Example | Netopia R5000 manual

Security 13-37

This incoming IP packet (10000000) has a source IP address that does not match the network address in the Source IP Address ﬁeld (00000000) in the Netopia R5000 Series Router. This rule will forward this packet because the packet does not match.

Example 3

		Filter Rule:		200.1.1.96		(Source IP Network Address)

				255.255.255.240		(Source IP Mask)

				Forward = No		(What happens on match)

Incoming packet has the source address of 200.1.1.184.

	IP Address		Binary Representation

	200.1.1.184		10111000		(Source address in incoming IP packet)

	AND

	255.255.255.240		11110000		(Perform the logical AND)

			10110000		(Logical AND result)

Since the Source IP Network Address in the Netopia R5000 Series Router is 01100000, and the source IP address after the logical AND is 1011000, this rule does not match and this packet will be forwarded.

Example 4

		Filter Rule:		200.1.1.96		(Source IP Network Address)

				255.255.255.240		(Source IP Mask)

				Forward = No		(What happens on match)

Incoming packet has the source address of 200.1.1.104.

	IP Address		Binary Representation

	200.1.1.104		01101000		(Source address in incoming IP packet)

	AND

	255.255.255.240		11110000		(Perform the logical AND)

			01100000		(Logical AND result)

Image 215

Netopia R5000 manual Example

Contents

Netopia R5000 Series Routers Part Number Contents Setting up your Router with the SmartStart Wizard Part II Advanced Configuration Vi User’s Reference Guide Aurp Viii User’s Reference Guide Part III Appendixes User’s Reference Guide Index Index-1 Limited Warranty and Limitation of Remedies Xii User’s Reference Guide Part I Getting Started User’s Reference Guide Overview Features and capabilitiesChapter Introduction How to use this guide Type of Service Data Rate Speed Datalink Protocol Chapter Setting Up Internet ServicesFinding an Internet service provider Endorsements Deciding on an ISP account Unique requirementsPricing and support Without Network Address Translation Obtaining information from the ISPLocal LAN IP address information to obtain With Network Address Translation User’s Reference Guide Find a location Chapter Making the Physical Connections What you need Serial Line port Connect the routerR5100 Serial R5200 DDS and R5300 T1 Attach the cables Identify the connectors Netopia R5000 Series Router LED front panel Netopia R5000 Series Router status lights User’s Reference Guide Readying computers on your local network Chapter Connecting to Your Local Area Network User’s Reference Guide 10Base-T Connecting to an Ethernet networkCrossover Switch Auxiliary port Port Ethernet hub Adding an external modem Connecting to a LocalTalk network User’s Reference Guide Chapter Setting up your Router with the SmartStart Wizard Before running SmartStart Installed and properly conﬁgured. See SmartStart Wizard configuration screens Setting up your Router with the SmartStart Wizard Easy option Setup options screen. You can choose either Easy or Advanced option Conﬁguration screen on Conﬁguration tab Dynamic configuration recommended Static configuration optional Add. Repeat this process for the secondary DNS TCP/IP Configuring TCP/IP on Macintosh computers TCP/IP or MacTCP Close the TCP/IP control panel and save the settings Dynamic configuration using MacIP optional Setting up your Router with the SmartStart Wizard User’s Reference Guide Chapter Console-Based Management Snmp Simple Network Management Protocol. See Snmp on Connecting through a Telnet sessionFilter sets ﬁrewalls. See Security on Connecting a console cable to your router Configuring Telnet software Mac ANSI, VT-100, or VT-200 Navigating through the console screens Screen differences Chapter Easy SetupEasy Setup console screens Accessing the Easy Setup console screens Screen similar to the following Main Menu appears See Appendix A, Troubleshooting, for more suggestions Serial Line Easy Setup screen appears Serial Line Easy Setup configuration screen T1 Line Conﬁguration screen appears T1 Line configuration screen DDS Line Conﬁguration screen appears DDS Line configuration screen Easy Setup Proﬁle screen appears Easy Setup Profile screen IP Easy Setup Easy Setup Security Configuration Easy Setup User’s Reference Guide Part II Advanced Configuration User’s Reference Guide Configuration Chapter WAN and System ConfigurationWAN configuration Line configuration for a Serial line Line configuration for a DDS line Line configuration for a T1 line WAN