Draytek Vigor2136 Series User Manual page 175

Enabled
Schedule
Direction
Specify Interface
Source
Destination
Action
Enable Keyword
Exception
Switch the toggle to enable/disable this profile.
Always On – This rule is enabled and active for always.
Scheduled On - Select Schedule indexes to allow the rule to be
enabled at specific times. You may choose up to 4 out of the 20
schedules in Configurations>>Objects>>Schedule.
Clear Session when Schedule is On - Select this option to clear

existing sessions when the rule is changes is enabled by a
schedule profile. All connections will be reset.
Display the direction of traffic flow to which this filter rule applies.
Switch the toggle to enable/disable the function.
If enabled, specify the interfaces for the traffic flow.
Specified LAN – Select the LAN interface(s).
Specified WAN – Select the WAN interface(s).
Configure the source IP addresses.
To set the IP address manually, please choose Any / IPv4 Address /
IPv4 Subnet / IPv6 Address / IPv6 Subnet / IP Object / IP Group /
MAC Object / MAC Group as the source and enter required
information.
Any – All IP addresses
IPv4 Address–Enter the IP address.
Source IPv4 Address – Click +Add to enter the IP address.

IPv4 Subnet–Enter the IP Address and the Subnet Mask.
Source IPv4 Subnet Address - Click +Add to enter the IPv4 address

with a subnet mask.
IPv6 Address–Enter the IPv6 address.
Source IPv6 Address – Click +Add to enter the IPv6 address.

IPv6 Subnet–Enter the IPv6 Address and the prefix length.
Source IPv6 Subnet Address - Click +Add to enter the IPv6 address

with a prefix length.
IP Object–Allows selection of predefined IP Objects.
Source IP Object – Click +Add to select an IP object.

IP Group –Allows selection of predefined IP Groups.
Source IP Group - Click +Add to select an IP group.

MAC Object–Allows selection of predefined MAC Objects.
Source MAC Object – Click +Add to select an MAC object.

MAC Group –Allows selection of predefined MAC Groups.
Source MAC Group - Click +Add to select an MAC group.

Select specific WCF and/or APPE and/or UCF(keyword object) profile to
be included in the filter.
Action
Action to be taken when packets match the rule.
Pass - Packets matching the rule will be passed immediately.
Block - Packets matching the rule will be dropped immediately.
Switch the toggle to enable/disable the function.
Keyword Exceptions - Displays selected keyword objects.
The system will check the sessions additionally with the selected
165