Cradlepoint COR IBR1100/IBR1150 Manual page 54

Attach LAN and GRE interfaces to a zone by selecting the Config Name for those interfaces. For LANs, these names are defined in Network Settings → WiFi / Local
Networks; for GRE tunnels, these names are defined in Internet → GRE Tunnels.
Sample zone interface assignments: LAN & GRE
LAN Config Name
LAN Config Name
GRE Config Name
The third field defaults to "is," but you can also select "is not," "starts with," "contains," or "ends with" to define the zone.
WAN Interfaces
Attaching WAN interfaces to a zone includes many more options. Select "WAN" in the first field, and then select from each of the following fields to create a statement that
defines which WAN interfaces to attach to this zone.
Field 2: Choose one of the following:
Port – Select by the physical port on the router (e.g., "Modem 1").
Manufacturer – Select by the modem manufacturer (e.g., "CradlePoint Inc.").
Model – Select according to the specific model of modem.
Type – Select by type of Internet source (Ethernet, LTE, Modem, Wireless as WAN, WiMAX).
Serial Number – Select a 3G or LTE modem by the serial number.
MAC Address – Select from a dropdown list of attached devices.
Unique ID – Select by ID. This is generated by the router and displayed when the device is connected to the router.
Field 3: Select "is," "is not," "starts with," "contains," or "ends with" to create your condition.
Field 4: If the desired values are available, select from the dropdown list. You may need to manually input the value.
Sample zone interface assignments: WAN
WAN Type
WAN Port
Filter Policies
A Filter Policy is a one-way filter applied to initialized network traffic flowing from one zone to another. A Filter Policy needs to be assigned to a Forwarding for it to take effect.
Filter Policies can either be Added, Edited, Removed, or Cloned. Cloning a Policy will copy the entire policy. The name of the cloned policy will include the name plus "Clone".
Default Allow All is a preconfigured policy to allow all traffic initialized from one zone to flow to another zone. The state of the connection is tracked to allow
responses to traverse the zones back to the source. LAN to WAN forwardings use this policy by default. The policy can be removed or altered to filter the traffic flow.
Default Deny All is a preconfigured policy to deny all traffic initialized from one zone to be blocked to another zone. WAN to LAN forwardings use this policy by
default. The policy can be removed or altered to filter the traffic flow.
Click Add to create a new filter policy, or select an existing policy and click Edit to open the filter policy editor.
10/13/2014
is Primary LAN
isn't Guest LAN
is office_tunnel
is Ethernet
isn't Modem 1
CradlePoint COR IBR1100/IBR1150 – Manual
54