Perle Systems IOLINK-520 manual IP Router Pattern Filtering, IPX Router Pattern Filtering

Page 76

Programmable Filtering

IP Router Pattern Filtering

Pattern filtering may be used on any portion of the IP frame. IP pattern filtering behaves the same as bridge pattern filtering, except the start of the IP frame is offset 0, because the IP router function of the bridge/router handles only the IP frame itself.

IP pattern filtering may use any combination of filtering operators as described in the bridge pattern filters.

Protocol Discrimination

Protocol discrimination may be required to prevent or limit the protocols within an IP frame that may traverse a routed Local Area Network.

In Local Area Networks, there may be many different Transport layer protocols that coexist within the IP Network layer. TCP, UDP, and ICMP are just a few of the common protocols in use today. Each of these protocols is encapsulated within an IP frame, and therefore is subject to the IP routing function. If you would like to discriminate against a particular protocol to prevent its usage of the routed LAN facilities the IOLINK-PRO & 520 Router provides programmable filter masks that may be defined to act on any part of the IP frame.

The IP Router Filter Patterns menu is located under the Filter Set-Up Menu. Within the IP Router Filter Patterns Menu there exists a Help function that can be used as a reference during IP Router Filter Pattern creation. This Help function includes all of the logical operators that may be applied to the mask expression.

IPX Router Pattern Filtering

Pattern filtering may be used on any portion of the IPX frame. IPX pattern filtering behaves the same as bridge pattern filtering, except the start of the IPX frame is offset 0, because the IPX router function of the bridge/router handles only the IPX frame itself.

IPX pattern filtering may use any combination of filtering operators as described in the bridge pattern filters.

The IPX Router Filter Patterns menu is located under the Filter Set-Up Menu. Within the IPX Router Filter Patterns Menu, there exists a Help function that can be used as a reference during IPX Router Filter Pattern creation. This Help function includes all of the logical operators that may be applied to the mask expression.

IOLINK-PRO & 520 Reference Manual — B.13

Image 76
Contents Reference Manual IOLINK-PRO & 520 Routers IP Routing and the IOLINK-PRO & 520 RoutersProxy ARP ARP-Address Resolution ProtocolComplete IP Connection IOLINK-PRO & 520 Reference Manua IP Header Details ProtocolTime to live Header ChecksumIcmp Messages OptionsUnreachable RedirectPing Time and Mask serverRIP-Routing Information Protocol Update MechanismRoute Tables IPX Routing and The IOLINK-PRO & 520 Routers IPX AddressingNetwork Layer Addressing vs. MAC Addressing IPX Address FormatOther IPX Header Information IPX HeaderEstablishing an IPX Connection Service Advertisement ProtocolSAP Broadcasts Server Types Routing Information ProtocolSAP Requests RIP/X OperationRIP/X Requests Bridging and the IOLINK-PRO & 520 RoutersRIP/X Metrics Initial Bridging Process Station Address LearningAging Timer Address PurgingFilled Address Table Aging ExceptionTelnet Iolink Router Feature DefinitionsLink Compression Introduction WAN Topologies Bandwidth On DemandPoint-to-Point MultipointTime of Day Connect Application Operating Software Upgrades Disaster Recovery Backup LinkIsdn Single Active Link & Dual Active Link Wide Area Network Topologies Supported Iolink PRO & 520 Isdn Connection ManagementCall Establishment Methods Isdn Connection Management Auto-Call Time-of-Day ConnectionsAddress Connect Manual CallConnection Process CombinationIdle Timer Protocol AwarenessSuspension Process Interesting TrafficSession Keepalive Messages Termination ProcessIP Specifics IP Address ConnectSuspension of TCP/IP Sessions RIP-Routing Information ProtocolIPX Specifics RIP/IPX and SAP/IPXSuspension of IPX Sessions IPX Serialization FramesModule Identification Pinout InformationLink Clocking Information ATL CSU/DSU Link Module Information Link Interfaces ReferenceConsole Pinouts CSU/DSU Module T1/E1 Module24 & RS232C Link Pinouts RS232 Link Pinouts11 & X.21 Link Pinouts DB15 Female DTE Direction Contact Circuits From NumberRS442 & RS530 Link Pinouts DB25 Female DTE Direction Contact Circuit From Number NameDB25 Link PinoutsNumber Name RS232 Null-Modem Cable Configuration 11 RS232 Null-Modem CableNull-Modem Cable Configuration 12 V.35 Null-Modem CableRS530 Null-Modem Cable Configuration 13 RS530 Null-Modem CableRS530 To RS449 Conversion Cable 14 RS530 to RS449 Conversion Cable11/X.21 Null-Modem Cable Configuration 15 V.11/X.21 Null-Modem CableWAN Link Control-Signal Operation Appendix a Event Logs Event logsEvent Logs IOLINK-PRO & 520 Reference Manual A.3 Event Logs IOLINK-PRO & 520 Reference Manual A.5 Event Logs IOLINK-PRO & 520 Reference Manual A.7 Event Logs Alarm Logs Event Logs IOLINK-PRO & 520 Reference Manual A.11 Event Logs IOLINK-PRO & 520 Reference Manual A.13 Event Logs IOLINK-PRO & 520 Reference Manual A.15 Event Logs IOLINK-PRO & 520 Reference Manual A.17 Event Logs IOLINK-PRO & 520 Reference Manual A.19 PPP Security Logs MAC Address Filtering SecurityProgrammable Filtering Security-Filter if DestinationSecurity-Filter if Source Security-Forward if Destination Security-Forward if Source Programmable Filtering Bridge Pattern Filtering Pattern Filter OperatorsProtocol Discrimination Protocol Type Field Internet Protocol IPFilter all IP Packets IP, and no moreTransport Control Protocol / Internet Protocol TCP/IP Filter only TCP/IPFilter all IP without TCP traffic Filter all except TCP/IPBandwidth Conservation Filter all DECEthernet Broadcasting Ethernet MulticastingInternet Addresses General RestrictionsEthernet Station Addresses Mask Combinations Mask would be 6-010203040506&12-0800&23-06 ExampleIP Router Pattern Filtering IPX Router Pattern FilteringPage Appendix C Frame Formats Octet Locations on an IP Routed TCP/IP Frame IOLINK-PRO & 520 Reference Manual C.3