Manuals / Carrier Access / Computer Equipment / Network Router

Carrier Access CMG Router user manual Defining Address Filters

Models: CMG Router

1 296

Download 296 pages 50.58 Kb

Page 110

Profile Directory:Local Profile

Filters

Defining Address Filters

Address

Filter

Window

Use this window to define filters that are based on the Ethernet MAC Address of a specific device. When enabled, these filters provide security by restricting LAN/WAN access based on a device’s MAC Address. Address filters are based on either source, destination or both source and destination MAC Addresses.

Device Name - Filter name can be up to 7 characters.

MAC Address - Enter the MAC Address of the LAN device that you are defining as a filter. The system will use the defined MAC Address and the value in the Forward Mode to determine whether the packet should be passed or received.

To enable a filter return to the Enabled Filter Window ([ESC] from this window) and select [CTRL A], select filter type (Custom, Protocol or Address) filter will be added to the Enabled Filters window.

NOTE: Each filter, even if it is not enabled, will count toward the maximum number of 500 filters.

4-24	CMG Router - Release 2.7

Image 110

Carrier Access CMG Router user manual Defining Address Filters

Contents

CMG Router Supporting Software Version Warranty Warranty Procedure Preface Limitation of Warranty & Limitation of Remedies Warranty Product Returns Vii Viii CMG Router Release Table of Contents Management Window Profile DirectoryRouter Card Profile Profile DirectoryLocal Profile Profile DirectoryRemote Profile Statistics Window Basic ConfigurationVerification Window System Reports Window User Events Router ConfigurationExit Window Glossary Index TroubleshootingProtocol Types Chapter Install Country Specific Ringer Tones InstallationInstall a Router Card Overview Maneuvering in the System Select Field FieldsScroll Field Edit Field Help Bar Connecting to the Router Establish a Telnet Session Set a New Password Introduction Management Window Management Overview System Time/Login System Date and Time Level Config allows the user to view and change all screensUsers, as well as change all three passwords Level Config Password Auto-Logout TimerView Password Admin Password Enhanced Security When Telneting into the Router the following will appear Upload/Download To Setup the Router for Uploads/Downloads Management Window Upload/Download Setup Menu Fields Reboot After Load Code Config Upload/Download Load Defaults Software Images Choices Management Window Profile DirectoryRouter Card Profile Configuration Main Menu Select Router Card Setup and select Enter Selection is RIP1, RIP2, or RIP1/RIP2 RIP Mode ReceiveRIP Mode Send Trunk WAN Connection WAN Trunk Setup Menu FieldsWAN Link # Data Speed WAN Connection TypeMultilink Group Voice BW Limit % Select Security Configure and select Enter Security Protocol CHAP, PAP or None Security Setup Menu FieldsAuthentication by Remote User ID Local Security Server Authentication of RemotePassword Type Snmp SYS Contact Snmp Setup Menu FieldsSYS Name SYS Location Access Snmp Trap Destinations Location Select DNS Proxy Configure and select Enter DNS Proxy DNS Server DNS Proxy Setup Menu FieldsDomain Name Site Select Spanning Tree Protocol Configure and select Enter Spanning Tree Protocol Bridge Max Age Bridge Forward DelayBridge Hello Time Bridge Priority Select Network Time Protocol Configure and select Enter Network Time Protocol SPACEBAR, select Enter Network Time Protocol Setup Menu Fields SysLog Facility SysLog Setup Menu FieldsSys Log Level Select DNS Resolver Configure and select Enter DNS Resolver My Domain Name DNS Resolver Cache ContentsDNS Resolver My Node Name Static Host List View or Modify Quality of Service Select Quality of Service Configure and select Enter Quality of Service Menu Fields Routed Voice Priority TOS Mgcp Mgcp Setup Menu Fields Mgcp