Nortel Contivity 1100 Configuration Manual page 104

104 Chapter 5 Configuring the system
5
6
You can copy an existing tunnel filter for use as an interface filter or vice versa.
However, when you copy a filter, the operation does not copy any components
(such as a rule, port, protocol, or address) that have the same name as an existing
component in the destination filter set. You should use unique names for the
device in all filter rules.
NN46110-500
The MSS should be 40 bytes less than the largest packet the implementation
can re-assemble.
Interface filter shows whether or not the Nortel VPN Router Firewall is in
use (this reflects the selection on the Services > Firewall window).
This entry also shows the interface filter that is currently being used by the
Nortel VPN Router Firewall. Select from a list of all interface filters that have
been set up on the Nortel VPN Router (on the Profiles > Filters window), and
to select a different filter for the Nortel VPN Router Firewall.
Note: If you change the interface filter setting, a message informs you
that you must restart your Nortel VPN Router before the new interface
filter is used. If the Nortel VPN Router Firewall is not enabled, the new
selection has no effect.
Use the New Interface Filter link to go to the Profiles > Filters window and
create a new filter. The default Interface Filter setting is Deny All.