Netopia R7200 manual IPX SAP ﬁlters, Deleting a packet ﬁlter set, Viewing and modifying SAP ﬁlters

Page 175

Security 14-25

3.To add a ﬁlter to the ﬁlter set, select Append Filter to display a table of ﬁlters. Select a ﬁlter from the table and press Return to add it to the ﬁlter set. The default action of newly added ﬁlters is to not forward packets that match their criteria.

To exit the table without adding the ﬁlter, press Escape.

4.To remove a ﬁlter from the ﬁlter set, select Remove Filter to display a table of appended ﬁlters. Select a ﬁlter from the table and press Return to remove it from the set. To exit the table without removing the ﬁlter, press Escape.

5.Select ADD FILTER SET NOW to save the current ﬁlter set. Select CANCEL to exit the Add Packet Filter Set screen without saving the new ﬁlter set.

Deleting a packet ﬁlter set

To delete a packet ﬁlter set, select Delete IPX Packet Filter Set in the IPX Filters and Filter Sets screen to display a list of ﬁlter sets. Select a ﬁlter set from the list and press Return to delete it. Press the Escape key to exit the list without deleting the ﬁlter set.

Note: Deleting a ﬁlter set does not delete the ﬁlters in that set. However, the ﬁlters in the deleted set are no longer in effect (unless they are part of another set). The deleted set will no longer appear in the answer proﬁle or any connection proﬁles to which it was added.

IPX SAP ﬁlters

For each IPX SAP ﬁlter, you can conﬁgure a set of parameters to match on certain attributes of IPX SAP packet entries. The ﬁlters check IPX SAP packets for entries that match and then acts on those entries. The SAP packets themselves are always allowed to continue after their entries are checked.

The purpose of ﬁltering SAP packets is not to make your network more secure, but to add efﬁciency to network bandwidth use. Filtering SAP packets may reduce the size of SAP packets and SAP bindery tables by removing unwanted entries.

Viewing and modifying SAP ﬁlters

To display a table of IPX SAP ﬁlters, select Display/Change IPX SAP Filters in the IPX Filters and Filter Sets screen.

To modify any of the ﬁlters in the table, select the desired ﬁlter and press Return. The Change SAP Filter screen appears. The parameters in this screen are the same as the ones in the Add SAP Filter screen (see the next section).

