Remote Node Filters; Filter Example; Configuring A Ftp_Wan Filter Rule; Figure 9-10 Filtering Remote Node Traffic - ZyXEL Communications PRESTIGE 1400 User Manual

Prestige 1400 WAN Router with Integrated Ethernet Switch
9.6.2

Remote Node Filters

Go to Menu 11.1 - Remote Node Profile (shown next) and enter the number(s) of the filter set(s) as appropriate.
You can specify up to four filter sets by entering their numbers separated by commas.
Rem Node Name= ?
Active= Yes
Outgoing:
My Login= ?
My Password= ********
Authen= CHAP/PAP
Press ENTER to CONFIRM or ESC to CANCEL:
Press Space Bar to Toggle.
9.7

Filter Example

The Prestige supports the firmware and configuration files upload using FTP connections via LAN and WANs.
Therefore, it is possible that anyone can make an FTP connection over the Internet to your Prestige. To prevent
outside users from connecting to your Prestige via FTP, you can configure a filter to block FTP connections from
the WAN.
Before configuring a filter, you need to know the following information:
1. The inbound packet type (protocol & port number) - in this case, it is TCP (06) protocol with port 20 or 21.
2. The source IP address - in this case, to block all connections from the outside, the source IP is 0.0.0.0.
The destination IP address is the Prestige's IP address, but it is unknown when SUA is enabled since most WAN IP
addresses are dynamically assigned by the ISP. Therefore, enter 0.0.0.0 as the destination IP in the filter rule. Once
0.0.0.0 is set as the destination IP, no FTP connections can reach the Prestige nor the FTP server on the LAN. For a
LAN-to-LAN connection, enter the Prestige's LAN IP as the destination IP in the filter rule. After you apply the
FTP filter to the remote node, it only blocks the FTP connection to the Prestige but still permits the FTP connection
to the local FTP server.
9.7.1

Configuring a FTP_WAN Filter Rule

Create a filter set in Menu 21, e.g., set 2.
9-12
Menu 11.1 - Remote Node Profile
Edit PPP Options= No
Rem IP Addr= ?
Edit IP = No
Input Filter Sets:
Protocol filters =
Device filters =
Output Filter Sets:
Protocol filters =
Device filters =

Figure 9-10 Filtering Remote Node traffic

Enter filter
sets here
Filter Configuration