13-18 User’s Reference Guide

The five input filters and one output filter that make up Basic Firewall are shown in the table below.

Setting

Input filter

Input filter

Input filter

Input filter

Input filter

Output

1

2

3

4

5

filter 1

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Enabled

Yes

Yes

Yes

Yes

Yes

Yes

 

 

 

 

 

 

 

Forward

No

No

Yes

Yes

Yes

Yes

 

 

 

 

 

 

 

Source IP

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

address

 

 

 

 

 

 

 

 

 

 

 

 

 

Source IP

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

address mask

 

 

 

 

 

 

 

 

 

 

 

 

 

Dest. IP

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

address

 

 

 

 

 

 

 

 

 

 

 

 

 

Dest. IP

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

0.0.0.0

address mask

 

 

 

 

 

 

 

 

 

 

 

 

 

Protocol type

TCP

TCP

ICMP

TCP

UDP

0

 

 

 

 

 

 

 

Source port

No

No

N/A

No

No

N/A

comparison

Compare

Compare

 

Compare

Compare

 

 

 

 

 

 

 

 

Source port ID

0

0

N/A

0

0

N/A

 

 

 

 

 

 

 

Dest. port

Equal

Equal

N/A

Greater

Greater

N/A

comparison

 

 

 

Than

Than

 

 

 

 

 

 

 

 

Dest. port ID

2000

6000

N/A

1023

1023

N/A

 

 

 

 

 

 

 

Basic Firewall’s filters play the following roles.

Input filters 1 and 2: These block WAN-originated OpenWindows and X-Windows sessions. Service origination requests for these protocols use ports 2000 and 6000, respectively. Since these are greater than 1023, OpenWindows and X-Windows traffic would otherwise be allowed by input filter 4. Input filters 1 and 2 must precede input filter 4; otherwise they would have no effect since filter 4 would have already passed OpenWindows and X-Windows traffic.

Input filter 3: This filter explicitly passes all WAN-originated ICMP traffic to permit devices on the WAN to ping devices on the LAN. Ping is an Internet service that is useful for diagnostic purposes.

Input filters 4 and 5: These filters pass all TCP and UDP traffic, respectively, when the destination port is greater than 1023. This type of traffic generally does not allow a remote host to connect to the LAN using one of the potentially intrusive Internet services, such as Telnet, FTP, and WWW.

Output filter 1: This filter passes all outgoing traffic to make sure that no outgoing connections from the LAN are blocked.

Page 156
Image 156
Farallon Communications R9100 manual TCP Icmp UDP

R9100 specifications

Farallon Communications R9100 is a high-performance network device designed to meet the demanding needs of modern telecommunications. This robust system specializes in delivering reliable, efficient, and scalable solutions for various networking environments. Its architectural design integrates cutting-edge technologies that enhance performance while ensuring compatibility with existing infrastructure.

One of the standout features of the R9100 is its advanced routing capabilities. Equipped with powerful processors, it supports multiple routing protocols, including OSPF, BGP, and EIGRP. This flexibility allows network administrators to optimize data flow and maintain seamless connectivity across diverse network topologies. The R9100 also includes sophisticated Quality of Service (QoS) mechanisms, enabling prioritization of critical traffic, which is essential for latency-sensitive applications.

Another significant aspect of the R9100 is its support for various interfaces. Whether organizations require Ethernet, fiber, or wireless connections, the R9100 accommodates a broad range of interface options. This versatility ensures that it can be deployed in various environments, from large enterprise networks to smaller branch offices.

Security is a crucial consideration in today’s networking landscape, and the R9100 addresses this with built-in security features. These include stateful firewall capabilities, Intrusion Detection System (IDS), and comprehensive Virtual Private Network (VPN) support. Such features allow organizations to safeguard sensitive data and maintain compliance with industry regulations.

The R9100 also prioritizes ease of management. With a user-friendly interface and robust monitoring tools, network administrators can easily configure and manage the device. This capability facilitates rapid troubleshooting and performance tuning, ensuring minimal downtime and optimal user experience.

Energy efficiency is an additional characteristic that sets the R9100 apart from its competitors. Designed with eco-friendly technologies, it minimizes power consumption while maximizing output, making it an ideal choice for organizations looking to reduce their carbon footprint.

In conclusion, Farallon Communications R9100 stands out as a versatile and powerful network device that meets the complexities of modern telecommunications. With its advanced routing features, robust security measures, varied interface options, and energy-efficient design, the R9100 is a formidable player in the networking landscape. Organizations can rely on this solution to enhance their network performance and evolve alongside their growing technological needs.