Image 175

Contents Netopia R7200 Sdsl Router Part Number Contents Part II Advanced Configuration Contents Aurp Snmp Xmodem Part III Appendixes User’s Reference Guide Part I Getting Started User’s Reference Guide Chapter Introduction Features and capabilitiesOverview How to use this guide Finding an Internet service provider Chapter Setting Up Internet ServicesEndorsements Deciding on an ISP account Setting up a Netopia R7200 account Obtaining an IP addressUnique requirements Pricing and supportWithout Network Address Translation Obtaining information from the ISPLocal LAN IP address information to obtain With Network Address TranslationUser’s Reference Guide Find a location Chapter Making the Physical ConnectionsWhat you need Identify the connectors and attach the cablesYour router on Netopia R7200 Sdsl Router back panel portsNetopia R7200 LED front panel Netopia R7200 Sdsl Router status lightsReadying computers on your local network Chapter Connecting to Your Local Area NetworkUser’s Reference Guide Connecting to an Ethernet network 10Base-T Adding an external modem Connecting to a LocalTalk network Chapter Setting up your Router with the SmartStart Wizard Before running SmartStart SmartStart Wizard conﬁguration screens Setting up your Router with the SmartStart WizardEasy option Advanced setupAdvanced option Conﬁguration screen on Conﬁguration tab Dynamic conﬁguration recommendedStatic conﬁguration optional Add. Repeat this process for the secondary DNS TCP/IP Conﬁguring TCP/IP on Macintosh computersTCP/IP or MacTCP Dynamic conﬁguration using MacIP optional Setting up your Router with the SmartStart Wizard User’s Reference Guide Chapter Console-Based Management Connecting through a Telnet session Conﬁguring Telnet software Connecting a console cable to your routerPC ANSI-BBS Navigating through the console screensEasy Setup console screens Chapter Easy SetupAccessing the Easy Setup console screens See Appendix A, Troubleshooting, for more suggestions Quick Easy Setup connection path Main Menu appears Sdsl Line ConﬁgurationPrevious Screen Next Screen Easy Setup ProﬁleIP Easy Setup Easy Setup Security Conﬁguration Previous Screen To Main Menu Part II Advanced Configuration User’s Reference Guide WAN conﬁguration Chapter WAN and System ConfigurationATM VPI ATM VCI Creating a new Connection Proﬁle IPX Profile Parameters Remote IPX Network Datalink PPP/MP Options Data Compression Default proﬁle Main Menu Default Proﬁle screen appears IP parameters default proﬁle screen System conﬁguration screens IPX parameters default proﬁle screenNavigating through the system conﬁguration screens System conﬁguration features Date and time Network protocols setupFilter sets ﬁrewalls IP address servingConsole conﬁguration Logging Upgrade feature setSnmp Simple Network Management Protocol SecurityInstalling the Syslog client User’s Reference Guide Chapter Line Backup Backup Conﬁguration screen appears Atdt Backup Conﬁguration screenIP Setup screen Connection Proﬁles Using Scheduled Connections with BackupScheduled Connections screen appears Management/Statistics Force Recovery Event Logs QuickViewSnmp Support User’s Reference Guide Network Address Translation features Chapter IP Setup and Network Address TranslationHOW NAT Works Previous Screen Using Network Address TranslationV2 multicast Numbered Sdsl WAN1 Associating port numbers with nodesAdvanced IP/IPX router conﬁguration options Data Link Options IP Setup and Network Address Translation Network Address Translation guidelines IP setup User’s Reference Guide Select Add Export. The Add Exported Service screen appears Select Service. a pop-up menu of services and ports appears IP subnets User’s Reference Guide Static routes Viewing static routes Static Routes screen will appearAdding a static route Modifying a static route Rules of static route installationDeleting a static route Main Menu System Configuration IP Address Serving 176.163.222.10 Dhcp NetBios Options Serve Bootp Clients IP Address Pools IP Setup and Network Address Translation Dhcp NetBIOS Options NetBios Type MacIP KIP forwarding setup You have ﬁnished your IP setup User’s Reference Guide Internetwork Packet Exchange IPX Chapter IPX SetupIPX features IPX deﬁnitionsRouting Information Protocol RIP Service Advertising Protocol SAPIPX address SocketIPX setup screen NetBIOSIPX spooﬁng Default Gateway Address IPX routing tables User’s Reference Guide AppleTalk networks Chapter AppleTalk SetupAppleTalk protocol AT Routing Table Routers and seeding MacIPInstalling AppleTalk Upgrade Feature Set Conﬁguring AppleTalk EtherTalk setupLocalTalk setup Viewing Aurp partners Aurp setupAurp Free Trade Zone Modifying an Aurp partner Adding an Aurp partnerReceiving Aurp connections Deleting an Aurp partnerConﬁguring Aurp Options Aurp Options Tickle Interval Hhmmss User’s