Example | Netopia R7200 manual

Security 14-35

This incoming IP packet (10000000) has a source IP address that does not match the network address in the Source IP Address ﬁeld (00000000) in the Netopia R7200. This rule will forward this packet because the packet does not match.

Example 3

		Filter Rule:		200.1.1.96		(Source IP Network Address)

				255.255.255.240		(Source IP Mask)

				Forward = No		(What happens on match)

Incoming packet has the source address of 200.1.1.184.

	IP Address		Binary Representation

	200.1.1.184		10111000		(Source address in incoming IP packet)

	AND

	255.255.255.240		11110000		(Perform the logical AND)

			10110000		(Logical AND result)

Since the Source IP Network Address in the Netopia R7200 is 01100000, and the source IP address after the logical AND is 1011000, this rule does not match and this packet will be forwarded.

Example 4

		Filter Rule:		200.1.1.96		(Source IP Network Address)

				255.255.255.240		(Source IP Mask)

				Forward = No		(What happens on match)

Incoming packet has the source address of 200.1.1.104.

	IP Address		Binary Representation

	200.1.1.104		01101000		(Source address in incoming IP packet)

	AND

	255.255.255.240		11110000		(Perform the logical AND)

			01100000		(Logical AND result)

Image 185

Netopia R7200 manual Example

Contents

Netopia R7200 Sdsl Router Part Number Contents Part II Advanced Configuration Contents Aurp Snmp Xmodem Part III Appendixes User’s Reference Guide Part I Getting Started User’s Reference Guide Overview Features and capabilitiesChapter Introduction How to use this guide Finding an Internet service provider Chapter Setting Up Internet Services Unique requirements Setting up a Netopia R7200 account Obtaining an IP addressPricing and support Endorsements Deciding on an ISP account Local LAN IP address information to obtain Obtaining information from the ISPWith Network Address Translation Without Network Address Translation User’s Reference Guide Find a location Chapter Making the Physical Connections What you need Identify the connectors and attach the cables Your router on Netopia R7200 Sdsl Router back panel ports Netopia R7200 LED front panel Netopia R7200 Sdsl Router status lights Readying computers on your local network Chapter Connecting to Your Local Area Network User’s Reference Guide Connecting to an Ethernet network 10Base-T Adding an external modem Connecting to a LocalTalk network Chapter Setting up your Router with the SmartStart Wizard Before running SmartStart SmartStart Wizard conﬁguration screens Setting up your Router with the SmartStart Wizard Easy option Advanced setup Advanced option Conﬁguration screen on Conﬁguration tab Dynamic conﬁguration recommended Static conﬁguration optional Add. Repeat this process for the secondary DNS TCP/IP Conﬁguring TCP/IP on Macintosh computers TCP/IP or MacTCP Dynamic conﬁguration using MacIP optional Setting up your Router with the SmartStart Wizard User’s Reference Guide Chapter Console-Based Management Connecting through a Telnet session Conﬁguring Telnet software Connecting a console cable to your router PC ANSI-BBS Navigating through the console screens Accessing the Easy Setup console screens Chapter Easy SetupEasy Setup console screens See Appendix A, Troubleshooting, for more suggestions Quick Easy Setup connection path Main Menu appears Sdsl Line Conﬁguration Previous Screen Next Screen Easy Setup Proﬁle IP Easy Setup Easy Setup Security Conﬁguration Previous Screen To Main Menu Part II Advanced Configuration User’s Reference Guide WAN conﬁguration Chapter WAN and System Configuration ATM VPI ATM VCI Creating a new Connection Proﬁle IPX Profile Parameters Remote IPX Network Datalink PPP/MP Options Data Compression Default proﬁle Main Menu Default Proﬁle screen appears IP parameters default proﬁle screen System conﬁguration screens IPX parameters default proﬁle screen Navigating through the system conﬁguration screens System conﬁguration features Filter sets ﬁrewalls Network protocols setupIP address serving Date and time Console conﬁguration Snmp Simple Network Management Protocol Upgrade feature setSecurity Logging Installing the Syslog client User’s Reference Guide Chapter Line Backup Backup Conﬁguration screen appears Atdt Backup Conﬁguration screen IP Setup screen Connection Proﬁles Using Scheduled Connections with Backup Scheduled Connections screen appears Management/Statistics Force Recovery Snmp Support QuickViewEvent Logs User’s Reference Guide Network Address Translation features Chapter IP Setup and Network Address Translation HOW NAT Works Previous Screen Using Network Address Translation V2 multicast Numbered Sdsl WAN1 Associating port numbers with nodes Advanced IP/IPX router conﬁguration options Data Link Options IP Setup and Network Address Translation Network Address Translation guidelines IP setup User’s Reference Guide Select Add Export. The Add Exported Service screen appears Select Service. a pop-up menu of services and ports appears IP subnets User’s Reference Guide Static routes Viewing static routes Static Routes screen will appear Adding a static route Deleting a static route Rules of static route installationModifying a static route Main Menu System Configuration IP Address Serving 176.163.222.10 Dhcp NetBios Options Serve Bootp Clients IP Address Pools IP Setup and Network Address Translation Dhcp NetBIOS Options NetBios Type MacIP KIP forwarding setup You have ﬁnished your IP setup User’s Reference Guide IPX features Chapter IPX SetupIPX