IPX filters | Netopia R5000 instruction

IPX filters

Main

Menu

System

Configuration

Filter Sets (Firewalls)

Security 13-23

IPX Filters

and Filter Sets

IPX packet ﬁlters work very similarly to IP packet ﬁlters. They ﬁlter data trafﬁc coming from or going to remote IPX networks. IPX ﬁlters can be set up to forward or discard IPX packets based on a number of user-deﬁned criteria. Like IP ﬁlters, IPX ﬁlters must be grouped in sets that are applied to the answer proﬁle or to connection proﬁles.

IPX SAP ﬁlters are used for ﬁltering server entries not required to forward over the WAN links. When connecting to a large IPX network via dial-up connection, the transfer of large numbers of SAP entries can consume signiﬁcant bandwidth on the WAN link.

Note: Using SAP ﬁltering to prevent a server from being advertised does not provide security against that server being accessed—IPX packet ﬁltering must be used for that purpose.

Setting up and using IPX ﬁlter sets is a four-step process:

1.Create the ﬁlters to use.

2.Create the ﬁlter sets to use.

3.Add ﬁlters to the ﬁlter sets.

4.Attach the ﬁlter sets to the answer proﬁle or to connection proﬁles.

You can conﬁgure IPX ﬁlters and set up IPX ﬁlter sets from the IPX Filters and Filter Sets screen.

IPX Filters and Filter Sets

Display/Change IPX Packet Filters...

Add IPX Packet Filter...

Delete IPX Packet Filter...

Display/Change IPX Packet Filter Sets...

Add IPX Packet Filter Set...

Delete IPX Packet Filter Set...

Display/Change IPX Sap Filters...

Add IPX Sap Filter...

Delete IPX Sap Filter...

Display/Change IPX Sap Filter Sets...

Add IPX Sap Filter Set...

Delete IPX Sap Filter Set...

Define your filters 1st. IPX Filter Sets refer to, but don't contain, filters.

Image 201

Netopia R5000 manual IPX filters, Main Menu System Configuration Filter Sets Firewalls

