Destination IP, Source Port | Patton electronic 29XX manual

Access Server Administrators’ Reference Guide	13 • Filter IP

Destination IP

Applies the action based on the results of the stated comparison to the IP address and subnet mask.

Comparison (filterIpDestinationAddressCmp)

•equal(0) – apply the action of the filter if the destination IP equals the IP address/subnet mask combination supplied

•notEqual(1) – apply the action of the filter if the destination IP does not equal the IP address/subnet mask combination supplied

Address(filterIpDestinationIp)

The IP address the filter will apply to the destination IP address to make the comparison.

Mask(filterIpDestinationMask)

The subnet mask the filter will apply to the destination IP address to make the comparison.

Note These fields are ignored unless either the IP address or Mask have been entered. Bit positions that are set to 1 will be compared and 0s will be ignored. Thus, a setting of 0.0.0. will have the effect of disabling destination IP address comparison.

Source Port

Applies the filter action based on the stated comparison to the source port number (TCP or UDP)

Comparison (filterIpSourcePortCmp)

•noCompare(0) – no comparison to the source port in the IP packet

•equal(1) – the source port in the IP action must be the same for the filter to be applied

•lessThan(2) – the source port in the IP packet must be less than the source port specified for the filter to be applied

•greaterThan(3) – the source port in the IP packet must be greater than the source port specified for the filter to be applied

Port (filterIpSourcePort)

The port number to be compared to the source port in the IP packet

Destination Port

Applies the filter action based on the stated comparison to the destination port number

Comparison (filterIpDestinationPortCmp)

•noCompare(0) – no comparison to the destination port in the IP packet

•equal(1) – the destination port in the IP action must be the same for the filter to be applied

•lessThan(2) – the destination port in the IP packet must be less than the source port specified for the filter to be applied

