SMC Networks SMC7204BRA manual Configuring IP Filters, Configuring IP Filter Global Settings

Configuring IP Filters

Configuring IP Filter Global Settings

The [IP Filter Configuration] page enables you to configure the following global IP filter settings.

[Security Level:]

This setting determines which IP filter rules take effect, based on the security level specified in each rule. For example, when [High] is selected, only those rules that are assigned a High security value will be effective. The same is true for the [Medium] and [Low] settings. When [None] is selected, IP filtering is disabled.

[Private Default Action:], [Public Default Action:], [DMZ Default Action:]

These settings specify a default action ([Accept] or [Deny]) to be taken on Private, Public or DMZ type device interfaces when they receive packets that do not match any of the filtering rules. You can specify a different default action for each interface type. (You specify an interface's type when you create the interface; see the

PPPconfiguration page, for example.)

-A Public interface typically connects to the Internet. PPP, EoA, and IPoA interfaces are typically public. Packets received on a public interface are subject to the most restrictive set of firewall protections defined in the software. Typically, the global setting for public interfaces is [Deny], so that all accesses to your LAN initiated from external computers are denied (discarded at the public interface), except for those allowed by a specific IP filter rule.

-A Private interface connects to your LAN, such as the Ethernet interface. Packets received on a private interface are subject to a less restrictive set of protections, because they originate within the network. Typically, the global setting for private interfaces is [Accept], so that

137