Device Filter Rule; Figure 9-7 Executing An Ip Filter - ZyXEL Communications PRESTIGE 1400 User Manual

Apply DestAddrMask
9.5.2

Device Filter Rule

This section shows you how to configure a device filter rule. The purpose of device rules is to allow you to filter
non-IP packets. For IP, it is generally easier to use the TCP/IP rule directly.
For device rules, the Prestige treats a packet as a byte stream as opposed to an IP or IPX packet. You specify the
portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes. The Prestige applies
the Mask (bit-wise ANDing) to the data portion before comparing the result against the Value to determine a match.
The Mask and Value are specified in hexadecimal numbers. Note that it takes two hexadecimal digits to represent a
byte, so if the length is 4, the value in either field will take 8 digits, e.g., FFFFFFFF.
To configure a device rule, select Device Filter Rule in the Filter Type field and press [ENTER] to open Menu
21.1.1 - Device Filter Rule, as shown next.
Filter Configuration
Packet
into IP Filter
Filter Active?
Yes
Apply SrcAddrMask
to Src Addr
Check Src
Not Matched
IP Addr
Matched
to Dest Addr
Check Dest
Not Matched
IP Addr
Matched
Check
Not Matched
IP Protocol
Matched
Check Src &
Not Matched
Dest Port
Matched
More? Yes
No
Action Matched
Check Next Rule
Drop Forward
Drop Packet

Figure 9-7 Executing an IP Filter

Prestige 1400 WAN Router with Integrated Ethernet Switch
No
Check Next Rule
Check Next Rule
Action Not Matched
Drop Forward
Accept Packet
9-9