 General Setup General SetupYes/No Ethernet SetupGeneral Setup Menu Fields Field Description ExampleGeneral Ethernet Setup Protocol Dependent Ethernet SetupPage IP Address and Subnet Mask Internet AccessFactory Ethernet Defaults TCP/IP ParametersDNS Server Address RIP SetupDhcp Configuration IP Pool SetupRoute IP Setup Relay TCP/IP Ethernet Setup and DhcpDhcp Ethernet Setup Menu Fields NoneLANs, WANs and the Prestige LANs & WANsVC-based multiplexing TCP/IP Ethernet Setup Menu FieldsVPI & VCI Multiplexing3 PPP Internet Access ConfigurationEncapsulation PPP over EthernetInternet Account Information RFC 1483 or Description Options/E.GMyISP PPPoE, PPPSingle User Account Single User Account Topology Advantages of SUAMenu 4 Internet Access Setup for Single User Account Single User Account ConfigurationField Description Configuring a Server behind SUAMultiple Servers behind SUA Single User Account Menu FieldsServices vs. Port number Multiple Server ConfigurationRemote Node Profile Remote Node ConfigurationRemote Node Setup Scene 3. Multiple VCs Encapsulation & Multiplexing ScenariosScene 1. One VC, Multiple Protocols Scene 2. One VC, One Protocol IPRFC Remote Node Profile Menu FieldsField Description Options PPP oEYes or No Outgoing Authentication ProtocolEditing PPP Options Yes thenOff Remote Node FilterRemote Node PPP Options Menu Fields On/OffMenu 11.5 Remote Node Filter Editing TCP/IP Options Remote Node TCP/IP ConfigurationLAN-to-LAN Application LLC-based multiplexing VC-Based MultiplexingField Description Option Remote NetworkLocal Network TCP/IP related fields in Remote Node ProfileStatic/ Dynamic TCP/IP Remote Node ConfigurationExample of Static Routing Topology Static Route SetupMenu 12 IP Static Route Setup Edit IP Static Route Menu Fields Page Frame Types IPX ConfigurationIPX Network Environment Network and Node NumberInternal Network Number Prestige 641 in an IPX EnvironmentExternal Network Number Prestige 641 on LAN without Server Prestige 641 on LAN with ServerEthernet IPX Ethernet SetupNovell IPX Ethernet Setup Fields LAN-to-LAN Application with Novell IPX LAN-to-LAN Application with Novell IPXIPX Remote Node Setup 00000000 Remote Node Novell IPX OptionsMenu 12.2 Edit IPX Static Route IPX Static Route SetupEdit IPX Static Route Menu Fields Page Bridging in General Bridging SetupBridge Ethernet Setup Client Remote Node Bridging SetupBridge Ethernet Setup Menu Handle IPX Field Configuration Handle IPX Field Description Options Menu NoneP641 Remote Node Network Layers Menu Bridge Options Menu 11.3 Remote Node Bridging OptionsMenu 12.3 Bridge Static Route Setup Bridge Static RouteSetupBridge Static Route Menu Fields Page About Filtering Filter ConfigurationConfiguring a Filter Set Filter Rules Summary Menu Menu 21 Filter Set ConfigurationRefers to Action Not Matched Abbreviations Used in the Filter Rules Summary MenuAbbreviations Description Display Action Not Matched will be N/A Refers to Action MatchedAbbreviations Used If Filter Type Is GEN Configuring a Filter RuleFilter Types and SUA Abbreviations Used If Filter Type Is IPProtocol and Device Filter Sets 1 TCP/IP Filter RuleEqual/Not Equal TCP/IP Filter Rule Menu FieldsNone/Less/Greater Check Next Rule Yes / N/AAction Matched Action Not MatchedMenu 21.1.2 Generic Filter Rule Generic Filter RuleGeneric Filter Rule Menu Fields Menu 21.1.3 IPX Filter Rule Novell IPX Filter RulePopular types are in hexadecimal IPX Filter Rule Menu FieldsRemote Node Filters Applying a FilterEthernet traffic About Snmp Snmp ConfigurationConfiguring Snmp Field Description Default Snmp Configuration Menu FieldsMenu 24 System Maintenance System MaintenanceSystem Status Menu 24.1 System Maintenance StatusWait for Init or Initializing System Maintenance Status Menu FieldsPPP, LLC, VC-IP, VC-IPX, or VC-BR Terminal Speed Modified in Menu 1 General SetupLog and Trace Viewing Error LogSyslog And Accounting Examples of Error and Information MessagesParameter Description System Maintenance Menu Syslog ParametersMenu 24.4 System Maintenance Diagnostic DiagnosticSystem Maintenance Menu Diagnostic Backup ConfigurationRestore Configuration Firmware UpdateUpload Router Firmware Uploading Router Configuration FileCommand Interpreter Mode 12 Command mode Boot module commandsPrestige 641 Adsl Internet Access Router System Maintenance Page Problem Corrective Action TroubleshootingProblems Starting Up the Prestige Troubleshooting the Start-Up of your PrestigeProblems Connecting to a Remote Node or ISP Problems With the WAN InterfaceProblems with the LAN Interface Acronyms and Abbreviations Appendix a Adsl Modem Diagram 1 Single-PC per Modem Hardware ConfigurationAppendix a PPP over EthernetPrestige Diagram 2 Prestige as a PPPoE ClientAppendix B Diagram 3 VPIs & VCIsEnhanced Syslog Appendix CIPX IndexSnmp Syslog And Accounting