Figure 33-2 Filter Rule Process - ZyXEL Communications Prestige 662HW Series User Manual

Prestige 662HW Series User's Guide
Fetch Next
Filter Set
Yes
Next Filter Set
Available?
No
Drop Packet
You can apply up to four filter sets to a particular port to block various types of packets. Because each
filter set can have up to six rules, you can have a maximum of 24 rules active for a single port.
For incoming packets, your Prestige applies data filters only. Packets are processed depending on
whether a match is found. The following sections describe how to configure filter sets.
The Filter Structure of the Prestige
A filter set consists of one or more filter rules. Usually, you would group related rules, for example, all
the rules for NetBIOS, into a single set and give it a descriptive name. You can configure up to twelve
filter sets with six rules in each set, for a total of 72 filter rules in the system.
33-2
Filter Set
Fetch Next
Filter Rule
Yes
Next filter
No Rule
Available?
Check
Next
Rule

Figure 33-2 Filter Rule Process

Start
Packet
intoFilter
Fetch First
Filter Set
Fetch First
Filter Rule
No
Active?
Yes
Execute
Filter Rule
Forward
Drop
Accept Packet
Filter Configuration