Total Access 600R System Manual Section 4 User Interface Guide
61200600L1-1A © 2002 ADTRAN, Inc. 109
SECURITY > FILTERS > INTERFACES
The unit can block packets in and out of an interface by use of the filters. They are set up in two steps:
1) define the types of packets that would be of interest in the
SECURITY > FILTERS > FILTER DEFINES menu,
and 2) set up the filter type and combination of defines that will cause a packet block.
SECURITY > FILTERS > INTERFACES (T1[0])
Define the filters for the T1 interfaces from this menu.
SECURITY > FILTERS > INTERFACES (T1[0]) > SUB-INTERFACE
If the L2 PROTOCOL is FRAME RELAY, the SUB-INTERFACE will be FRE [0.X], where the [0.X] represents the
T1 physical and logical ports, respectively. The T1 physical port is always 0. The X represents the Frame
Relay logical port and will always be a number 0-9 corresponding to the interface number under
L2 PROTOCOL > CONFIG > DLCI MAPPING. This is a read-only field.
If the
L2 PROTOCOL is PPP, the SUB-INTERFACE is PPP [0.0]. The [0.0] represents the T1 physical and
logical ports, respectively. This is a read-only field.
SECURITY > FILTERS > INTERFACES (T1[0]) > SET-UP
Enable the T1 interface filtering and define filters from this menu.
The T1 interface will only appear in the SECURITY > FILTERS > INTERFACE list if the L2
PROTOCOL is set to FRAME RELAY or PPP.
IN FROM VC
The packets which come into the unit can be filtered in three ways:
DISABLE (DEF)
Turns off packet input filtering. No incoming packets are blocked.
BLOCK ALL
All incoming packets from the WAN are blocked except as defined
in the
SECURITY > FILTERS > INTERFACES > SETUP > IN EXCEPTIONS
list.
FORWARD ALL
No incoming packets from the WAN are blocked except as defined
in the
SECURITY > FILTERS > INTERFACES > SETUP > IN EXCEPTIONS
list.
IN EXCEPTIONS
This is a list of up to 32 filter entries which can be combined using the operations field. The
operations are performed in the order they appear on the list.
Kommentare zu diesen Handbüchern