IPX ﬁlters | Netopia R7200 instruction

IPX ﬁlters

Main

Menu

System

Configuration

Filter Sets (Firewalls)

Security 14-21

IPX Filters

and Filter Sets

IPX packet ﬁlters work very similarly to IP packet ﬁlters. They ﬁlter data trafﬁc coming from or going to remote IPX networks. IPX ﬁlters can be set up to forward or discard IPX packets based on a number of user-deﬁned criteria. Like IP ﬁlters, IPX ﬁlters must be grouped in sets that are applied to the answer proﬁle or to connection proﬁles.

IPX SAP ﬁlters are used for ﬁltering server entries not required to pass over the WAN links. When connecting to a large IPX network via dial-up connection, the transfer of large numbers of SAP entries can consume signiﬁcant bandwidth on the WAN link.

Note: Using SAP ﬁltering to prevent a server from being advertised does not provide security against that server being accessed—IPX packet ﬁltering must be used for that purpose.

Setting up and using IPX ﬁlter sets is a four-step process:

1.Create the ﬁlters to use.

2.Create the ﬁlter sets to use.

3.Add ﬁlters to the ﬁlter sets.

4.Attach the ﬁlter sets to the answer proﬁle or to connection proﬁles.

You can conﬁgure IPX ﬁlters and set up IPX ﬁlter sets from the IPX Filters and Filter Sets screen.

IPX Filters and Filter Sets

Display/Change IPX Packet Filters...

Add IPX Packet Filter...

Delete IPX Packet Filter...

Display/Change IPX Packet Filter Sets...

Add IPX Packet Filter Set...

Delete IPX Packet Filter Set...

Display/Change IPX Sap Filters...

Add IPX Sap Filter...

Delete IPX Sap Filter...

Display/Change IPX Sap Filter Sets...

Add IPX Sap Filter Set...

Delete IPX Sap Filter Set...

Define your filters 1st. IPX Filter Sets refer to, but don't contain, filters.

