Filtering Rules By Filter Id Examples - Siemens HiPath C10 User Manual

The Filtering tab automatically provides a Deny All rule already in place. This rule can be
modified to Allow All, if appropriate to the network access needs for this VNS.
5. For each filtering rule you are defining, do the following:
In the IP/subnet:port box, type the destination IP address. You can also specify an IP
●
range, a port designation, or a port range on that IP address.
In the Protocol drop-down list, select the applicable protocol. The default is N/A.
●
6. Click Add. The information appears in the Filter Rules area of the tab.
7. Select the new filter, then do the following:
If applicable, select In to refer to traffic from the wireless device that is trying to get on
●
the network.
If applicable, select Out to refer to traffic from the network host that is trying to get to
●
a wireless device.
Select the Allow checkbox applicable to the rule you defined.
●
8. Edit the order of a filter by selecting the filter and clicking the Up and Down buttons. The
filtering rules are executed in the order you define here.
9. To save your changes, click Save.
7.6.3.1

Filtering rules by filter ID examples

Below are two examples of possible filtering rules for a filter ID. The first example disallows
some specific access before allowing everything else.
In Out Allow IP / Port
x x
x x
x x x
Table 9 Filtering rules by filter ID example A
The second example does the opposite of the first example. It allows some specific access and
denies everything else.
In Out Allow IP / Port
x x x
Table 10 Filtering rules by filter ID example B
A31003-W1040-U101-1-7619, July 2006 DRAFT
HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide
*.*.*.*:22-23
[specific IP address, range] Deny all traffic to a specific IP address or
*.*.*.*.
[specific IP address, range] Allow traffic to a specific IP address or
Virtual Network configuration
Configuring filtering rules for a VNS
Description
SSH and telnet sessions
address range
Allow everything else
Description
address range.
hwc_vnsconfiguration.fm
161