ZyXEL Communications Prestige 642 Manuale utente

Prestige 642

ADSL Router

User's Guide

Version 2.50

(May 2000)

ZyXEL

TOTAL INTERNET ACCESS SOLUTION

Getting Started

Part I:

Getting Started

Chapters 1-3 are structured as a step-by-step guide to help you connect, install and setup your

Prestige to operate on your network and access the Internet.

Advanced Applications

Part II:

Advanced Applications

Advanced Applications (Chapters 4-7) describe the advanced applications of your Prestige, such

as Remote Node Setup IP Static routes and NAT.

Advanced Management

III

Part III:

Advanced Management

Chapters 8 - 12 provide information on Prestige Filtering, SNMP, System Maintenance, IP Policy

Routing, Troubleshooting as well as some Appendices and a Glossary.

Prestige 642 ADSL Internet Access Router

Filter Configuration 8-1

Chapter 8

Filter Configuration

This chapter shows you how to create and apply filter(s).

8.1 About Filtering

Your Prestige uses filters to decide whether to allow passage of a data packet and/or to make a call. There

are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and

protocol filters, which are discussed later.

Data filtering screens the data to determine if the packet should be allowed to pass. Data filters are divided

into incoming and outgoing filters, depending on the direction of the packet relative to a port. Data filtering

can be applied on either the WAN side or the Ethernet side. Call filtering is used to determine if a packet

should be allowed to trigger a call. Remote node call filtering is only applicable when using PPPoE

encapsulation. Outgoing packets must undergo data filtering before they encounter call filtering as shown in

the following figure.

Figure 8-1 Outgoing Packet Filtering Process

For incoming packets, your Prestige applies data filters only. Packets are processed depending upon

whether a match is found. The following sections describe how to configure filter sets.

Data

Filtering

Outgoing

Packet

Drop

packet

Built-in

default

Call Filters

User-defined

Call Filters

(if applicable)

Initiate call

if line not up

Active Data

Send packet

and reset

Idle Timer

Or Or

Drop packet

if line not up

Drop packet

if line not up

Send packet

but do not reset

Idle Timer

Send packet

but do not reset

Idle Timer

Match MatchMatch

match

Call Filtering

Prestige 642 ADSL Internet Access Router

8-2 Filter Configuration

8.1.1 The Filter Structure of the Prestige

A filter set consists of one or more filter rules. Usually, you would group related rules, e.g., all the rules for

NetBIOS, into a single set and give it a descriptive name. The Prestige allows you to configure up to twelve

filter sets with six rules in each set, for a total of 72 filter rules in the system. You cannot mix device filter

rules and protocol filter rules within the same set. You can apply up to four filter sets to a particular port to

block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24

rules active for a single port.

Three sets of factory default filter rules have been configured in Menu 21 to prevent NetBIOS traffic from

triggering calls and to prevent incoming telnetting. A summary of their filter rules is shown in the figures

that follow.

The following diagram illustrates the logic flow when executing a filter rule.

Prestige 642 ADSL Internet Access Router

Filter Configuration 8-3

Start

Fetch First

Filter Set

Fetch First

Filter Rule

Active?

Execute

Filter Rule

Fetch Next

Filter Rule

Next filter

Rule

Available?

Fetch Next

Filter Set

Next Filter Set

Available?

Accept PacketDrop Packet

Yes

Packet into

filter

Filter Set

Forward

Drop

Check

Rule

Figure 8-2 Filter Rule Process

You can apply up to four filter sets to a particular port to block multiple types of packets. With each filter

set having up to six rules, you can have a maximum of 24 rules active for a single port.

Prestige 642 ADSL Internet Access Router

8-4 Filter Configuration

8.2 Configuring a Filter Set

To configure a filter set, follow the procedure below.

Step 1. Enter 21 from the Main Menu to open Menu 21.

Figure 8-3 Menu 21 – Filter Setup

Step 2. Enter the index number of the filter set (no. 1-12) you wish to configure and press [ENTER].

Step 3. Enter a descriptive name or comment in the Edit Comments field and press [ENTER].