Modify Filter

165

Image 165

Patton electronic 29XX manual Destination IP, Source Port, Destination Port

Contents

Remote Access Server Patton Electronics Company, Inc Contents Drop and Insert 138 Interfaces 178 Sync PPP 276 Contents Contents Structure Audience General conventions Typographical conventions used in this document Mouse conventions Introduction Chapter contents HTTP/HTML and Snmp Object Format Introduction Logging into the HTTP/HTML Administration Pages Saving HTTP/HTML Object Changes Home Home Introduction Operating Status Variables Immediate Actions buttons Immediate Actions Import/Export Import/Export main window Export Configuration Typical access server flash memory configuration data Import Configuration Alarms Sample alarm indication Total System AlarmsX alarmTotal Displaying the Alarms window Alarms Alarm Response Outputs Modify Response-Configuring the alarm response system Alarm Snmp Trap IP 1 alarmTrapIp0 Alarm Syslog Priority syslogAlarmPriorityAlarm Snmp Trap IP 2 alarmTrapIp1 Alarm Snmp Trap IP 3alarmTrapIp2 Modify Alarms settings window Modify Alarms-Configuring alarm severity levels Authentication ID suID Validated authentications auAuthenticationsValidTotal Displaying the Authentication windowValidated via primary server auAuthenticationsValidPrimary Statistics section Denied authentications auAuthenticationsDenied Validated via static database auAuthenticationsValidStaticPrimary server timeouts auPrimaryServerTimeouts Secondary server timeouts auSecondaryServerTimeouts Validation auValidation Configuration section Host Address auHostAddress Timeout auTimeoutSecondary Host Address auSecondaryHostAddress Host Port auHostPort Accounting Port auAcctPort Accounting Enable auAccountingEnableRadius Packet Format auRadiusPacketFormat Radius Session ID Size auRadiusRunningIdSize Radius Session ID auRadiusRunningId Setting Up Authentication Authentication Configuration screen Host Address auHostAddress Accounting Port auAcctPort Adding Static Users Static User Authentication Modify Static User Service Port suServicePort Service IP suServiceIPService Mask suServiceMask Filter ID suFilterId DAX Circuit Type daxClockMode Configuring the DAX Fallback Reference daxClockFallbackRef Main Reference daxClockMainRef Clock Status daxClockFailure DAX Clock Status alarm condition Dial Dial Dial Dial Phone Dial Introduction Call Sorting diPageSort Dial In main windowCall ID diactIndex ML ID diactMultiIndex Duration diactSessionTime State diactStateDisconnect Reason diactTerminateReason Modulation diactModulation Dial Modulations window Connect Speed diactTxSpeedUsername diactUsername DSP Link diactDSPIndex Connection Modulation diactModulationTransmit Connection Speed diactTxSpeed Receive Connection Speed diactRxSpeed Error Correction diactErrorCorrectionData Compression Protocol diactCompression Locally Initiated Renegotiates diactLocalRenegotiates Dial Telco window Dial Telco window Time Slot diactSlotIndex WAN Link diactLinkIndexTime Call Is/Was Active diactSessionTime Termination Reason diactTerminateReason Shared Unique ID diactMultiIndex Dial Protocol window Protocol diactProtocol LCP Authentication LCPAuthOptionsIP Address diactIP Port # on Remote Machine diactPort Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProt Remote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProtNext Hop diForceNextHop Dial In Details window Dial In Details Dial In Modify window modify Login, Service, and DNS objects Dial In Modify default window Modify Login Login Technique diLoginTechniqueIP Address Pool diIpPool Modify Service Password Prompt diPasswordPromptDefault Service diService Username Prompt diUsernamePrompt Modify Domain Name Server Modify Attempts Failure Banner diFailureBannerSuccess Banner diSuccessBanner Modify Configuration Modify Maximum Time 110 diV110Enable Modify Isdn Configuration Modify Modem Configuration Modify V.92 Configuration K56flexdiModemK56Enable V90diModemV90EnableV34diModemV34Enable V32diModemV32Enable Guard Tone diModemGuardTone Billing Delay diBillingDelayCarrierLossDuration diModemCarrierLossDuration Answer Tone LengthdiModemAnswerToneLength