Motorola Enterprise Series Routers, 6161252-00-01 manual Policy-based Routing using Filtersets

Security 10-35

FTP sessions. To allow WAN-originated FTP sessions to a LAN-based FTP server with the IP address a.b.c.d (corresponding to a numbered IP address such as 163.176.8.243), insert the following input filter ahead of the current input filter 1:

•Enabled: Yes

•Forward: Yes

•Source IP Address: 0.0.0.0

•Source IP Address Mask: 0.0.0.0

•Dest. IP Address: a.b.c.d

•Dest. IP Address Mask: 255.255.255.255

•Protocol Type: TCP

•Source Port Comparison: No Compare

•Source Port ID: 0

•Dest. Port Comparison: Equal

•Dest. Port ID: 21

Note: A similar filter could be used to permit Telnet or WWW access. Set the Dest. Port ID to 23 for Telnet or to 80 for WWW.

Deleting a filter set does not delete the filters in that set. However, the filters in the deleted set are no longer in effect (unless they are part of another set). The deleted set will no longer appear in the answer profile or any connection profiles to which it was added.

Policy-based Routing using Filtersets

Previous software versions routed IP packets only by destination IP address. Motorola Netopia® Embedded Software Version 8.7.4 now offers the ability to route IP packets using criteria other than the destination IP address. This is called policy-based routing. You are now able to route IP traffic based on the following:

•source IP address

•source and/or destination protocol field

•source and/or destination port numbers

•TOS field

You specify the routing criteria and routing information by using IP filtersets to determine the forwarding action of a particular filter.