and System Conﬁguration Main Menu Easy Setup Line Configuration Configuring Frame RelayEasy Setup Frame Relay screens Setup Line Configuration WAN Configuration Frame Relay screens Frame Relay configuration WAN and System Conﬁguration Displaying a Frame Relay Dlci configuration table Frame Relay Dlci configuration WAN and System Conﬁguration Changing a Frame Relay Dlci configuration Dlci Adding a Frame Relay Dlci configuration Deleting a Frame Relay Dlci configuration Creating a new Connection Proﬁle ADD Profile NOW Cancel IPX Profile Parameters Remote IPX Network Datalink Frame Relay Options Auto-Detect DLCIs PAP Dial IP Address IPX Network-+ Configuration Default Profile Default profile IP parameters default profile screen IPX parameters default profile screen Configuration Scheduled Connections Scheduled connections switched async only Viewing scheduled connections Adding a scheduled connection Set Weekly Schedule Set Once-Only Schedule Deleting a scheduled connection Modifying a scheduled connection Connection accounting screens switched async only Budget Setup screen appears Budget Statistics in Hhhhmm Navigating through the system configuration screens System configuration screens System configuration features Date and time Network protocols setupFilter sets firewalls IP address serving Console configuration Logging Upgrade feature setSnmp Simple Network Management Protocol Security Installing the Syslog client User’s Reference Guide Network Address Translation features Chapter IP Setup and Network Address Translation HOW NAT Works Previous Screen Using Network Address Translation V2 multicast Numbered Unnumbered Sdsl WAN1 Associating port numbers with nodes Connection Profiles Advanced IP/IPX router configuration options ATM Funi IPX Profile Parameters Remote IPX Network Network Address Translation guidelines IP setup IP Setup and Network Address Translation Select Add Export. The Add Exported Service screen appears Select Service. a pop-up menu of services and ports appears IP subnets IP Setup and Network Address Translation Static routes Viewing static routes Static Routes screen will appear Adding a static route Deleting a static route Rules of static route installationModifying a static route Main System Menu Configuration IP Address Serving 176.163.222.10 Dhcp NetBios Options Serve Bootp Clients IP Address Pools User’s Reference Guide Dhcp NetBIOS Options NetBios Type Select Release BootP Leases and press Return MacIP KIP forwarding setup You have ﬁnished your IP setup Internetwork Packet Exchange IPX Chapter IPX SetupIPX features IPX definitions Routing Information Protocol RIP Service Advertising Protocol SAPIPX address Socket IPX spoofing NetBIOSIPX setup screen Default Gateway Address IPX routing tables User’s Reference Guide AppleTalk protocol Chapter AppleTalk SetupAppleTalk networks AT Routing Table Routers and seeding MacIP Installing AppleTalk Upgrade NOW EtherTalk setup Configuring AppleTalk LocalTalk setup Aurp Free Trade Zone Aurp setupViewing Aurp partners Modifying an Aurp partner Adding an Aurp partner Receiving Aurp connections Configuring Aurp OptionsDeleting an Aurp partner Aurp Options Tickle Interval Hhmmss User’s Reference Guide Quick View status overview Chapter Monitoring Tools General status Status lights Current status Statistics & Logs Network Interface General StatisticsPhysical Interface Event histories WAN Event History Device Event History Routing tables IPX routing table IP routing table AppleTalk routing table IPX Sap Bindery table Served IP Addresses IP Address Lease Management screen appears Snmp System Information Community strings Snmp Setup screen Snmp traps Deleting IP trap receivers Setting the IP trap receiversViewing IP trap receivers Modifying IP trap receivers Select T1 Line Statistics / Diagnostics and press Return T1 DiagnosticsT1 Line Statistics and Diagnostics screen T1 Line Statistics / Diagnostics screen appears Monitoring Tools Web-based monitoring Accounting for switched interfaces only Frame Relay Statistics Connection Status Connect/Disconnect Router Budget Configuration Connection Budgets Connection Budget Configuration Budget Statistics Event History pages Device Event History User accounts Chapter SecuritySuggested security measures Protecting the Security Options screen Protecting the configuration screens Dial-in console access What’s a filter and what’s a filter set? Enable SmartStart/SmartView/Web serverTelnet access About filters and filter sets Filter