Table of Contents
Advertisement
8 • Filter IP
The following sections provide detailed descriptions of the configurable filter IP parameters.
Name (filterIpName)
This is the name of the filter
Direction (filterIpDirection)
Specifies the direction of the filter (that is, whether it applies to data packets inbound or outbound from the
DACS). The filter only applies to the Superuser and the Monitor Users through the Ethernet interface. (Since
the DACS and WAN connections function as a transparent pipe, neither of the two users can utilize these
interfaces, only the Ethernet interface.) The following options are available:
•
inactive(0)—Disables filter operation
•
inbound(1)—Relates to packets coming into the DACS
•
outbound(2)—Relates to packets leaving the DACS
•
both(3)—Specifies both inbound and outbound operation
Action (filterIpAction)
Specifies the action to effect the packet. The action decides whether to block or pass the packet. The following
options are available:
•
pass(0)—If pass is selected, checking will continue on to other filters until either a match occurs, a block
occurs, or there are no more filters remaining to check.
Note
•
block(1)—If a filter has block set and the filter matches the block, the packet is discarded and no further
processing is done.
•
wrap(2)—All packets received on the specified link will be encapsulated in an extra IP header as defined in
RFC2003. The destination IP address of the wrapper is given by the destination IP setting in the filter. The
source IP address of the wrapper is the ethernet address of the DACS.
All wrap filters are inbound only.
Source IP (filterIpSourceIp)
This is the Source IP address in the IP header, it is used when comparing a packet's source address.
Source IP Mask (filterIpSourceMask)
This is the Source IP Mask (filterIpSourceMask) used when comparing a packet's source address. Bit positions
that are set to 1 will be compared and 0's will be ignored. Thus, a setting of 0.0.0.0 will have the effect of dis-
abling source IP address comparison.
Destination IP (filterIpDestinationIp)
This is the destination IP address in the IP header used when comparing a packet's destination address.
52
If there are any applied PASS filters, then at least one of them must
match or the packet will be dropped.
T1/E1 DACS Administrators' Reference Guide
Defining a filter
Advertisement
Table of Contents
