Comtrend Corporation NexusLink 3120 User Manual page 160

Example 1: Filter Name
Protocol
Policy
Source IP Address
Source Subnet Mask
Source Port
Dest. IP Address
Dest. Subnet Mask
Dest. Port
Selected WAN interface : br0
This filter will ACCEPT all TCP packets coming from WAN interface "br0" with IP
Address/Subnet Mask 210.168.219.45/16 with a source port of 80, irrespective
of the destination. All other incoming packets on this interface are DROPPED.
Example 2: Filter Name
Protocol
Policy
Source IP Address
Source Subnet Mask
Source Port
Dest. IP Address
Dest. Sub. Mask
Dest. Port
Selected WAN interface : br0
This rule will ACCEPT all UDP packets coming from WAN interface "br0" with IP
Address/Subnet Mask 210.168.219.45/16 and a source port in the range of
5060 to 6060, destined to 192.168.1.45/24 and a destination port in the range
of 6060 to 7070. All other incoming packets on this interface are DROPPED.
MAC LAYER FILTER
These rules help in the filtering of Layer 2 traffic. MAC Filtering is only effective in
Bridge mode. After a Bridge mode connection is created, navigate to Advanced
Setup  Security  MAC Filtering in the WUI.
Example 1: Global Policy
Protocol Type
Dest. MAC Address
Source MAC Address
Src. Interface
Dest. Interface
Addition of this rule drops all PPPoE frames going from eth1 to eth2 with a
Destination MAC Address of 00:12:34:56:78:90 irrespective of its Source MAC
Address. All other frames on this interface are forwarded.
Example 2: Global Policy
Protocol Type
Dest. MAC Address
Source MAC Address
Src. Interface
Dest. Interface
Addition of this rule forwards all PPPoE frames going from eth1 to eth2 with a
Destination MAC Address of 00:12:34:56:78 and Source MAC Address of
00:34:12:78:90:56. All other frames on this interface are dropped.
: In_Filter1
: TCP
: Allow
: 210.168.219.45
: 255.255.0.0
: 80
: NA
: NA
: NA
: In_Filter2
: UDP
: Allow
: 210.168.219.45
: 255.255.0.0
: 5060:6060
: 192.168.1.45
: 255.255.255.0
: 6060:7070
: Forwarded
: PPPoE
: 00:12:34:56:78:90
: NA
: eth1
: eth2
: Blocked
: PPPoE
: 00:12:34:56:78:90
: 00:34:12:78:90:56
: eth1
: eth2
159