Interoperability Settings Mgcp Interoperability Menu Fields Quarantine Notification Handling Mgcp Keep-Alive TimeoutMgcp Type of Service Quarantine Event Handling Voice Algorithm Names Algorithm Definition Voice Algorithm Name FieldsAlgorithm ID Algorithm Alias VoIP VoIP Setup Fields Call Detail Record Voice Algorithm Settings T38 Fax Voice Algorithm Settings VoIP Algorithm Fields Select Voice Channels Configure and select Enter Voice Channels VoIP Setup Fields Profile DirectoryRouter Card Profile Signaling Type Repeat Count RFC2833 Options SignalsPayload Type Repeat Interval Select Dial Plan Configure and select Enter Dial Plan Long Inter Digit Dial Plan Menu FieldsShort Inter Digit Profile DirectoryLocal Profile Main Menu Profile Directory window Local Profile window LAN Local Profile Setup To Setup a Local Profile LAN Network Updates Local Profile Setup Menu FieldsProfile Setup for LocalUnit Protocol LAN Subnet Mask Default RouterIP Address Setup Static Networks Profile DirectoryLocal Profile Select LAN Setup and Enter To Setup Static NetworksSelect Configuration Profile Directory from the Main menu, Static Networks Fields Network Ticks MetricHops Next Gateway Static Addresses Static MAC Address Setup Device Name Setup StaticStatic Addresses Fields MAC Address Select Define Filter Custom To Define and Enable FiltersFilters Select LAN Setup -and select Enter Define Filter Forward ModeFilters Fields Filter Type Source/Destination Filter Name Defining Custom Filters Select Define Filter Custom and Enter Defining Protocol Filters Defining Address Filters Advertise Network/Server Advertise Network Server Window Selected Items SetupAdvertise Network/Server Fields IPX Server Advertising Name Advertise Network/Server IPX Server FieldsType Dhcp Server/Client/Relay Dhcp Start IP Address Dhcp Mode ServerDomain Name Number Domain Name Servers NetBIOS over TCP/IPLease Duration Option Type Value Dhcp Mode Relay Forward DHCP/TOOTP Requests to Set Tx Packets Broadcast Bit Dhcp Mode ClientAutomatic DNS Request LAN Collision Threshold Collision Threshold Provisioning LAN Collision Threshold Fields To Configure Spanning Tree Spanning Tree Select Setup Spanning Tree and select Enter Port Cost Spanning Tree FieldsPort Priority Secondary IP Address To Add a Secondary IP Address Secondary IP Address Fields Link Speed To Set the Link Speed Link Speed Fields Profile DirectoryLocal Profile Profile DirectoryRemote Profile LocalUnit LAN Setup Profile DirectoryRemote Profile Remote Profile window Remote WAN Profile Profile Setup for RemoteUnit Protocol Route Blocked Bridge Optimize Transmission OptionsMode WAN Network Updates GRE Tunnel NAT Gateway Enabled with GRE Tunnel DisabledEnabled with GRE Tunnel By Network Remote IP Tunnel Address Enabled with GRE Tunnel AllTunnel Name Encryption Algorithm Default Router Numbered Setup bottom of the Remote main window Security/Options Following Security/Options setup window will display Compression Security/Options FieldsSecurity Server Typical Data Static/VPN Networks Profile DirectoryRemote Profile Select WAN Setup -on the RemoteUnit line and press Enter GRE Tunnel VPN FeaturesStatic/VPN Networks Fields Encrypt Tunnel data ? Encryption Algorithm not supported in this release Static NAT Addresses Local IP Address NAT IP Address NAT Bypass Subnets Press Ctrl a to add a NAT Bypass Static Addresses Static Addresses Window MAC Address Static Addresses Window IP Address Symbol Description Firewall Filters To Add a Firewall Filter Select Ctrl a to add an IP Firewall Rule Action Pass/Drop Firewall Filters FieldsRule Number Name Description ServiceService Establishment Packets which match this rule Local IP Address/NetworkRemote IP Address/Network Significant Bits Filter Network/Server Filter Network /Server Filter Network/Server Fields Selected Items Filter/Learn Network Filter Learn To Configure Spanning Tree Select Setup Spanning Tree and select Enter Port Priority