Table 96 Menu 21.1.X.x Tcp/Ip Filter Rule - ZyXEL Communications Prestige 2602R Series User Manual

The following table describes how to configure your TCP/IP filter rule.

Table 96 Menu 21.1.x.x TCP/IP Filter Rule

FIELD
Filter #
Filter Type
Active
IP Protocol
IP Source Route
Destination:
IP Addr
IP Mask
Port #
Port # Comp
Source:
IP Addr
IP Mask
Port #
Port # Comp
TCP Estab
More
Log
Action Matched
Chapter 30 Filter Configuration
DESCRIPTION
This is the filter set, filter rule coordinates, for instance, 2, 3 refers to the second filter
set and the third filter rule of that set.
Use [SPACE BAR] and then [ENTER] to choose a rule. Parameters displayed for
each type will be different. Choices are TCP/IP Filter Rule or Generic Filter Rule.
Select Yes to activate or No to deactivate the filter rule.
This is the upper layer protocol, for example, TCP is 6, UDP is 17 and ICMP is 1.
The value must be between 0 and 255. A value of 0 matches ANY protocol.
IP Source Route is an optional header that dictates the route an IP packet takes
from its source to its destination. If Yes, the rule applies to any packet with an IP
source route. The majority of IP packets do not have source route.
Type the destination IP address of the packet you want to filter. This field is ignored
if it is 0.0.0.0.
Type the IP mask to apply to the Destination: IP Addr field.
Type the destination port of the packets you want to filter. The field range is 0 to
65535. A 0 field is ignored.
Select the comparison to apply to the destination port in the packet against the value
given in Destination: Port #. Choices are None, Less, Greater, Equal or Not
Equal.
Type the source IP Address of the packet you want to filter. A 0.0.0.0 field is ignored.
Type the IP mask to apply to the Source: IP Addr field.
Type the source port of the packets you want to filter. The range of this field is 0 to
65535. A 0 field is ignored.
Select the comparison to apply to the source port in the packet against the value
given in Source: Port # field. Choices are None, Less, Greater, Equal or Not
Equal.
This applies only when the IP Protocol field is 6, TCP. If Yes, the rule matches
packets that want to establish TCP connection(s) (SYN=1 and ACK=0); else it is
ignored.
If Yes, a matching packet is passed to the next filter rule before an action is taken or
else the packet is disposed of according to the action fields.
If More is Yes, then Action Matched and Action Not Matched will be N/A.
Select the logging option from the following:
None – No packets will be logged.
Action Matched – Only packets that match the rule parameters will be logged.
Action Not Matched – Only packets that do not match the rule parameters will be
logged.
Both – All packets will be logged.
Select the action for a matching packet. Choices are Check Next Rule, Forward or
Drop.
Prestige 2602R Series User's Guide
291