8 • Filter IP

T1/E1 DACS Administrators’ Reference Guide

 

 

The following sections provide detailed descriptions of the configurable filter IP parameters.

Name (filterIpName)

This is the name of the filter

Direction (filterIpDirection)

Specifies the direction of the filter (that is, whether it applies to data packets inbound or outbound from the DACS). The filter only applies to the Superuser and the Monitor Users through the Ethernet interface. (Since the DACS and WAN connections function as a transparent pipe, neither of the two users can utilize these interfaces, only the Ethernet interface.) The following options are available:

inactive(0)—Disables filter operation

inbound(1)—Relates to packets coming into the DACS

outbound(2)—Relates to packets leaving the DACS

both(3)—Specifies both inbound and outbound operation

Action (filterIpAction)

Specifies the action to effect the packet. The action decides whether to block or pass the packet. The following options are available:

pass(0)—If pass is selected, checking will continue on to other filters until either a match occurs, a block occurs, or there are no more filters remaining to check.

Note If there are any applied PASS filters, then at least one of them must match or the packet will be dropped.

block(1)—If a filter has block set and the filter matches the block, the packet is discarded and no further processing is done.

wrap(2)—All packets received on the specified link will be encapsulated in an extra IP header as defined in RFC2003. The destination IP address of the wrapper is given by the destination IP setting in the filter. The source IP address of the wrapper is the ethernet address of the DACS.

All wrap filters are inbound only.

Source IP (filterIpSourceIp)

This is the Source IP address in the IP header, it is used when comparing a packet’s source address.

Source IP Mask (filterIpSourceMask)

This is the Source IP Mask (filterIpSourceMask) used when comparing a packet’s source address. Bit positions that are set to 1 will be compared and 0’s will be ignored. Thus, a setting of 0.0.0.0 will have the effect of dis- abling source IP address comparison.

Destination IP (filterIpDestinationIp)

This is the destination IP address in the IP header used when comparing a packet’s destination address.

52

Defining a filter

Page 54
Image 54
Patton electronic Model 2604 Name filterIpName, Direction filterIpDirection, Action filterIpAction, Source IP filterIpSourceIp