Cradlepoint IBR600 Product Manual page 62

IBR600| USER MANUAL Firmware ver. 3.5.1
CRADLEPOINT
IP Filter Rules (Advanced)
6.4.2
An "Incoming" IP filter rule restricts remote access to computers on your local network. "Outgoing" filter rules prevent
computers on your local network from initiating communication to the address range specified in the rule.
This feature is especially useful when combined with port forwarding and/or DMZ to restrict remote access to a specified
host or network range. For example, in order to host a server you might have opened ports with a port forwarding rule that
could expose your LAN to cyber attacks. With an incoming IP filter rule, you can restrict the access to your LAN to only
known devices.
 Name: Name your rule.
 Enabled: Selected by default.
 Direction: ―Any,‖ ―Incoming,‖ or
―Outgoing‖
 Action: ―Allow‖ or ―Deny‖
 Protocol: Any, ICMP, TCP, UDP, GRE,
ESP, or SCTP.
IP Source / IP Destination
 Network IP: Optional field to specify a
matching network IP address for this rule
to match against.
 Netmask: Use this to define a subnet
size this rule will match against.
 Port(s): Use for a single port or a range
of ports. Fill in the left side for a single
port.
Use Network IP, Netmask, and Port(s) to specify the ports and addresses for which the rule applies. You can specify a
range of ports or a single port. Similarly, the netmask can be used to define either a range of addresses (i.e.
255.255.255.0) or a single address (255.255.255.255).
© 2012 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 60