Direct0-No compression will be used Manage Dnis Window Manage Dnis main window Called Calling Number dnisPoolDesrcDialedNumber Dnis Entry Window Dnis Profiles Dnis Profiles Main Window Login Technique dnisProfileLoginTechniqueID dnisIpProfileId IP Pool dnisProfileAssignedIpPool Service IP dnisProfileServiceIP Service Port dnisProfileServicePortTelnet Mode dnisProfileTelnetMode Dovbs dnisProfileDOVBS Add a Dnis Profile Status dnisIpProfileStatusDnis Profile Entry Window IP Pool dnisProfileSAssignedIpPool Dovbs dnisProfileDOVBS Service Port dnisProfileServicePort ID dnisIpPoolId Dnis IP Pools WindowIP Address Pool dnisIpPool Status dnisIpPoolStatus Dnis IP Pools Entry window Dnis IP Pool Entry Window User Statistics Call Identification, Session Dial In User Statistics window Call Identification Session Termination Reason diactTerminateReason Time Left In Session diactRemainingSession Dial Dial State at termination diactTerminateState LCP Statistics PPP Statistics Remote MRU diStatRemoteMRU LCP Authentication LCPAuthOptionsLocal Multilink Mrru diStatLcpLocalMRRU Remote Multilink Mrru diStatLcpRemoteMRRU Remote-Local AC Comprsn diStatRemoteToLocalACComp Local-Remote AC Comprsn diStatLocalToRemoteACCompTransmit Frame Check Seq. Size diStatTransmitFcsSize Receive Frame Check Seq. Size diStatReceiveFcsSize Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProt Operational Status diIpOperStatusRemote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Remote Max Slot ID diIpRemoteMaxSlotId Secondary Domain Name Server diactSecondaryDNS Primary Domain Name Server diactPrimaryDNSFilters diStatIpFilterAtoJ Phone Physical Layer Data Modulation Symbol Rate diactSymbolRate Error Correction diactErrorCorrectionTransmit Connection Speed diactTxSpeed Receive Connection Speed diactRxSpeed Locally Initiated Retrains diactLocalRetrains Remote Initiated Renegotiates diactRemoteRenegotiatesRemote Initiated Retrains diactRemoteRetrains Dial Out Dial Out 105 106 Call Sorting doPageSort Dial Out Main WindowActive Calls doActive Call ID doactIndex State doactState User doactUsernameDuration doactSessionTime Disconnect Reason doactTerminateReason 109 Dial Out Details window Modulation doactModulationSpeed doactTxSpeed Dial Out Details window Dial Out Modify window Login Technique doLoginTechnique TCP Type doServiceTypePassword Prompt doPasswordPrompt TCP Port doTcpPort Failure Banner doFailureBanner Login Attempts Allowed doAllowAttempts Maximum Idle Time doIdleTimeout Maximum Session Time doSessionTimeoutTime to Login sec doLoginTimeout Call History Timeout min doLingerTime V22 doModemV22Enable Isdn doModemISDNEnableV21 doModemV21Enable Maximum Speed doModemMaxSpeed Guard Tone doModemGuardTone Minimum Speed doModemMinSpeedCarrier Loss Duration doModemCarrierLossDuration Retrain doModemRetrain Dial Out Locations Window Restrict Modification doModemRestrictModsStatus locationstatus Add Location Idle Timeout locationIdleTimeout Multilink locationConfigMultilinkMaximum Session Time locationSessionTimeout Authentication Technique locationAuthTechnique Dialing Locations View/Modify location details Add Modem Profile Dial Out Modem Profiles WindowLocations Link Profile ID modemProfileId Carrier Loss Duration modemCarrierLossDuration Guard Tone modemGuardToneRetrainmodemRetrain Compression modemCompression Dial Out User Statistics Window Billing Delay modemBillingDelayStatus modemStatus View modem profile Call Identification Password doactPasswordCall ID doactIndex Username doactUsername Dsp Link doactDSPIndex Minutes until timeout doactRemainingIdleWan Link doactLinkIndex Time Slot doactSlotIndex 126 Bad Address doStatBadAddresses PPP StatisticsBad Controls doStatBadControls Packets too long doStatPacketTooLongs Local MRU doStatLocalMRU Remote LCP Authentication doStatLcpAuthRemote MRU doStatRemoteMRU Local Multilink Mrru doStatLcpLocalMRRU Remote PPP Protocol Compression doStatRemoteToLocalProtComp Local PPP Protocol Compression doStatLocalToRemoteProtCompLocal AC Compression doStatLocalToRemoteACComp Remote AC Compression doStatRemoteToLocalACComp Number Called doactNumberDialed Bad Packets