Access Control List; Ip Filter Setup - TRENDnet 12dBi User Manual

TRENDnet User's Guide

Access Control List

IP Filter Setup

Allows to create deny or allow rules to filter ingress or egress packets from specific
source and/or to destination IP address on wired (LAN) or Wireless (WAN) ports. Filter
rules could be used to filter unicast or multicast packets on different protocols as shown
in the IP Filter Setup. Important to note that IP filter rules has precedence over Virtual
server rules.
Please click on Advance -> IP Filter Setup and follow the below setting.
Source Address/Mask : Enter desired source IP address and netmask; i.e.

192.168.2.10/32.
Source Port : Enter a port or a range of ports as start:end; i.e. port 20:80

Destination Address/Mask : Enter desired destination IP address and netmask; i.e.

192.168.1.10/32
Destination Port : Enter a port or a range of ports as start:end; i.e. port 20:80

In/Out : Applies to Ingress or egress packets

Protocol : Supports TCP, UDP or ICMP.

© Copyright 2012TRENDnet. All Rights Reserved.
Listen : Click Yes radial button to match TCP packets only with the SYN flag.

Active : Deny to drop and Pass to allow per filter rules

Interface : The interface that a filter rule applies

Click "Save" button to add IP filter rule. Total of 20 rules maximum allowed in the IP
Filter List. All rules can be edited or removed from the List. Click Reboot button to
activate your changes.
When you create rules in the IP Filter List, the prior rules maintain higher priority. To
allow limited access from a subnet to a destination network manager needs to create
allow rules first and followed by deny rules. So, if you just want one IP address to access
the system via telnet from your subnet, not others, the Example 1 demonstrates it, not
rules in the Example 2.
Example 1 : Create a higher priority rule to allow IP address 192.168.2.2 Telnet

access from LAN port first, and deny Telnet access from remaining IP addresses
in the same subnet.
Example 2 : All Telnet access to the system from the IP addresses of subnet

192.168.2.x works with the rule 1 of Example 2. The rule 2 won't make any
difference.
TEW-676APBO
112