Prestige 201 ISDN Access Router
Packet
into IP Filter
Filter Active?
Yes
Apply SrcAddrMask
to Src Addr
Check Src
Not Matched
IP Addr
Matched
Apply DestAddrMask
to Dest Addr
Check Dest
Not Matched
IP Addr
Matched
Check
Not Matched
IP Protocol
Matched
Check Src &
Not Matched
Dest Port
Matched
More?
No
Action Matched
Drop
Forward
Drop Packet
Filter Configuration
No
Yes
Check Next Rule
Check Next Rule
Check Next Rule
Figure 6-8 Executing an IP Filter
Action Not Matched
Drop
Forward
Accept Packet
6-11