doactErrorFramesOctets Sent doactSentOctets Octets Received doactReceivedOctets Connection Modulation doactModulation Error Correction Protocol doactErrorCorrectionTx Connection Speed doactTxSpeed Rx Connection Speed doactRxSpeed An example section of dialout Callback Callback diCallbackConfig Dial-in Modify Configuration Dial-in user waiting to be called back Dial-in Main Window Radius Configuration Callback Configuration suCallbackConfigCallback phone number suCallbackNumber Dialout Accounting information Drop and Insert Call History Timeout drLingerTime Session Timeout drSessionTimeoutDrop and Insert main window Active Calls drActive How Drop and Insert works Drop and insert diagram Using Drop and Insert Digital Signal Processing DSP 152 DSP main window DSP Settings main window Instance #1 Use dspUsefirst Instance #2 State dspStateSecondInstance #2 Use dspUseSecond DSP Memory Capture DSP Connection PerformanceDSP PCM Capture DSP Debugging Events Connection Summaries DSP Connection Totals Reboot-B dspTotalRebootDueToError Reboot-A dspTotalRebootDueToFailsRemote-Reneg dspRemoteRenegotiates Local-Retrain dspLocalRetrains DSP information window DSP StatusDesired State dspDesiredState Call Statistics Debug Statistics Ethernet State boxEtherAState Ethernet Main Window PrimaryIPAddress boxEtherAPrimaryIpAddress ConfigPrimaryIpMask boxEtherAPrimaryIpMask PrimaryIpFilters boxEtherAPrimaryIpFilters Ethernet Modify Window Ethernet Modify Window Technique Configuration Alignment Errors dot3StatsAlignmentErrorsEthernet Statistics SQE Test Errors dot3StatsSQETestErrors FCS Errors dot3StatsFCSErrorsOther Errors dot3StatsInternalMacTransmitErrors Carrier Sense Errors dot3StatsCarrierSenseErrors Other Received Errors dot3StatsInternalMacReceiveErrors Received Frames Too Long dot3StatsFrameTooLongsChip Set ID dot3StatsEtherChipSet Filter IP Modify Filter Defining a filter Direction filterIpDirection Name filterIpName Source IP Action filterIpActionComparison filterIpSourceAddressCmp Address filterIpSourceIp Destination IP Source PortDestination Port Port filterIpDestinationPort Protocol filterIpProtocolTCP Established filterIpTcpEstablished IP Filter showing default for dialout An example of using a filter 168 169 Frame Relay Congestion frameEnableCongestion Frame Relay main window Frame Relay main window Hdlc Statistics on Link Link X frDlcmiIfIndex Dlmi Window Error Threshold N392 frDlcmiErrorThreshold Signalling frDlcmiStateMultiCast Service frDlcmiMulticast Data Link Protocol frDlcmiAddress LMI Interface frDlcmiInterface Dlci windowBidirectional PollingfrDlc rDlcmiPollingBiDir Polling Verification T392 frDlcmiPollingVerification Dlci frCircuitDlci Congestion frameEnableCongestionInterface # FrameIPInterfaceNum State frCircuitState Interfaces Number ifIndex Interfaces main window Admin Stat ifAdminStatus Type ifTypeOperational Status ifOperStatus Description ifDescr Interface Details Speed ifSpeed Max Transfer Unit ifMTUPhysical Address ifPhysAddress Last Change ifLastChange Requested Errored Packets ifOutErrors Received Errored Packets ifInErrorsReceived and Discarded w/No Errs ifInDiscards Received w/Unknown Protocol ifInUnknownProtos 184 16 IP 186 IP main window IP main window Discarded for Header Errors ipInHdrErrors Default Time-To-Live ipDefaultTTLDiscarded for Address Errors ipInAddrErrors Forwarding ipForwarding Reassembly Timeout ipReasmTimeout Discarded w/No Errors ipInDiscardsForwarded Datagrams ipForwDatagrams Discarded for Unknown Protos ipInUnknownProtos Modify TCP main window TCP Retransmit-Timeout Minimum tcpRtoMin Retransmit-Timeout Algorithm tcpRtoAlgorithmRetransmit-Timeout Maximum tcpRtoMax Established Resets tcpEstabResets TCP Details UDP Others Received with No Delivery udpInErrors Handling of Netbios UDP Broadcasts boxNetbiosUdpBridgingReceived udpInDatagrams Received With No Ports udpNoPorts Block Icmp redirects boxBLockIcmpRedirects Errors icmpInErrors, icmpOutErrorsIcmp Receive/Send Messages window Total Received/Sent icmpInMsgs, imcpOutMsgs Source Quenchs icmpInSrcQuenchs, icmpOutSrcQuenchs Parameter Problems icmpInParmProbs, icmpOutParmProbsTimes Exceeded icmpInTimeExcds, icmpOutTimeExcds Redirects icmpInRedirects, icmpOutRedirects Echo Replys icmpInReps, icmpOutReps Addressing InformationTime Stamps icmpInTimestamps, icmpInTimestamps Address Mask Requests icmpInAddrMasks icmpOutAddrMasks Routing Information Entry Reassembly Maximum Size ipAdEntReasmMaxSizeEntry Interface Index ipAdEntIfIndex Entry Subnet Mask ipAdEntNetMask Mask ipRouteMask Destination ipRouteDest Cost RouteCost Gateway RouteGatewayInterface ipRouteIfIndex State RouteState Adding a point-to-point route Adding a static point-to-point route to a remote hostAdding a static routes to a remote network Advanced… Forwarding table window Next Hop ipRouteNextHop Type ipRouteTypeProtocol ipRouteProto IP Routing Destination window Info ipRouteInfoRoute Destination ipRouteDest Seconds Since Updated ipRouteAge Address Translation InformationTag RouteTag Net Address ipNetToMediaNetAddress Interface ipNetToMediaEntryPhysical ipNetToMediaPhysAddress Type ipNetToMediaType MFR Version 218 Line Signalling MFR Version 2 main windowCountry lineSigCountry Interregister Signalling MFR Version 2 Modify window MFR Version 2-Modify 213 214 Interregister Signalling 216 A1010 A1111 A1212 A1313 A1414 A1515 218 RIP Version Route Changes Made rip2GlobalRouteChanges RIP Version 2 main windowResponses Sent rip2GlobalQueries Address rip2IfConfAddress Adding a RIP address Receive rip2IfConfReceive Authentication Type rip2IfConfAuthType RIP Version 2-ConfigurationAuthentication Key rip2IfConfAuthKey Domain rip2IfConfDomain RIP Version 2 Statistics Status rip2IfStatStatus Sent Updates rip2IfStatSentUpdates Snmp Snmp window Snmp window Error Status Too Big snmpInTooBigs ASN ParseErrors snmpInASNParseErrsError Status Read Only snmpInReadOnlys Generated Errors snmpInGenErrs Out Authentication Failure Traps snmpEnableAuthenTraps Generated Errors snmpOutGenErrsGet Requests snmpOutGetRequests Get Next Requests snmpOutGetNexts System System System main window Snmp and HttpVersion boxSnmpVersion Message Blocks Manufacturer Total Size boxHeapSize Operating System Heap MemoryFree boxHeapFreeSpace Largest boxHeapLargestSpace Installation Payable featuresEnclosure System Other Web Settings boxBackgroundFlag System Services sysServicesPhysical Location sysLocation Monitor Privilege boxMonitorPrivilege System-Modify window System-Modify window Enable Payable FeaturesboxFeatureEnableKey System-Packet Holding Message Blocks Buffer Size boxbuffersizeNo. of Buffers boxbuffercount No. Free boxbuffersfree No. of Tasks Waited boxCountBufferTaskWaitNo. of Times UnavailableboxCountBufferUnavailable System Log System Log main window System Log Main Window System Log-Modify DaemonsPriority Min Priority for Console RS-232 syslogConsolePriority Min Priority for Flash Storage syslogFlashPriorityMin Priority for Snmp Trap Daemon syslogTrapPriority Unix Facility syslogUnixFacility Min Priority for RAM SyslogTablePriority Maintenance Call Trace syslogCallTraceMaintain Flash Storage syslogFlashClear System Log-Volatile Memory Time slTickMessage slMessage What the System Log messages are telling you System Log-Non-Volatile MemoryTime slfTick Message slfMessage T1/E1 Link Error Injection linkInjectError 263 Path Code Violations dsx1FarEndCurrentPCVs 271 T1/E1 Link Activity main window T1/E1 Link Activity main window Link dsx1LineIndexType dsx1LineType Physical Line Alarms dsx1LineStatus Alarms PresentFar End Alarm Failure Circuit ID dsx1CircuitIdentifier Loss Of Signal Failure Alarm Indication Signal AIS FailureTS16 Alarm Indication Signal Failure Loss Of Frame Failure Snmp MIB definition Isdn Signaling Alarms linkSignalStatus E1 TS16 AIS Line Status-Configuration Time Elapsed dsx1TimeElapsedValid Intervals dsx1ValidIntervals WAN Circuit Configuration-Modify Line Interface SettingsCircuit ID dsx1CircuitIdentifier Line Type dsx1LineType Line Coding dsx1LineCodingReceive Equalizer linkRxEqualizer Signalling Settings Yellow Alarm Format linkYellowFormatSignal Mode dsx1SignalMode Line Build Out linkLineBuildOut Test Settings Loopback Config dsx1LoopbackConfig Error Injection linkInjectErrorSend Code dsx1SendCode Line Status-Channel