Table of Contents
Advertisement
Configuring VLAN-based Filtering
1.
Configure filter 2 to allow local clients to browse the Web and then assign VLAN 20 to
the filter.
The filter must recognize and allow TCP traffic from VLAN 20 to reach the local client destina-
tion IP addresses if originating from any HTTP source port:
>> # /cfg/slb/filt 2
>> Filter 2# sip any
>> Filter 2# dip 205.177.15.0
>> Filter 2# dmask 255.255.255.0
>> Filter 2# proto tcp
>> Filter 2# sport http
>> Filter 2# dport any
>> Filter 2# action allow
>> Filter 2# vlan 20
>> Filter 2# ena
All clients from other VLANs will be ignored.
2.
Configure filter 3 to allow local clients to Telnet anywhere outside the local intranet and
then assign VLAN 30 to the filter.
The filter must recognize and allow TCP traffic to reach the local client destination IP
addresses if originating from a Telnet source port:
>> # /cfg/slb/filt 3
>> Filter 3# sip any
>> Filter 3# dip 205.177.15.0
>> Filter 3# dmask 255.255.255.0
>> Filter 3# proto tcp
>> Filter 3# sport telnet
>> Filter 3# dport any
>> Filter 3# action allow
>> Filter 3# name allow clients to telnet (Provide a descriptive name for the
>> Filter 3# vlan 30
>> Filter 3# ena
212777-A, February 2002
Web OS 10.0 Application Guide
(Select the menu for Filter 2)
(From any source IP address)
(To base local network dest. address)
(For entire subnet range)
(For TCP protocol traffic)
(From any source HTTP port)
(To any destination port)
(Allow matching traffic to pass)
(Assign VLAN 20 to Filter 2)
(Enable the filter)
(Select the menu for Filter 3)
(From any source IP address)
(To base local network dest. address)
(For entire subnet range)
(For TCP protocol traffic)
(From a Telnet port)
(To any destination port)
(Allow matching traffic to pass)
filter)
(Assign VLAN 30 to Filter 3)
(Enable the filter)
Chapter 7: Filtering
n
175
Advertisement
Table of Contents
