Ip Filters; Figure 9-1. Listing Filters - Bay Networks NauticaRS Reference Manual

IP Filters

ip# ls -l
route/S/0.0.0.0/0/RemotePPP
route/P/192.168.1.0/24/LAN01
filter/central
ip#
Figure 9-1.
117237-E Rev.00
Specific network connections across the router can be allowed or
rejected by defining network/host address filters. IP address filters
are configured at the ip# object.
The way filters operate on the router is determined by the
attribute in the system# object.
If IP filtering is set to Reject-On-Match, then all connections
apart from those defined in the filter list
through the router.
When set to Forward-On-Match, only those connections defined
in the list (Figure
Note: If Forward-On-Match is used, a filter must be added that
contains the local network address as both halves of the
connection. This allows the router to send and receive data via
the LAN01 path.
Note: If access to the management system via Telnet is needed,
the network on which the host resides (or the particular host on
the network) must be one half of the connection; the router's IP
address, and those of any other routers to which access is
needed, must be the other half.
When first installed, there are no filters set up on the router. Once
created, filters can be listed by typing ls -l at the ip# prompt:
Listing Filters
9-1) are allowed through; all others are rejected.
Using IP
en-filter
(Figure 9-1) are allowed
9-13