priority How filter sets work User’s Reference Guide Parts of a filter How individual filters workFilter’s actions Filtering rule Port number comparisons 161 Aurp AppleTalk 387Who 513 Transmission Control Protocol Other filter attributesPutting the parts together Internet Control Message Protocol Filtering example #1 Disadvantages of filters Design guidelinesFiltering example #2 Working with IP filters and filter sets An approach to using filters Naming a new filter set Adding a filter set Netopia Router Input and output filters-source and destination ADD this Filter NOW Cancel User’s Reference Guide Modifying filters Moving filtersViewing filters Deleting filters Viewing filter sets Modifying filter sets Sample IP filter set TCP Icmp UDP Possible modifications User’s Reference Guide IPX filters Main Menu System Configuration Filter Sets Firewalls Adding a packet filter IPX packet filtersViewing and modifying packet filters Adding a packet filter set IPX packet filter setsDeleting a packet filter Viewing and modifying packet filter sets No Match Viewing and modifying SAP filters IPX SAP filtersDeleting a packet filter set Deleting a SAP filter Adding a SAP filter Adding a SAP filter set IPX SAP filter setsViewing and modifying SAP filter sets Deleting a SAP filter set ACK Bit Yes Firewall tutorial General firewall termsBasic IP packet components Basic protocol types Firewall Logic Firewall design rulesExample TCP/UDP Ports Logical and function Binary representation Example IP filter set screen Implied rulesEstablished connections Example network Filter basics Example Example filters Example Example Chapter Utilities and Diagnostics Ping Utilities and Diagnostics Stop Ping Time Trace Route Telnet client Disconnect Telnet console session Factory defaults Updating firmware Transferring configuration and firmware files with Tftp Downloading configuration files Transferring configuration and firmware files with Xmodem Uploading configuration files Idle Do you want to send a saved configuration to your Netopia? Restarting the system User’s Reference Guide Part III Appendixes User’s Reference Guide Configuration problems Appendix a Troubleshooting Network problems Console connection problems Power outages How to reset the router to factory defaults Environment profile How to reach usTechnical support Before contacting Netopia FAX-Back Netopia Bulletin Board Service 1Online product information Product information can be found in the following User’s Reference Guide About IP addressing What is IP?Appendix B Understanding IP Addressing Subnets and subnet masks Subnet masks Example Using subnets on a Class C IP internet Customer Site a ISP Network Network configuration Background Example Working with a Class C subnetDistributing IP addresses Technical note on subnet masking 255.255.255.0 ConfigurationNetopia R5000 Series Router Dhcp server characteristics 255.255.255.192 MacIP serving Using address servingManually distributing IP addresses Serve dynamic WAN clients Tips and rules for distributing IP addresses Dhcp example Internet Nested IP subnets 0.0 C.1 WAN 3719 Packet header types Broadcasts User’s Reference Guide Background Network configurationAppendix C Understanding Netopia NAT Behavior User’s Reference Guide Understanding Netopia NAT Behavior C-3 Netopia Router WWW Server ISP Router LAN Understanding Netopia NAT Behavior C-5 Exported services Important notes Understanding Netopia NAT Behavior C-7 Summary Appendix D Binary Conversion Table Decimal Binary Appendix E Further Reading User’s Reference Guide No August Further Reading E-3 User’s Reference Guide Pin Not used DCE Ready Appendix F Technical Specifications and Safety InformationPinouts for Auxiliary port modem cable HD-15 DB-25 Pin Ground Not used Pin Not used HD-15 DB-25 PinPin Rset EIA-530 Pin Not used Tset EIA-530 Software and protocols Power requirementsDescription Environment FCC Class B Agency approvalsRegulatory notices North America R5100, R5200, R5300 Technical Speciﬁcations and Safety Information F-5 Declaration for Canadian users Important safety instructionsAustralian Safety Information R5100 Battery Telecommunication installation cautions User’s Reference Guide Glossary User’s Reference Guide Glossary User’s Reference Guide Glossary Remapping See network number remapping Glossary User’s Reference Guide Numerics Index Deﬁned Display Account types LocalTalk conﬁguration Index-3 Index-4 Index-5 Index-6 Limited Warranty and Limitation of Remedies User’s Reference Guide