Manuals / Netopia / Computer Equipment / Network Router

Netopia 4542, 4541 manual Parts of a ﬁlter, Port numbers, Aurp AppleTalk 387, Who 513

Models: 4542 4541

1 209

Download 209 pages 41.22 Kb

Page 151

Security 11-7

Parts of a ﬁlter

A ﬁlter consists of criteria based on packet attributes. A typical ﬁlter can match a packet on any one of the following attributes:

■The source IP address (where the packet was sent from)

■The destination IP address (where the packet is going)

■The type of higher-layer Internet protocol the packet is carrying, such as TCP or UDP

Port numbers

A ﬁlter can also match a packet’s port number attributes, but only if the ﬁlter’s protocol type is set to TCP or UDP, since only those protocols use port numbers. The ﬁlter can be conﬁgured to match the following:

■The source port number (the port on the sending host that originated the packet)

■The destination port number (the port on the receiving host that the packet is destined for)

By matching on a port number, a ﬁlter can be applied to selected TCP or UDP services, such as Telnet, FTP, and World Wide Web. The following tables show a few common services and their associated port numbers:

Internet service	TCP port	Internet service	TCP port


FTP	20/21	Finger	79

Telnet	23	World Wide Web	80

SMTP (mail)	25	News	144

Gopher	70	rlogin	513


Internet service	UDP port	Internet service	UDP port


Who Is	43	AppleTalk Routing	202
		Maintenance (at-rtmp)

World Wide Web	80	AppleTalk Name Binding	202
		(at-nbp)

SNMP	161	AURP (AppleTalk)	387

TFTP	69	who	513

Image 151

Netopia 4542, 4541 manual Parts of a ﬁlter, Port numbers, Aurp AppleTalk 387, Who 513