Image 171

Netopia R7200 manual IPX ﬁlters

Contents

Netopia R7200 Sdsl Router Part Number Contents Part II Advanced Configuration Contents Aurp Snmp Xmodem Part III Appendixes User’s Reference Guide Part I Getting Started User’s Reference Guide Features and capabilities Chapter IntroductionOverview How to use this guide Finding an Internet service provider Chapter Setting Up Internet Services Endorsements Deciding on an ISP account Setting up a Netopia R7200 account Obtaining an IP addressUnique requirements Pricing and support Without Network Address Translation Obtaining information from the ISPLocal LAN IP address information to obtain With Network Address Translation User’s Reference Guide Find a location Chapter Making the Physical Connections What you need Identify the connectors and attach the cables Your router on Netopia R7200 Sdsl Router back panel ports Netopia R7200 LED front panel Netopia R7200 Sdsl Router status lights Readying computers on your local network Chapter Connecting to Your Local Area Network User’s Reference Guide Connecting to an Ethernet network 10Base-T Adding an external modem Connecting to a LocalTalk network Chapter Setting up your Router with the SmartStart Wizard Before running SmartStart SmartStart Wizard conﬁguration screens Setting up your Router with the SmartStart Wizard Easy option Advanced setup Advanced option Conﬁguration screen on Conﬁguration tab Dynamic conﬁguration recommended Static conﬁguration optional Add. Repeat this process for the secondary DNS TCP/IP Conﬁguring TCP/IP on Macintosh computers TCP/IP or MacTCP Dynamic conﬁguration using MacIP optional Setting up your Router with the SmartStart Wizard User’s Reference Guide Chapter Console-Based Management Connecting through a Telnet session Conﬁguring Telnet software Connecting a console cable to your router PC ANSI-BBS Navigating through the console screens Chapter Easy Setup Easy Setup console screensAccessing the Easy Setup console screens See Appendix A, Troubleshooting, for more suggestions Quick Easy Setup connection path Main Menu appears Sdsl Line Conﬁguration Previous Screen Next Screen Easy Setup Proﬁle IP Easy Setup Easy Setup Security Conﬁguration Previous Screen To Main Menu Part II Advanced Configuration User’s Reference Guide WAN conﬁguration Chapter WAN and System Configuration ATM VPI ATM VCI Creating a new Connection Proﬁle IPX Profile Parameters Remote IPX Network Datalink PPP/MP Options Data Compression Default proﬁle Main Menu Default Proﬁle screen appears IP parameters default proﬁle screen System conﬁguration screens IPX parameters default proﬁle screen Navigating through the system conﬁguration screens System conﬁguration features Date and time Network protocols setupFilter sets ﬁrewalls IP address serving Console conﬁguration Logging Upgrade feature setSnmp Simple Network Management Protocol Security Installing the Syslog client User’s Reference Guide Chapter Line Backup Backup Conﬁguration screen appears Atdt Backup Conﬁguration screen IP Setup screen Connection Proﬁles Using Scheduled Connections with Backup Scheduled Connections screen appears Management/Statistics Force Recovery QuickView Event LogsSnmp Support User’s Reference Guide Network Address Translation features Chapter IP Setup and Network Address Translation HOW NAT Works Previous Screen Using Network Address Translation V2 multicast Numbered Sdsl WAN1 Associating port numbers with nodes Advanced IP/IPX router conﬁguration options Data Link Options IP Setup and Network Address Translation Network Address Translation guidelines IP setup User’s Reference Guide Select Add Export. The Add Exported Service screen appears Select Service. a pop-up menu of services and ports appears IP subnets User’s Reference Guide Static routes Viewing static routes Static Routes screen will appear Adding a static route Rules of static route installation Modifying a static routeDeleting a static route Main Menu System Configuration IP Address Serving 176.163.222.10 Dhcp NetBios Options Serve Bootp Clients IP Address Pools IP Setup and Network Address Translation Dhcp NetBIOS Options NetBios Type MacIP KIP forwarding setup You have ﬁnished your IP setup User’s Reference Guide Internetwork Packet Exchange IPX Chapter IPX SetupIPX features IPX deﬁnitions Routing Information Protocol RIP Service Advertising Protocol SAPIPX address Socket NetBIOS IPX setup screenIPX spooﬁng Default Gateway Address IPX routing tables User’s Reference Guide Chapter AppleTalk Setup AppleTalk networksAppleTalk protocol AT Routing Table Routers and seeding MacIP Installing AppleTalk Upgrade Feature Set Conﬁguring AppleTalk EtherTalk setup LocalTalk setup Aurp setup Viewing Aurp partnersAurp Free Trade Zone Modifying an Aurp partner Adding an Aurp partner Deleting an Aurp partner Receiving Aurp connectionsConﬁguring Aurp Options Aurp Options Tickle Interval