Manuals / Farallon Communications / Computer Equipment / Network Card

Farallon Communications R9100 manual Example

Models: R9100

1 244

Download 244 pages 61.81 Kb

Page 173

Security 13-35

Since the Source IP Network Address in the Netopia R9100 is 01100000, and the source IP address after the logical AND is 1011000, this rule does not match and this packet will be passed.

Example 4

		Filter Rule:		200.1.1.96		(Source IP Network Address)

				255.255.255.240		(Source IP Mask)

				Forward = No		(What happens on match)

Incoming packet has the source address of 200.1.1.104.

	IP Address		Binary Representation

	200.1.1.104		01101000		(Source address in incoming IP packet)

	AND

	255.255.255.240		11110000		(Perform the logical AND)

			01100000		(Logical AND result)

Since the Source IP Network Address in the Netopia R9100 is 01100000, and the source IP address after the logical AND is 01100000, this rule does match and this packet will not be passed.

Example 5

		Filter Rule:		200.1.1.96		(Source IP Network Address)

				255.255.255.255		(Source IP Mask)

				Forward = No		(What happens on match)

Incoming packet has the source address of 200.1.1.96.

	IP Address		Binary Representation

	200.1.1.96		01100000		(Source address in incoming IP packet)

	AND

	255.255.255.255		11111111		(Perform the logical AND)

			01100000		(Logical AND result)