Contents

Netopia R5000 Series Routers Part Number Contents Setting up your Router with the SmartStart Wizard Part II Advanced Configuration Vi User’s Reference Guide Aurp Viii User’s Reference Guide Part III Appendixes User’s Reference Guide Index Index-1 Limited Warranty and Limitation of Remedies Xii User’s Reference Guide Part I Getting Started User’s Reference Guide Features and capabilities Chapter IntroductionOverview How to use this guide Chapter Setting Up Internet Services Finding an Internet service providerType of Service Data Rate Speed Datalink Protocol Unique requirements Pricing and supportEndorsements Deciding on an ISP account Local LAN IP address information to obtain Obtaining information from the ISPWith Network Address Translation Without Network Address Translation User’s Reference Guide Find a location Chapter Making the Physical Connections What you need R5100 Serial Connect the routerR5200 DDS and R5300 T1 Serial Line port Attach the cables Identify the connectors Netopia R5000 Series Router LED front panel Netopia R5000 Series Router status lights User’s Reference Guide Readying computers on your local network Chapter Connecting to Your Local Area Network User’s Reference Guide Connecting to an Ethernet network Crossover Switch Auxiliary port Port Ethernet hub10Base-T Adding an external modem Connecting to a LocalTalk network User’s Reference Guide Chapter Setting up your Router with the SmartStart Wizard Before running SmartStart Installed and properly conﬁgured. See SmartStart Wizard configuration screens Setting up your Router with the SmartStart Wizard Easy option Setup options screen. You can choose either Easy or Advanced option Conﬁguration screen on Conﬁguration tab Dynamic configuration recommended Static configuration optional Add. Repeat this process for the secondary DNS TCP/IP Configuring TCP/IP on Macintosh computers TCP/IP or MacTCP Close the TCP/IP control panel and save the settings Dynamic configuration using MacIP optional Setting up your Router with the SmartStart Wizard User’s Reference Guide Chapter Console-Based Management Connecting through a Telnet session Filter sets ﬁrewalls. See Security onSnmp Simple Network Management Protocol. See Snmp on Connecting a console cable to your router Configuring Telnet software Mac ANSI, VT-100, or VT-200 Navigating through the console screens Easy Setup console screens Chapter Easy SetupAccessing the Easy Setup console screens Screen differences Screen similar to the following Main Menu appears See Appendix A, Troubleshooting, for more suggestions Serial Line Easy Setup screen appears Serial Line Easy Setup configuration screen T1 Line Conﬁguration screen appears T1 Line configuration screen DDS Line Conﬁguration screen appears DDS Line configuration screen Easy Setup Proﬁle screen appears Easy Setup Profile screen IP Easy Setup Easy Setup Security Configuration Easy Setup User’s Reference Guide Part II Advanced Configuration User’s Reference Guide Chapter WAN and System Configuration WAN configurationConfiguration Line configuration for a Serial line Line configuration for a DDS line Line configuration for a T1 line WAN and System Conﬁguration Configuring Frame Relay Easy Setup Frame Relay screensMain Menu Easy Setup Line Configuration Setup Line Configuration WAN Configuration Frame Relay screens Frame Relay configuration WAN and System Conﬁguration Displaying a Frame Relay Dlci configuration table Frame Relay Dlci configuration WAN and System Conﬁguration Changing a Frame Relay Dlci configuration Dlci Adding a Frame Relay Dlci configuration Deleting a Frame Relay Dlci configuration Creating a new Connection Proﬁle ADD Profile NOW Cancel IPX Profile Parameters Remote IPX Network Datalink Frame Relay Options Auto-Detect DLCIs PAP Dial IP Address IPX Network-+ Configuration Default Profile Default profile IP parameters default profile screen IPX parameters default profile screen Configuration Scheduled Connections Scheduled connections switched async only Viewing scheduled connections Adding a scheduled connection Set Weekly Schedule Set Once-Only Schedule Deleting a scheduled connection Modifying a scheduled connection Connection accounting screens switched async only Budget Setup screen appears Budget Statistics in Hhhhmm Navigating through the system configuration screens System configuration screens System configuration features Filter sets firewalls Network protocols setupIP address serving Date and time Console configuration Snmp Simple Network Management Protocol Upgrade feature setSecurity Logging Installing the Syslog client User’s Reference Guide Network Address Translation features Chapter IP Setup and Network Address Translation HOW NAT Works Previous Screen Using Network Address Translation V2 multicast Numbered Unnumbered Sdsl WAN1 Associating port numbers with nodes Connection Profiles Advanced IP/IPX router configuration options ATM Funi IPX Profile Parameters Remote IPX Network Network Address Translation guidelines IP setup IP Setup and Network Address Translation Select Add Export. The Add Exported Service screen appears Select Service. a pop-up menu of services and ports appears IP subnets IP Setup and Network Address Translation Static routes Viewing static routes Static Routes screen will appear Adding a static route Rules of static route installation Modifying a static routeDeleting a static route Main System Menu Configuration IP Address Serving 176.163.222.10 Dhcp NetBios Options Serve Bootp Clients IP Address Pools User’s Reference Guide Dhcp NetBIOS Options NetBios Type Select Release BootP Leases and press Return MacIP KIP forwarding setup You have ﬁnished your IP setup IPX features Chapter IPX SetupIPX definitions Internetwork Packet Exchange IPX IPX address Service Advertising Protocol SAPSocket Routing Information Protocol RIP NetBIOS IPX setup screenIPX spoofing Default Gateway Address IPX routing tables User’s Reference Guide Chapter AppleTalk Setup AppleTalk networksAppleTalk protocol AT Routing Table Routers and seeding MacIP Installing AppleTalk Upgrade NOW