Prestige 2602HW Series User’s Guide

Table 111 Menu 21.1.x.1 TCP/IP Filter Rule (continued)

FIELD

DESCRIPTION

 

 

Port #

Type the destination port of the packets you want to filter. The field range is 0 to

 

65535. A 0 field is ignored.

Port # Comp

Select the comparison to apply to the destination port in the packet against the value

 

given in Destination: Port #. Choices are None, Less, Greater, Equal or Not

 

Equal.

Source:

 

 

 

IP Addr

Type the source IP Address of the packet you want to filter. A 0.0.0.0 field is ignored.

 

 

IP Mask

Type the IP mask to apply to the Source: IP Addr field.

 

 

Port #

Type the source port of the packets you want to filter. The range of this field is 0 to

 

65535. A 0 field is ignored.

Port # Comp

Select the comparison to apply to the source port in the packet against the value

 

given in Source: Port # field. Choices are None, Less, Greater, Equal or Not

 

Equal.

TCP Estab

This applies only when the IP Protocol field is 6, TCP. If Yes, the rule matches

 

packets that want to establish TCP connection(s) (SYN=1 and ACK=0); else it is

 

ignored.

More

If Yes, a matching packet is passed to the next filter rule before an action is taken or

 

else the packet is disposed of according to the action fields.

 

If More is Yes, then Action Matched and Action Not Matched will be N/A.

 

 

Log

Select the logging option from the following:

 

None – No packets will be logged.

 

Action Matched – Only packets that match the rule parameters will be logged.

 

Action Not Matched – Only packets that do not match the rule parameters will be

 

logged.

 

Both – All packets will be logged.

 

 

Action Matched

Select the action for a matching packet. Choices are Check Next Rule, Forward or

 

Drop.

Action Not

Select the action for a packet not matching the rule. Choices are Check Next Rule,

Matched

Forward or Drop.

When you have completed this menu, press [ENTER] at the prompt “Press ENTER to Confirm or ESC to Cancel:” to save your configuration, or press [ESC] at any time to cancel.

The following figure illustrates the logic flow of an IP filter.

Chapter 33 Filter Configuration

337