Cradlepoint IBR600 Product Manual page 78

COR | USER MANUAL Firmware ver. 5.0.0
CRADLEPOINT
6.4.3 IP Filter Rules (Advanced)
An "Incoming" IP filter rule restricts remote access
to computers on your local network. "Outgoing"
filter rules prevent computers on your local network
from initiating communication to the address range
specified in the rule.
This feature is especially useful when combined with port forwarding and/or DMZ to restrict remote access to a specified
host or network range. For example, in order to host a server you might have opened ports with a port forwarding rule that
could expose your LAN to cyber attacks. With an incoming IP filter rule, you can restrict the access to your LAN to only
known devices.
• Name: Name your rule.
• Enabled: Selected by default.
• Log: When checked each packet
matching this filter rule will be logged
in the System Logs.
• Action: "Allow" or "Deny"
• Protocol: Any, ICMP, TCP, UDP,
GRE, ESP, or SCTP.
IP Source / IP Destination
• IP Negation: Match on any IP address
that is NOT in the specified IP network
range.
• Network IP: Optional field to specify a
matching network IP address for this
rule to match against.
• Netmask: Use this to define a subnet
size this rule will match against.
• Port Negation: Match on any port that
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 75