ZyXEL Communications Prestige 1600 Configuration Manual page 90

Prestige 1600 Universal Access Concentrator
Field
Source: IP
Addr
Source: IP
Mask
Source: Port #
Source: Port #
Comp
TCP Estab
More
Log
Action Matched
Action Not
Matched
Once you have completed filling in Menu 21.1.1 - TCP/IP Filter Rule, press [ENTER] at
the message "Press ENTER to Confirm" to save your configuration, or press [ESC] to
cancel. This data will now be displayed on Menu 21.1 - Filter Rules Summary.
The next diagram illustrates the logic flow of an IP filter.
10-8
Description
Destination: Port #.
Enter the source IP Address of the packet you
wish to filter. This field is a ignored if it is 0.0.0.0.
Enter the IP subnet mask to apply to the Source:
IP Addr.
Enter the source port of the packets that you wish
to filter. The range of this field is 0 to 65535. This
field is a ignored if it is 0.
Select the comparison to apply to the source port
in the packet against the value given in Source:
Port #.
This field is applicable only when IP Protocol field
is 6, TCP. If Yes, the rule matches only
established TCP connections; else the rule
matches all TCP packets.
If Yes, a matching packet is passed to the next
filter rule before an action is taken; else the packet
is disposed of according to the action fields.
If More is Yes, then Action Matched and Action
Not Matched will be N/A.
Select the logging option from the following:
None - No packets will be logged.
Action Matched - Only packets that match the
rule parameters will be logged.
Action Not Matched - Only packets that do not
match the rule parameters will be logged.
Both - All packets will be logged.
Select the action for a matching packet.
Select the action for a packet not matching the
rule.
Option
Equal
0-65535
None/Less/Grea
ter/Equal/Not
Equal
Yes/No
Yes/N/A
None
Action Matched
Action Not
Matched
Both
Check Next Rule
Forward
Drop
Check Next Rule
Forward
Drop
Filter Configuration