Motorola 3397GP manual 206, Packet Filtering Settings

Administrator’s Handbook

Packet Filtering Settings

Packet Filtering has two parts:

❑Create/Edit/Delete Filter Sets, create/edit/delete rules to a Filter Set.

❑Associate a created Filter Set with a WAN or LAN interface

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index forward [ on off ]

Creates or edits a filter rule, specifying whether packets will be forwarded or not.

☛NOTE:

If this is the first rule, it will create the filter-set called filterset-name, otherwise it will edit the filterset.

If the index is not consecutive, the system will select the next consecutive index. If the index does not exist, a rule will be created. If a rule exists, the rule will be edited.

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index idle-reset [ on off ]

Turns idle reset on or off for the specified filter rule. A match on this rule resets idle-timeout status and keeps the WAN connection alive. The default is off. For idle-resetto be displayed, forward must be enabled on a filter rule.

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index frc-rte [ on off ]

Turns forced routing on or off for the specified filter rule. A match on this rule will force a route for pack- ets. The default is off. For frc-rteto be displayed, forward must be enabled on a filter rule.

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index gateway ip_addr

Specifies the gateway IP address for forced routed packets, if forced routing is enabled.

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index src-ip ip_addr

Specifies the source IP address to match packets (where the packet was sent from).

set security pkt-filter filterset filterset-name[ input_filter output_filter ] index src-mask mask

Specifies the source IP mask to match packets (where the packet was sent from).

206