Assignment Channel channelIndexDesired Function channelfunction CurrentState ChannelState Near End Line Statistics-Current Severely Errored Seconds dsx1CurrentSESs Errored Seconds dsx1CurrentESsSeverely Errored Frame Seconds dsx1CurrentSEFSs Line Errored Seconds dsx1CurrentLESs Near End Line Statistics-History Near End Line Statistics-Totals Severely Errored Frame Seconds dsx1TotalSEFSs Severely Errored Seconds dsx1TotalSESsLine Errored Seconds dsx1TotalLESs Bursty ErroredSeconds dsx1TotalBESs Far End Line Statistics-Current Far End Line Statistics-History Severely Errored Frame Seconds dsx1FarEndIntervalSEFSs Severely Errored Seconds dsx1FarEndIntervalSESsLine Errored Seconds dsx1FarEndIntervalLESs Bursty Errored Seconds dsx1FarEndIntervalBESs Far End Line Statistics-Totals Using Non-Facility Associated Signaling Nfas Bursty Errored Seconds dsx1FarEndTotalBESsConfiguring Nfas Degraded Minutes dsx1FarEndTotalDMs RAS hosts 1 Nfas group containing 3 PRIs Sync PPP Sync PPP Line Status-Channel Assignment WAN Circuit Configuration window PPP Main Window PPP configuration Ip Mask pppServiceIpMask Ip Address pppServiceIpAddressDefault Settings State pppActState Authentication Side pppDefaultAuthenticationSide Authentication Technique pppDefaultAuthenticationTechniqueAuthentication Username pppDefaultAuthenticationUsername Authentication Password pppDefaultAuthenticationPassword PPP Link Window Compression pppDefaultIpCompressionLink frDlcmiIfIndex Status framerelStatus Link Configuration Authentication Username pppAuthenticationUsername Authentication Side pppAuthenticationSideAuthentication Password pppAuthenticationPassword Security Level pppAccessLevel Allow Magic Number Negotiation pppMagicNumber Link Compression pppLinkCompressionBad Address pppStatBadAddresses Bad Controls pppStatBadControls ACC Map pppStatLocalToPeerACCMap LCP AuthenticationpppStatLcpAuthPeer-Local ACC Map pppStatPeerToLocalACCMap Local-Remote AC ComprsnpppStatLocalToRemoteACComp Transmit Frame Check Seq. Size pppStatTransmitFcsSize Remote-Local AC Comprsn pppStatRemoteToLocalACCompReceive Frame Check Seq. Size pppStatReceiveFcsSize Operational Status pppIpOperStatus Local Max Slot ID pppIpLocalMaxSlotId Remote Max Slot ID pppIpRemoteMaxSlotIdOctets Sent pppActSentOctets Octets Received pppActReceivedOctets Link Configuration Modify Link Configuration Window Layer 2 Tunneling Protocol L2TP Static Authentication L2TP Configuration L2TP Radius Authentication Radius Authentication Cisco Configuration Configuration Example This will enable the use of tunnel authentication Contacting Patton About window Patton Electronics Company contact information License Definitions End User License Agreement Title WarrantyTerm Grant of License Appendix a Supported Radius Attributes Access-Request Attributes Access-Accept Attributes Accounting-Start Attributes Access-Challenge Attributes Accounting-Stop Attributes Appendix B MIB trees Model 2960 MIB Tree Structure Appendix C Technical Reference Configuring a Radius server What Is RADIUS?Radius Client/Server Architecture Radius Services Radius Standards Radius Authentication Procedure Radius Resources RADIUS-Where Can I Get It? Configuring Radius Configuring Radius AuthenticationOverview Authentication window Finding the Snmp Name Using Snmp with the Access Server Finding the branch where the Snmp parameter resides MIB tree for Model 2960 access server Configuring Nfas Configuring Non-Facility Associated Signaling Nfas Line Configuration Configuring Frame Relay WAN Channel Assignment main screen Configuring PVCs Configuring Frame Relay link parameters Click on Submit Query Configuring Permanent Virtual Circuits IP routing with Frame Relay example Configuring IP routing with a Frame Relay Link Click Add Route Link Status and the IP Forwarding Setting up IP address pools by configuring Dnis Ip Pools Configuring DnisSetting up a Dnis user profile Setting up a Dnis group Configuring the RAS Configuring a leased line/dedicated line connection Modem properties window Configuring the remote end using Microsoft Windows Under the Options tab set Redial attempts to a high number