Hhmmss User’s Reference Guide Quick View status overview Chapter Monitoring Tools General status Status lights Current status General Statistics Statistics & Logs Event histories Physical InterfaceNetwork Interface WAN Event History Device Event History Routing tables IP routing table IPX routing table IPX Sap Bindery tableAppleTalk routing table Served IP Addresses IP Address Lease Management screen appears Snmp System Information Community strings Snmp Setup screen Snmp traps Deleting IP trap receivers Setting the IP trap receiversViewing IP trap receivers Modifying IP trap receivers Web-based management pages Event History pages WAN Event History Device Event History User’s Reference Guide Chapter Security Suggested security measuresUser accounts Protecting the conﬁguration screens Protecting the Security Options screen Dial-in console access What’s a ﬁlter and what’s a ﬁlter set? Enable SmartStart/SmartView/Web serverTelnet access About ﬁlters and ﬁlter sets Filter priority How ﬁlter sets work How individual ﬁlters work ﬁltering rule Parts of a ﬁlterPort numbers Other ﬁlter attributes Port number comparisons UDP Putting the parts together Filtering example #2 Filtering example #1 Disadvantages of ﬁlters Design guidelines Working with IP ﬁlters and ﬁlter sets An approach to using ﬁlters Naming a new ﬁlter set Adding a ﬁlter set Adding ﬁlters to a ﬁlter set Input and output ﬁlters-source and destination ADD this Filter NOW Cancel Deleting ﬁlters Viewing ﬁlter setsViewing ﬁlters Modifying ﬁlters Modifying ﬁlter sets Deleting a ﬁlter setSample IP ﬁlter set TCP Icmp UDP Possible modiﬁcations User’s Reference Guide IPX ﬁlters IPX packet ﬁlters Viewing and modifying packet ﬁltersAdding a packet ﬁlter Adding a packet ﬁlter set IPX packet ﬁlter setsDeleting a packet ﬁlter Viewing and modifying packet ﬁlter sets No Match IPX SAP ﬁlters Deleting a packet ﬁlter setViewing and modifying SAP ﬁlters Deleting a SAP ﬁlter Adding a SAP ﬁlter IPX SAP ﬁlter sets Viewing and modifying SAP ﬁlter setsAdding a SAP ﬁlter set Deleting a SAP ﬁlter set Firewall tutorial General ﬁrewall terms Basic IP packet componentsBasic protocol types Firewall design rules Example TCP/UDP PortsFirewall Logic Logical and function Binary representation Implied rules Established connectionsExample IP ﬁlter set screen Example network Filter basics Example Example ﬁlters Example Example Chapter Utilities and Diagnostics Ping Receive return Ping packet Stop Ping Trace Route Telnet client Disconnect Telnet console session Factory defaults Updating ﬁrmware Transferring conﬁguration and ﬁrmware ﬁles with Tftp Downloading conﬁguration ﬁles Transferring conﬁguration and ﬁrmware ﬁles with Xmodem Uploading conﬁguration ﬁles Idle Do you want to send a saved configuration to your Netopia? Restarting the system Part III Appendixes User’s Reference Guide Conﬁguration problems Appendix a Troubleshooting Network problems Console connection problems Power outages How to reset the router to factory defaults Environment proﬁle How to reach usTechnical support Before contacting Netopia FAX-Back Online product information User’s Reference Guide What is IP? Appendix B Understanding IP AddressingAbout IP addressing Subnets and subnet masks Subnet masks Example Using subnets on a Class C IP internet ISP Network Network conﬁguration Example Working with a Class C subnet Distributing IP addressesBackground Technical note on subnet masking Netopia R7200 Dhcp server characteristics ConﬁgurationDhcp address serving Serve dynamic WAN clients Using address servingManually distributing IP addresses MacIP serving Understanding IP Addressing B-9 Tips and rules for distributing IP addresses Dhcp example Internet Nested IP subnets 0.0 C.1 WAN 3719 Packet header types Broadcasts User’s Reference Guide Appendix C Understanding Netopia NAT Behavior Network conﬁgurationBackground User’s Reference Guide Understanding Netopia NAT Behavior C-3 Netopia Router WWW Server ISP Router LAN Understanding Netopia NAT Behavior C-5 Exported services Important notes Understanding Netopia NAT Behavior C-7 Summary Appendix D Binary Conversion Table Decimal Binary Appendix E Further Reading User’s Reference Guide Further Reading E-3 User’s Reference Guide Pinouts for Auxiliary port modem cable Appendix F Technical Specifications and Safety Information Power requirements DescriptionEnvironment Software and protocols International Agency approvalsRegulatory notices North America Declaration for Canadian users Important safety instructions Battery Telecommunication installation cautions Appendix G About Sdsl User’s Reference Guide Glossary User’s Reference Guide Glossary User’s Reference Guide Remapping See network number remapping User’s Reference Guide Glossary User’s Reference Guide Numerics Index Index-2 Index-3 Index-4 Index-5 Index-6 Limited Warranty and Limitation of Remedies User’s Reference Guide