Trunk Port ML Fragment Threshold WAN Connection Type PPP in Frame Relay, or Frame RelayML QOS Interleaving Basic Configuration Start Basic Configuration Select Yes to enter the setup program and select Enter Router Identification Fields RIP mode to send to remotes Directions for LAN Network UpdatesRIP mode to be received from remotes Protocol remotes will use to authenticate local LocalUnit Change the PAP Secret LocalUnit will send? Authentication User IDProtocol LocalUnit will use to authenticate all remotes WAN Interface Connections Port Number Set Poll Interval For Frame Relay, Set Option for PVC ManagementLink Quality Monitoring Sensitivity Set Poll Counter Other Remote Adit ProfileProfile Name Connection Select WAN Port NumberSubnet Mask WAN Connection Type Statistics Averaging Interval Snmp ConfigurationSnmp Communities Setup Complete Verification Window Ping Utility Dst Host Access PortLAN Port Tests Fields Src IP Address Continuous Ping Response Window FieldsSingle Ping Response Count Timeout CountResult or Last Result Trace Route Src Port Trace Route Utility Start TracertDstHost SrcIP Port Size TimeoutMethod IP Tos Port Monitor Trap On Port NameStart Monitor Number of bytes to display for each packet Verification Window Verification Window Statistics Window Run-Time Clear Totals Auto-UpdateRun-Time Fields Press ENTER. The Run-time Statistics window will display WAN Packet Totals ErrorsLAN Packet Totals Received Throughput to/from WAN Remote’s NameForwarded to WAN Comp. Ratio to/from WAN VoIP Channel View Call Agent VoIP Channel View FieldsSlot Endpoint Prefix Rsip Status Field Value Meaning Type Meaning Priority Queue Priority Fields Priority Queue FieldsClear All Priority Traffic Type Statistics Window System Reports Window Events To View the Event Log Message Events FieldsTime Count Alarms Alarms Fields Networks/Servers Learned From Networks/Servers FieldsDisplay Press ENTER. The Networks/Servers listing will display Frame Type Address Tables Address Tables Fields Flush Learned Entries Displays the information, listing by Port System Reports Window Exit Window Logout Reinitialize 10-4 Router Configuration Basic Setup Command Description Basic VoIP Setup Overview Set the controller to use CLI commands Command Description Fax and Modem Setup Following will configure the Fax and Modem CMG Router Release 11-7 Select Voip Configure -and select Enter Tab to Voice Algorithm Settings and select Enter 11-10 CMG Router Release 11-11 Card Maximum # of Channels configured for T.38 Reserved CMG Router Release 11-13 PPP Internet Connection and Public IP Address Routing Router in Slot CMG Router Release 11-15 Back-to-Back with PPP Boulder Router in Slot Denver Router in Slot Back-to-Back with Multi-Link PPP CMG Router Release 11-19 Back-to-Back with Frame Relay CMG Router Release 11-21 11-22 Appendix a User Events Description Authenticate Events Triggered Events Alarms User Events Appendix B Protocol Number in Firewall Filters Number Keyword Protocol Reference LEAF-2 Tlsp Reference SRP Ethernet Protocol Types HEX AT&T 8047 Protocol Types Protocol Types KTI Appendix C Excessive Triggered Update Events on the Events screen Communication Related IssuesLAN Related Issues LAN Related Issues Unable to access the Local LAN Router unit via Telnet Unable to access a remote unit via Telnet Diagnostics and Performance Tools Verification Ping Utility Statistics Run-Time System Reports Events Identify Alarm State Description Display Alarms Clear Alarm Troubleshooting Bandwidth AlgorithmAnnex D Bit Bridge Challenge Handshake Authorization Protocol ChapCommand Line Frame EthernetFirewall Frame relay Protocol IP HostInternet Local Area Network LAN Loopback Media Access Control MAC Mbps Multilink PPP QoS PingProtocol Point-to-Point Protocol PPP Rsip Spanning Tree Protocol Telnet Trace Route Trunk Voice over IP VoIP Index Index CMG Router Release Index Snap RIP IPX Index SYS Index Index