Reference Guide Quick View status overview Chapter Monitoring ToolsGeneral status Status lights Current statusGeneral Statistics Statistics & LogsPhysical Interface Event historiesNetwork Interface WAN Event History Device Event History Routing tablesIP routing table IPX Sap Bindery table IPX routing tableAppleTalk routing table Served IP Addresses IP Address Lease Management screen appears Snmp System InformationCommunity strings Snmp Setup screenSnmp traps Deleting IP trap receivers Setting the IP trap receiversViewing IP trap receivers Modifying IP trap receiversWeb-based management pages Event History pages WAN Event History Device Event History User’s Reference Guide Suggested security measures Chapter SecurityUser accounts Protecting the conﬁguration screens Protecting the Security Options screenDial-in console access What’s a ﬁlter and what’s a ﬁlter set? Enable SmartStart/SmartView/Web serverTelnet access About ﬁlters and ﬁlter setsFilter priority How ﬁlter sets workHow individual ﬁlters work Parts of a ﬁlter ﬁltering rulePort numbers Other ﬁlter attributes Port number comparisonsUDP Putting the parts togetherFiltering example #2 Filtering example #1Disadvantages of ﬁlters Design guidelinesWorking with IP ﬁlters and ﬁlter sets An approach to using ﬁltersNaming a new ﬁlter set Adding a ﬁlter setAdding ﬁlters to a ﬁlter set Input and output ﬁlters-source and destinationADD this Filter NOW Cancel Deleting ﬁlters Viewing ﬁlter setsViewing ﬁlters Modifying ﬁltersDeleting a ﬁlter set Modifying ﬁlter setsSample IP ﬁlter set TCP Icmp UDP Possible modiﬁcations User’s Reference Guide IPX ﬁlters Viewing and modifying packet ﬁlters IPX packet ﬁltersAdding a packet ﬁlter Adding a packet ﬁlter set IPX packet ﬁlter setsDeleting a packet ﬁlter Viewing and modifying packet ﬁlter setsNo Match Deleting a packet ﬁlter set IPX SAP ﬁltersViewing and modifying SAP ﬁlters Deleting a SAP ﬁlter Adding a SAP ﬁlterViewing and modifying SAP ﬁlter sets IPX SAP ﬁlter setsAdding a SAP ﬁlter set Deleting a SAP ﬁlter set Basic IP packet components Firewall tutorial General ﬁrewall termsBasic protocol types Example TCP/UDP Ports Firewall design rulesFirewall Logic Logical and function Binary representationEstablished connections Implied rulesExample IP ﬁlter set screen Example network Filter basicsExample Example ﬁltersExample Example Chapter Utilities and Diagnostics Ping Receive return Ping packet Stop Ping Trace RouteTelnet client Disconnect Telnet console session Factory defaultsUpdating ﬁrmware Transferring conﬁguration and ﬁrmware ﬁles with TftpDownloading conﬁguration ﬁles Transferring conﬁguration and ﬁrmware ﬁles with Xmodem Uploading conﬁguration ﬁlesIdle Do you want to send a saved configuration to your Netopia? Restarting the system Part III Appendixes User’s Reference Guide Conﬁguration problems Appendix a TroubleshootingNetwork problems Console connection problemsPower outages How to reset the router to factory defaultsEnvironment proﬁle How to reach usTechnical support Before contacting NetopiaFAX-Back Online product informationUser’s Reference Guide Appendix B Understanding IP Addressing What is IP?About IP addressing Subnets and subnet masks Subnet masks Example Using subnets on a Class C IP internetISP Network Network conﬁgurationDistributing IP addresses Example Working with a Class C subnetBackground Technical note on subnet masking Conﬁguration Netopia R7200 Dhcp server characteristicsDhcp address serving Serve dynamic WAN clients Using address servingManually distributing IP addresses MacIP servingUnderstanding IP Addressing B-9 Tips and rules for distributing IP addressesDhcp example Internet Nested IP subnets0.0 C.1 WAN 3719 Packet header types BroadcastsUser’s Reference Guide Network conﬁguration Appendix C Understanding Netopia NAT BehaviorBackground User’s Reference Guide Understanding Netopia NAT Behavior C-3 Netopia Router WWW Server ISP Router LAN Understanding Netopia NAT Behavior C-5 Exported servicesImportant notes Understanding Netopia NAT Behavior C-7 Summary Appendix D Binary Conversion Table Decimal Binary Appendix E Further Reading User’s Reference Guide Further Reading E-3 User’s Reference Guide Pinouts for Auxiliary port modem cable Appendix F Technical Specifications and Safety InformationDescription Power requirementsEnvironment Software and protocols International Agency approvalsRegulatory notices North AmericaDeclaration for Canadian users Important safety instructionsBattery Telecommunication installation cautionsAppendix G About Sdsl User’s Reference Guide Glossary User’s Reference Guide Glossary User’s Reference Guide Remapping See network number remapping User’s Reference Guide Glossary User’s Reference Guide Numerics IndexIndex-2 Index-3 Index-4 Index-5 Index-6 Limited Warranty and Limitation of Remedies User’s Reference Guide