Step 4. Press [ENTER] at the message: [Press ENTER to confirm] to open Menu 21.1.1 - Filter Rules

Summary.

Menu 21 - Filter Set Configuration

Filter Filter

Set # Comments Set # Comments

------ ----------------- ------ -----------------

1 NetBIOS_WAN 7 _______________

2 NetBIOS_LAN 8 _______________

3 TELNET_WAN 9 _______________

4 PPPoE 10 _______________

5 _______________ 11 _______________

6 _______________ 12 _______________

Enter Filter Set Number to Configure= 0

Edit Comments= N/A

Press ENTER to Confirm or ESC to Cancel:

Prestige 642 ADSL Internet Access Router

Filter Configuration 8-5

Figure 8-4 NetBIOS_WAN Filter Rules Summary

Figure 8-5 NetBIOS _LAN Filter Rules Summary

Figure 8-6 Telnet_WAN Filter Rules Summary

Menu 21.2 - Filter Rules Summary

# A Type Filter Rules M m n

- - ---- -------------------------------------------- --------- - - -

1 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=53 N D F

2 Y

3 Y

4 Y

5 Y

6 Y

Enter Filter Rule Number (1-6) to Configure:

Menu 21.3 - Filter Rules Summary

# A Type Filter Rules M m n

- - ---- --------------------------------------------------------------- - - -

1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F

2 N

3 N

4 N

5 N

6 N

Enter Filter Rule Number (1-6) to Configure:

Menu 21.1 - Filter Rules Summary

# A Type Filter Rules M m n

- - ---- -------------------------------------------- --------- - - -

1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N

2 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N

3 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 N D N

4 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N

5 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N

6 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=139 N D F

Enter Filter Rule Number (1-6) to Configure:

Press ENTER to Confirm or ESC to Cancel:

Altri manuali per Prestige 642

Indice

Altri manuali ZyXEL Communications Router di rete

ZyXEL Communications

ZyXEL Communications P-660RU-T1 v3 Manuale utente

ZyXEL Communications

ZyXEL Communications Dimension ES-124P Guida di riferimento

ZyXEL Communications

ZyXEL Communications EMG3525-T50B Manuale utente

ZyXEL Communications

ZyXEL Communications NWA5160N Manuale utente

ZyXEL Communications

ZyXEL Communications EMG3525-T50B Manuale utente

ZyXEL Communications

ZyXEL Communications LTE3311 series Manuale utente

ZyXEL Communications

ZyXEL Communications GS1100-8HP Manuale utente

ZyXEL Communications

ZyXEL Communications P-660R-Tx v2 Series Manuale utente

ZyXEL Communications

ZyXEL Communications Prestige 941 Manuale utente

ZyXEL Communications

ZyXEL Communications ADSL VoIP IAD with 802.11g Wireless 2602HW... Manuale utente

ZyXEL Communications

ZyXEL Communications GS1100-8HP Manuale utente

ZyXEL Communications

ZyXEL Communications Dimension ES-108S Manuale utente

ZyXEL Communications

ZyXEL Communications PLA5256 Manuale utente

ZyXEL Communications

ZyXEL Communications ZyWALL SSL 10 Manuale di istruzioni

ZyXEL Communications

ZyXEL Communications P-660RU-Tx v3 SERIES Manuale utente

ZyXEL Communications

ZyXEL Communications P-660R-TX V3 Manuale

ZyXEL Communications

ZyXEL Communications P-660R-Tx Series Manuale

ZyXEL Communications

ZyXEL Communications LTE3202-M430 Manuale utente

ZyXEL Communications

ZyXEL Communications DIMENSION ES-1124 Manuale utente

ZyXEL Communications

ZyXEL Communications P-2602HWNLI-DxA Series Manuale utente

ZyXEL Communications

ZyXEL Communications P-791R Guida di riferimento

ZyXEL Communications

ZyXEL Communications P-2602HWNLI Manuale utente

ZyXEL Communications

ZyXEL Communications Prestige 660W Series Istruzioni per l'installazione

ZyXEL Communications

ZyXEL Communications IES-5000 Series Manuale

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza