DSL-500G Adsl Router User’s Guide

DSL-500G ADSL Router User’s Guide

TCP Flag: Specifies whether the rule should apply only to TCP packets that contain the synchronous (SYN) flag, only to those that contain the non-synchronous (NOT-SYN) flag, or to all TCP packets. This field will be dimmed (unavailable for entry) unless you selected TCP as the protocol.

ICMP Type: Specifies whether the value in the type field in ICMP packet headers will be used as a criteria. The code value can be any decimal value from 0-255. You can specify that the value must equal (eq) or not equal (neq) the specified value, or you can select any to enable the rule to be invoked on all ICMP packets. This field will be dimmed (unavailable for entry) unless you specify ICMP as the protocol.

ICMP Code: Specifies whether the value in the code field in ICMP packet headers will be used as a criteria. The code value can be any decimal value from 0-255. You can specify that the value must equal (eq) or not equal (neq) the specified value, or you can select any to enable the rule to be invoked on all ICMP packets. This field will be dimmed (unavailable for entry) unless you specify ICMP as the protocol.

IP Frag Pkt: Determines how the rule applies to IP packets that contain fragments. You can choose from the following options:

•Yes: The rule will be applied only to packets that contain fragments.

•No: The rule will be applied only to packets that do not contain fragments.

•Ignore: (Default) The rule will be applied to packets whether or not they contain fragments, assuming that they match the other criteria.

IP Option Pkt: Determines whether the rule should apply to IP packets that have options specified in their packet headers.

•Yes: The rule will be applied only to packets that contain header options.

•No: The rule will be applied only to packets that do not contain header options.

•Ignore: (Default) The rule will be applied to packets whether or not they contain header options, assuming that they match the other criteria.

Packet Size: Specifies that the IP Filter rule will take affect only on packets whose size in bytes matches this criteria. (lt = less than, gt = greater than, lteq = less than or equal to, etc.)

TOD Rule Status: The Time of Day Rule Status determines how the Start Time/End Time settings are used.

•Enable: (Default) The rule is in effect for the specified time period.

•Disable: The rule is not in effect for the specified time period, but is effective at all other times.

3.When you are done selecting criteria, ensure that the Enable radio button is selected at the top of the page, and then click the Submit button at the bottom of the page.

After a confirmation page displays, the IP Filter - Configuration page will redisplay with the new rule showing in the table.

If the security level of the rule matches the globally configured setting, a green ball in the Status column for that rule, indicating that the rule is now in effect. A red ball will display when the rule is disabled or if its security level is different than the globally configured level.

7.Ensure that the Security Level and Private/Public/DMZ Default Action settings on the IP Filter Configuration page are configured as needed, then click the Submit button. A page displays to confirm your changes.

8.Click the Submit button to save the settings in temporary memory. When you are done making changes to the configuration settings, open the Commit & Reboot menu and click the Commit button to save your changes to permanent memory.