deﬁnitions Internetwork Packet Exchange IPX IPX address Service Advertising Protocol SAPSocket Routing Information Protocol RIP IPX spooﬁng NetBIOSIPX setup screen Default Gateway Address IPX routing tables User’s Reference Guide AppleTalk protocol Chapter AppleTalk SetupAppleTalk networks AT Routing Table Routers and seeding MacIP Installing AppleTalk Upgrade Feature Set Conﬁguring AppleTalk EtherTalk setup LocalTalk setup Aurp Free Trade Zone Aurp setupViewing Aurp partners Modifying an Aurp partner Adding an Aurp partner Conﬁguring Aurp Options Deleting an Aurp partnerReceiving Aurp connections Aurp Options Tickle Interval Hhmmss User’s Reference Guide Quick View status overview Chapter Monitoring Tools General status Status lights Current status General Statistics Statistics & Logs Network Interface Event historiesPhysical Interface WAN Event History Device Event History Routing tables IP routing table AppleTalk routing table IPX routing tableIPX Sap Bindery table Served IP Addresses IP Address Lease Management screen appears Snmp System Information Community strings Snmp Setup screen Snmp traps Viewing IP trap receivers Setting the IP trap receiversModifying IP trap receivers Deleting IP trap receivers Web-based management pages Event History pages WAN Event History Device Event History User’s Reference Guide User accounts Chapter SecuritySuggested security measures Protecting the conﬁguration screens Protecting the Security Options screen Dial-in console access Telnet access Enable SmartStart/SmartView/Web serverAbout ﬁlters and ﬁlter sets What’s a ﬁlter and what’s a ﬁlter set? Filter priority How ﬁlter sets work How individual ﬁlters work Port numbers ﬁltering ruleParts of a ﬁlter Other ﬁlter attributes Port number comparisons UDP Putting the parts together Filtering example #2 Filtering example #1 Disadvantages of ﬁlters Design guidelines Working with IP ﬁlters and ﬁlter sets An approach to using ﬁlters Naming a new ﬁlter set Adding a ﬁlter set Adding ﬁlters to a ﬁlter set Input and output ﬁlters-source and destination ADD this Filter NOW Cancel Viewing ﬁlters Viewing ﬁlter setsModifying ﬁlters Deleting ﬁlters Sample IP ﬁlter set Modifying ﬁlter setsDeleting a ﬁlter set TCP Icmp UDP Possible modiﬁcations User’s Reference Guide IPX ﬁlters Adding a packet ﬁlter IPX packet ﬁltersViewing and modifying packet ﬁlters Deleting a packet ﬁlter IPX packet ﬁlter setsViewing and modifying packet ﬁlter sets Adding a packet ﬁlter set No Match Viewing and modifying SAP ﬁlters IPX SAP ﬁltersDeleting a packet ﬁlter set Deleting a SAP ﬁlter Adding a SAP ﬁlter Adding a SAP ﬁlter set IPX SAP ﬁlter setsViewing and modifying SAP ﬁlter sets Deleting a SAP ﬁlter set Basic protocol types Firewall tutorial General ﬁrewall termsBasic IP packet components Firewall Logic Firewall design rulesExample TCP/UDP Ports Logical and function Binary representation Example IP ﬁlter set screen Implied rulesEstablished connections Example network Filter basics Example Example ﬁlters Example Example Chapter Utilities and Diagnostics Ping Receive return Ping packet Stop Ping Trace Route Telnet client Disconnect Telnet console session Factory defaults Updating ﬁrmware Transferring conﬁguration and ﬁrmware ﬁles with Tftp Downloading conﬁguration ﬁles Transferring conﬁguration and ﬁrmware ﬁles with Xmodem Uploading conﬁguration ﬁles Idle Do you want to send a saved configuration to your Netopia? Restarting the system Part III Appendixes User’s Reference Guide Conﬁguration problems Appendix a Troubleshooting Network problems Console connection problems Power outages How to reset the router to factory defaults Technical support How to reach usBefore contacting Netopia Environment proﬁle FAX-Back Online product information User’s Reference Guide About IP addressing What is IP?Appendix B Understanding IP Addressing Subnets and subnet masks Subnet masks Example Using subnets on a Class C IP internet ISP Network Network conﬁguration Background Example Working with a Class C subnetDistributing IP addresses Technical note on subnet masking Dhcp address serving Netopia R7200 Dhcp server characteristicsConﬁguration Manually distributing IP addresses Using address servingMacIP serving Serve dynamic WAN clients Understanding IP Addressing B-9 Tips and rules for distributing IP addresses Dhcp example Internet Nested IP subnets 0.0 C.1 WAN 3719 Packet header types Broadcasts User’s Reference Guide Background Appendix C Understanding Netopia NAT BehaviorNetwork conﬁguration User’s Reference Guide Understanding Netopia NAT Behavior C-3 Netopia Router WWW Server ISP Router LAN Understanding Netopia NAT Behavior C-5 Exported services Important notes Understanding Netopia NAT Behavior C-7 Summary Appendix D Binary Conversion Table Decimal Binary Appendix E Further Reading User’s Reference Guide Further Reading E-3 User’s Reference Guide Pinouts for Auxiliary port modem cable Appendix F Technical Specifications and Safety Information Environment Power requirementsDescription Software and protocols Regulatory notices Agency approvalsNorth America International Declaration for Canadian users Important safety instructions Battery Telecommunication installation cautions Appendix G About Sdsl User’s Reference Guide Glossary User’s Reference Guide Glossary User’s Reference Guide Remapping See network number remapping User’s Reference Guide Glossary User’s Reference Guide Numerics Index Index-2 Index-3 Index-4 Index-5 Index-6 Limited Warranty and Limitation of Remedies User’s Reference Guide