Contents

Netopia 4541 Adsl Routers Part Number Contents User’s Reference Guide Contents User’s Reference Guide Snmp Limited Warranty and Limitation of Remedies-Revised January Chapter Introduction Features and capabilitiesOverview How to use this guide Find a location Chapter Making the Physical ConnectionsWhat you need Adsl port Ethernet port Identify the connectors and attach the cablesNetopia 4541/4542 Adsl Router status lights User’s Reference Guide Conﬁguring TCP/IP on Windows-based Computers Chapter Sharing the ConnectionConﬁguration tab Dynamic conﬁguration recommendedStatic conﬁguration optional Add. Repeat this process for the secondary DNS TCP/IP Conﬁguring TCP/IP on Macintosh ComputersTCP/IP or MacTCP Sharing the Connection User’s Reference Guide Readying computers on your local network Chapter Connecting to Your Local Area NetworkConnecting to an Ethernet network Chapter Console-Based Management Filter sets ﬁrewalls. See Security on Connecting through a Telnet sessionSnmp Simple Network Management Protocol. See Snmp on Conﬁguring Telnet software Connecting a console cable to your routerMac ANSI, VT-100, or VT-200 Navigating through the console screensEasy Setup console screens Chapter Easy SetupAccessing the Easy Setup console screens Quick Easy Setup connection path Main Menu appears DSL Line ConﬁgurationEasy Setup Proﬁle IP Easy Setup Ethernet IP Address 192.168.1.1 Ethernet Subnet Mask Easy Setup Security Conﬁguration User’s Reference Guide WAN conﬁguration Chapter WAN and System ConfigurationConfiguration Setup Adsl Line Conﬁguration screen appearsFDM Cancel Creating a new Connection Proﬁle PAP Easy Setup Profile 255.225.255.255 0.0 Default Profile Default Proﬁle screen appears Default proﬁleConfiguration Scheduled Connections IP parameters default proﬁle screenScheduled connections Viewing scheduled connections Adding a scheduled connection Set Weekly Schedule Set Once-Only Schedule Deleting a scheduled connection Modifying a scheduled connectionSystem conﬁguration screens Navigating through the system conﬁguration screens System conﬁguration features Date and time IP setupFilter sets ﬁrewalls IP address servingSnmp Simple Network Management Protocol Console conﬁgurationSecurity Upgrade feature setLogging Installing the Syslog client User’s Reference Guide Chapter IP Setup IP Address Serving IP Setup IP subnets For example Static routes Viewing static routes Static Routes screen will appearAdding a static route Modifying a static route Rules of static route installationDeleting a static route Main Menu System Configuration IP Address Serving IP Setup IP Address Serving IP Address Serving Mode IP Address Pools User’s Reference Guide Dhcp NetBIOS Options NetBios Type More Address Serving Options Conﬁguring the IP Address Server options Scroll UP 192.168.1.112 192.168.1.113 Scroll Down Lease Management 192.168.1.101 Dhcp Dhcp Relay Agent Dhcp Relay Agent Connection Proﬁles Easy-PAT List WAN Configuration User’s Reference Guide Chapter Multiple Network Address Translation FeaturesStatic mapping Following is a general description of these featuresPort Address Translation Server listsWAN Network Complex maps MultiNAT Conﬁguration Supported trafﬁcServer Lists and Dynamic NAT conﬁguration Easy Setup Proﬁle conﬁgurationSelect Network Address Translation NAT and press Return NAT rules Network Address Translation screen appearsAdd NAT Public Range screen appears ADD NAT MAP Select Show/Change NAT Map List screen appears Modifying map listsChange NAT MAP Adding Server Lists ADD NAT Server Port Show/Change NAT Server List screen appears Modifying server listsChange NAT Server Deleting a server IP proﬁle parameters Binding Map Lists and Server Lists+--NAT Map List Name Toggle Address Translation Enabled to Yes IP Parameters WAN Default ProﬁleIP Parameters Default Profile NAT Associations NAT Associations +NAT Map List Name-+ MultiNAT Conﬁguration Example Previous Screen Enter your ISP-supplied values as shown belowChange NAT Public Range ADD NAT MAP User’s Reference Guide Chapter Virtual Private Networks VPNs Transit Intern etwork Summary About Pptp TunnelsPptp conﬁguration Configuration Add Connection ProfileChap User’s Reference Guide Conﬁguration About IPsec TunnelsDES Encryption Key Authentication Type IP Proﬁle Parameters Advanced IP Proﬁle Options About Atmp Tunnels Interoperation with other featuresAtmp conﬁguration Data Link Options Frame Relay RFC1483 User’s Reference Guide MS-CHAP V2 and 128-bit strong encryption Encryption SupportTransparently ATMP/PPTP Default ProﬁleQuickView VPN QuickViewDial-Up Networking for VPN Installing Dial-Up NetworkingCreating a new Dial-Up Networking proﬁle Conﬁguring a Dial-Up Networking proﬁle Windows 95 VPN installation Installing the VPN ClientWindows 98 VPN installation Allowing VPNs through a Firewall Connecting using Dial-Up NetworkingFilter Sets Display/Change Basic Firewall Pptp exampleGRE Atmp example Virtual Private Networks VPNs UDP Change Output Filter EnabledYes ForwardYes Source IP Address User’s Reference Guide Suggested security measures Chapter SecurityUser accounts Protecting the conﬁguration screens Protecting the Security Options screenTelnet access What’s a ﬁlter and what’s a ﬁlter set? About ﬁlters and ﬁlter setsHow ﬁlter sets work Forward Filter priorityﬁltering rule How individual ﬁlters workWho 513 Parts of a ﬁlterPort numbers 161 Aurp AppleTalk 387Other ﬁlter attributes Port number comparisonsUser Datagram Protocol Putting the parts togetherInternet Control Message Protocol Transmission Control ProtocolFiltering example #2 Filtering example #1Disadvantages of ﬁlters Design guidelinesWorking with IP ﬁlters and ﬁlter sets An approach to using ﬁltersAdding a ﬁlter set Naming a new ﬁlter set Netopia Router Adding ﬁlters to a ﬁlter setANY Modifying ﬁlters Viewing ﬁltersMoving ﬁlters Deleting a ﬁlter setSample ﬁlter set Deleting ﬁltersTCP Icmp UDP Possible modiﬁcations Firewall tutorial General ﬁrewall terms Basic protocol types Basic IP packet componentsExample TCP/UDP Ports Firewall Logic UDP Port ServiceFirewall design rules AurpImplied rules Logical and functionEstablished connections Example ﬁlter set screen Filter basicsThis is an example of the Netopia ﬁlter set screen Example network Example ﬁltersExample Example Example User’s Reference Guide Quick View status overview Chapter Monitoring ToolsATM Adsl WAN General statusStatus lights Current statusEvent histories Statistics & LogsDevice Event History WAN Event HistoryDevice Event History Current Date General Statistics IP Routing TableMain Menu Statistics & Logs Network Interface Physical InterfaceSnmp System InformationCommunity strings Snmp Setup screenSnmp traps Deleting IP trap receivers Setting the IP trap receiversViewing IP trap receivers Modifying IP trap receiversChapter Utilities and Diagnostics Ping Utilities and Diagnostics Time Trace RouteTelnet client Telnet client screen appears Factory defaultsUpdating ﬁrmware Transferring conﬁguration and ﬁrmware ﬁles with TftpDownloading conﬁguration ﬁles Transferring conﬁguration and ﬁrmware ﬁles with Xmodem Uploading conﬁguration ﬁlesUpdating ﬁrmware Do you want to send a saved configuration to your Netopia? Restarting the system Conﬁguration problems Appendix a TroubleshootingNetwork problems Console connection problemsPower outages How to reset the router to factory defaultsBefore contacting Netopia How to reach usNetopia Bulletin Board Service 1 Technical supportProduct information can be found in the following Online product informationFAX-Back User’s Reference Guide Appendix B Technical Specifications and Safety Information International Regulatory noticesDecember 1 Canada CSA CAN/CSA-C22.2 No FCC Part 15 Class BDeclaration for Canadian users Technical Speciﬁcations and Safety Information B-3Battery Important safety instructionsAustralian Safety Information Telecommunication installation cautionsTechnical Speciﬁcations and Safety Information B-5 User’s Reference Guide Limited Warranty and Limitation of Remedies-Revised January