EtherTalk setup Configuring AppleTalk LocalTalk setup Aurp setup Viewing Aurp partnersAurp Free Trade Zone Modifying an Aurp partner Adding an Aurp partner Configuring Aurp Options Deleting an Aurp partnerReceiving Aurp connections Aurp Options Tickle Interval Hhmmss User’s Reference Guide Quick View status overview Chapter Monitoring Tools General status Status lights Current status Statistics & Logs General Statistics Physical InterfaceNetwork Interface Event histories WAN Event History Device Event History Routing tables IPX routing table IP routing table AppleTalk routing table IPX Sap Bindery table Served IP Addresses IP Address Lease Management screen appears Snmp System Information Community strings Snmp Setup screen Snmp traps Viewing IP trap receivers Setting the IP trap receiversModifying IP trap receivers Deleting IP trap receivers T1 Diagnostics T1 Line Statistics and Diagnostics screenSelect T1 Line Statistics / Diagnostics and press Return T1 Line Statistics / Diagnostics screen appears Monitoring Tools Web-based monitoring Accounting for switched interfaces only Frame Relay Statistics Connection Status Connect/Disconnect Router Budget Configuration Connection Budgets Connection Budget Configuration Budget Statistics Event History pages Device Event History Chapter Security Suggested security measuresUser accounts Protecting the Security Options screen Protecting the configuration screens Dial-in console access Telnet access Enable SmartStart/SmartView/Web serverAbout filters and filter sets What’s a filter and what’s a filter set? Filter priority How filter sets work User’s Reference Guide Filter’s actions How individual filters workFiltering rule Parts of a filter 161 Aurp AppleTalk 387 Who 513Port number comparisons Putting the parts together Other filter attributesInternet Control Message Protocol Transmission Control Protocol Filtering example #1 Design guidelines Filtering example #2Disadvantages of filters Working with IP filters and filter sets An approach to using filters Naming a new filter set Adding a filter set Netopia Router Input and output filters-source and destination ADD this Filter NOW Cancel User’s Reference Guide Moving filters Viewing filtersModifying filters Deleting filters Viewing filter sets Modifying filter sets Sample IP filter set TCP Icmp UDP Possible modifications User’s Reference Guide IPX filters Main Menu System Configuration Filter Sets Firewalls IPX packet filters Viewing and modifying packet filtersAdding a packet filter Deleting a packet filter IPX packet filter setsViewing and modifying packet filter sets Adding a packet filter set No Match IPX SAP filters Deleting a packet filter setViewing and modifying SAP filters Deleting a SAP filter Adding a SAP filter IPX SAP filter sets Viewing and modifying SAP filter setsAdding a SAP filter set Deleting a SAP filter set Basic IP packet components Firewall tutorial General firewall termsBasic protocol types ACK Bit Yes Firewall design rules Example TCP/UDP PortsFirewall Logic Logical and function Binary representation Implied rules Established connectionsExample IP filter set screen Example network Filter basics Example Example filters Example Example Chapter Utilities and Diagnostics Ping Utilities and Diagnostics Stop Ping Time Trace Route Telnet client Disconnect Telnet console session Factory defaults Updating firmware Transferring configuration and firmware files with Tftp Downloading configuration files Transferring configuration and firmware files with Xmodem Uploading configuration files Idle Do you want to send a saved configuration to your Netopia? Restarting the system User’s Reference Guide Part III Appendixes User’s Reference Guide Configuration problems Appendix a Troubleshooting Network problems Console connection problems Power outages How to reset the router to factory defaults Technical support How to reach usBefore contacting Netopia Environment profile Online product information Netopia Bulletin Board Service 1Product information can be found in the following FAX-Back User’s Reference Guide What is IP? Appendix B Understanding IP AddressingAbout IP addressing Subnets and subnet masks Subnet masks Example Using subnets on a Class C IP internet Customer Site a ISP Network Network configuration Example Working with a Class C subnet Distributing IP addressesBackground Technical note on subnet masking Netopia R5000 Series Router Dhcp server characteristics Configuration255.255.255.192 255.255.255.0 Using address serving Manually distributing IP addressesMacIP serving Serve dynamic WAN clients Tips and rules for distributing IP addresses Dhcp example Internet Nested IP subnets 0.0 C.1 WAN 3719 Packet header types Broadcasts User’s Reference Guide Network configuration Appendix C Understanding Netopia NAT BehaviorBackground User’s Reference Guide Understanding Netopia NAT Behavior C-3 Netopia Router WWW Server ISP Router LAN Understanding Netopia NAT Behavior C-5 Exported services Important notes Understanding Netopia NAT Behavior C-7 Summary Appendix D Binary Conversion Table Decimal Binary Appendix E Further Reading User’s Reference Guide No August Further Reading E-3 User’s Reference Guide Pinouts for Auxiliary port modem cable Appendix F Technical Specifications and Safety InformationHD-15 DB-25 Pin Ground Not used Pin Not used DCE Ready Pin Rset EIA-530 HD-15 DB-25 PinPin Not used Tset EIA-530 Pin Not used Description Power requirementsEnvironment Software and protocols Regulatory notices Agency approvalsNorth America R5100, R5200, R5300 FCC Class B Technical Speciﬁcations and Safety Information F-5 Important safety instructions Australian Safety Information R5100Declaration for Canadian users Battery Telecommunication installation cautions User’s Reference Guide Glossary User’s Reference Guide Glossary User’s Reference Guide Glossary Remapping See network number remapping Glossary User’s Reference Guide Numerics Index Deﬁned Display Account types LocalTalk conﬁguration Index-3 Index-4 Index-5 Index-6 Limited Warranty and Limitation of Remedies User’s Reference Guide