Cradlepoint ARC CBA850 Product Manual page 62

CBA850 | USER MANUAL Firmware version 5.4.0
CRADLEPOINT
IP Filter Rules (Advanced)
An "Incoming" IP filter rule restricts remote
access to computers on your local network.
"Outgoing" filter rules prevent computers on
your local network from initiating
communication to the address range
specified in the rule.
This feature is especially useful when
combined with port forwarding and/or DMZ to
restrict remote access to a specified host or
network range. For example, in order to host
a server you might have opened ports with a
port forwarding rule that could expose your
LAN to cyberattacks. With an incoming IP
filter rule, you can restrict the access to your
LAN to only known devices.
• Name: Name your rule
• Enabled: Selected by default
• Log: When checked each packet
matching this filter rule will be logged
in the System Logs
• Action: "Allow" or "Deny"
• Protocol: Any, ICMP, TCP, UDP,
GRE, ESP, or SCTP
IP Source/IP Destination
• IP Negation: Match on any IP address that is NOT in the specified IP network range.
• Network IP: Optional field to specify a matching network IP address for this rule to match against.
• Netmask: Use this to define a subnet size this rule will match against.
• Port Negation: Match on any port that is NOT in the specified port range.
© 2015 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 60