Image 173

Farallon Communications R9100 manual Example

Contents

Netopia R9100 Ethernet Router for DSL and Cable Modems Part Number Contents Setting up your Router with the SmartStart Wizard Part II Advanced Configuration Aurp Snmp Part III Appendixes Contents Viii User’s Reference Guide Part I Getting Started User’s Reference Guide Overview Features and capabilitiesChapter Introduction How to use this guide Finding an Internet service provider Chapter Setting Up Internet ServicesUnique requirements Pricing and supportDeciding on an ISP account EndorsementsSmartIP Obtaining information from the ISPWithout Network Address Translation Local LAN IP address information to obtainWith Network Address Translation User’s Reference Guide Find a location Chapter Making the Physical ConnectionsWhat you need Identify the connectors and attach the cablesYour router on Netopia R9100 Ethernet Router back panel portsNetopia R9100 LED front panel Netopia R9100 Ethernet Router status lightsChapter Connecting to Your Local Area Network Before Network ModelAfter Readying computers on your local network 10Base-T Connecting to an Ethernet networkNetopia R9100 in a 10Base-T network Adding an external modem Connecting to a LocalTalk network Wiring guidelines for PhoneNET cabling User’s Reference Guide Chapter Setting up your Router with the SmartStart Wizard Before running SmartStart SmartStart Wizard conﬁguration screens Setting up your Router with the SmartStart WizardEasy option Easy or Advanced setupAdvanced option Conﬁguration screen on Conﬁguration tab Dynamic conﬁguration recommendedStatic conﬁguration optional Add. Repeat this process for the secondary DNS TCP/IP Conﬁguring TCP/IP on Macintosh computersTCP/IP or MacTCP Dynamic conﬁguration using MacIP optional Setting up your Router with the SmartStart Wizard User’s Reference Guide Chapter Console-Based Management Connecting through a Telnet session Conﬁguring Telnet software Connecting a console cable to your routerPC ANSI-BBS Navigating through the console screensAccessing the Easy Setup console screens Chapter Easy SetupEasy Setup console screens See Appendix A, Troubleshooting, for more suggestions If your ISP doesn’t support Dhcp Quick Easy Setup connection pathIf your ISP supports Dhcp For more Easy Setup options see More Easy Setup options on WAN Ethernet Conﬁguration More Easy Setup optionsPrevious Screen To Main Menu IP Easy SetupEasy Setup Security Conﬁguration User’s Reference Guide Part II Advanced Configuration User’s Reference Guide WAN conﬁguration Chapter WAN and System ConfigurationAT&F&C1&D2E0S0=1 Creating a new Connection Proﬁle Add Connection Proﬁle screen appears IPX Profile Parameters Remote IPX Network Datalink PPP/MP Options Data Compression How the Default Answer Proﬁle works Default Answer Proﬁle for Dial-in ConnectionsCustomizing the default proﬁle Call acceptance scenarios System conﬁguration screensNavigating through the system conﬁguration screens Network protocols setup System conﬁguration featuresIP address serving Filter sets ﬁrewallsDate and time Console conﬁgurationSecurity Upgrade feature setSnmp Simple Network Management Protocol Logging Installing the Syslog clientFollowing screen shows a sample syslog dump of WAN events User’s Reference Guide Network Address Translation features Chapter IP Setup and Network Address TranslationHOW NAT Works Using Network Address Translation To Main Menu Network Address Translation guideline Associating port numbers with nodesIP setup IP Setup and Network Address Translation Select Add Export. The Add Exported Service screen appears Select Service. a pop-up menu of services and ports appears IP subnets IP Setup and Network Address Translation Static routes Viewing static routes Static Routes screen will appearAdding a static route Deleting a static route Rules of static route installationModifying a static route Main System IP Address Menu Configuration Serving 176.163.222.10 Dhcp NetBios Options Serve Bootp Clients IP Address Pools User’s Reference Guide Dhcp NetBIOS Options NetBios Type MacIP KIP forwarding setup You have ﬁnished your IP setup IPX features Chapter IPX SetupIPX deﬁnitions Internetwork Packet Exchange IPXIPX address Service Advertising Protocol SAPSocket Routing Information Protocol RIPIPX spooﬁng NetBIOSIPX setup screen Default Gateway Address IPX routing tables User’s Reference Guide AppleTalk protocol Chapter AppleTalk SetupAppleTalk networks AT Routing Table Routers and seeding MacIPInstalling AppleTalk Upgrade Feature Set Conﬁguring AppleTalk EtherTalk setupLocalTalk setup Aurp Free Trade Zone Aurp setupViewing Aurp partners Modifying an Aurp partner Adding an Aurp partnerConﬁguring Aurp Options Deleting an Aurp partnerReceiving Aurp connections Aurp Options Tickle Interval Hhmmss User’s Reference Guide Quick View status overview Chapter Monitoring ToolsStatus lights General statusStatistics & Logs Network Interface General StatisticsPhysical Interface Event histories WAN Event History Device Event History Routing tablesIPX routing table IP routing tableAppleTalk routing table IPX Sap Bindery tableServed IP Addresses IP Address Lease Management screen appears Snmp System InformationCommunity strings Snmp Setup screenSnmp traps Viewing IP trap receivers Setting the IP trap receiversModifying IP trap receivers Deleting IP trap receiversNavigating SmartView SmartViewSmartView overview Event history pages General Machine informationDevice Event History WAN Event History Standard Html web-based monitoring pages User’s Reference Guide User accounts Chapter SecuritySuggested security measures Protecting the conﬁguration screens Protecting the Security Options screenDial-in console access Telnet access Enable SmartStart/SmartView/Web serverAbout ﬁlters and ﬁlter sets What’s a ﬁlter and what’s a ﬁlter set?Filter priority How ﬁlter sets workPacket First filter Match? Yes ﬁlter’s actions How individual ﬁlters workﬁltering rule Parts of a ﬁlterPort number comparisons FTPPutting the parts together Other ﬁlter attributesFiltering example #1 Disadvantages of ﬁlters Design guidelinesFiltering example #2 Working with IP ﬁlters and ﬁlter sets An approach to using ﬁltersNaming a new ﬁlter set Adding a ﬁlter setAdding ﬁlters to a ﬁlter set Input and output ﬁlters-source and destinationADD this Filter NOW Cancel Viewing ﬁlters Viewing ﬁlter setsModifying ﬁlters Deleting ﬁltersSample IP ﬁlter set Modifying ﬁlter setsDeleting a ﬁlter set TCP Icmp UDP Possible modiﬁcations User’s Reference Guide IPX ﬁlters Adding a packet ﬁlter IPX packet ﬁltersViewing and modifying packet ﬁlters Deleting a packet ﬁlter IPX packet ﬁlter setsViewing and modifying packet ﬁlter sets Adding a packet ﬁlter setADD Filter SET NOW Cancel Viewing and modifying SAP ﬁlters IPX SAP ﬁltersDeleting a packet ﬁlter set Deleting a SAP ﬁlter Adding a SAP ﬁlterAdding a SAP ﬁlter set IPX SAP ﬁlter setsViewing and modifying SAP ﬁlter sets Deleting a SAP ﬁlter set Basic protocol types Firewall tutorial General ﬁrewall termsBasic IP packet components Firewall Logic Firewall design rulesExample TCP/UDP Ports Implied rules Binary representationLogical and function Example IP ﬁlter set screen Filter basicsEstablished connections Example Example ﬁltersExample network Example Example User’s Reference Guide Chapter Utilities and Diagnostics Start Ping PingReceive return Ping packet Stop Ping Trace RouteTelnet client Transferring conﬁguration and ﬁrmware ﬁles with Tftp Factory defaultsDisconnect Telnet console session Updating ﬁrmware Press Return. You will see the following dialog box Downloading conﬁguration ﬁlesTransferring conﬁguration and ﬁrmware ﬁles with Xmodem Uploading conﬁguration ﬁlesIdle Do you want to send a saved configuration to your Netopia? Restarting the system Part III Appendixes User’s Reference Guide Conﬁguration problems Appendix a TroubleshootingNetwork problems Console connection problemsPower outages How to reset the router to factory defaultsTechnical support How to reach usBefore contacting Netopia Environment proﬁleFAX-Back Online product informationUser’s Reference Guide About IP addressing What is IP?Appendix B Understanding IP Addressing Subnets and subnet masks Subnet masks Example Using subnets on a Class C IP internetISP Network Network conﬁgurationBackground Example Working with a Class C subnetDistributing IP addresses Technical note on subnet masking Dhcp address serving Netopia R9100 Dhcp server characteristicsConﬁguration Manually distributing IP addresses Using address servingMacIP serving Serve dynamic WAN clientsUnderstanding IP Addressing B-9 Tips and rules for distributing IP addressesDhcp example Internet Nested IP subnets0.0 C.1 WAN 3719 Packet header types BroadcastsUser’s Reference Guide Background Appendix C Understanding Netopia NAT BehaviorNetwork conﬁguration User’s Reference Guide Understanding Netopia NAT Behavior C-3 Netopia Router WWW Server ISP Router LAN Understanding Netopia NAT Behavior C-5 Exported servicesImportant notes Understanding Netopia NAT Behavior C-7 Summary Appendix D Binary Conversion Table Decimal Binary Appendix E Further Reading User’s Reference Guide Further Reading E-3 User’s Reference Guide Pinouts for Auxiliary port modem cable Appendix F Technical Specifications and Safety InformationEnvironment Power requirementsDescription Regulatory notices Software and protocolsAgency approvals Declaration for Canadian users Important safety instructionsTelecommunication installation cautions Battery Technical Speciﬁcations and Safety Information F-5User’s Reference Guide Glossary User’s Reference Guide Glossary User’s Reference Guide Remapping See network number remapping User’s Reference Guide Glossary User’s Reference Guide Numerics IndexIndex-2 Index-3 Index-4 Index-5 Index-6 Limited Warranty and Limitation of Remedies User’s Reference Guide