Example: Blocking Telnet Access; Configure The Ubigate Ibg3026 - Samsung Ubigate iBG3026 Configuration Manual

CHAPTER 22. Packet Filtering
MAC filtering is supported on inbound packets only. MAC filtering can be
applied to:
Source MAC and source mask addresses
Destination MAC and destination mask addresses
Ethernet type
Class of Service(CoS)
VLAN ID

Example: Blocking Telnet Access

Consider a Ubigate iBG3026 connected via a bundle 'WAN1'(wan IP address
200.1.1.1) to an ISP, with Ethernet 0/1(IP address 222.199.19.3) connected to
the internal network. The network administrator wants to completely block
Telnet access to the Ubigate iBG3026 from all external networks as well as
from all internal networks except 222.199.19.0/28. All other TCP/IP traffic,
such as FTP, Ping, and HTTP, is to flow unrestricted through the Ubigate
iBG3026.

Configure the Ubigate iBG3026

Router# configure term
Router/configure# ip access-list filtera
Router/configure/ip/access-list filtera# add deny tcp any
200.1.1.1 dport =23
Router/configure/ip/access-list# add permit tcp
222.199.19.0/28 222.199.19.3 dport =23
Router/configure/ip/access-list# add deny tcp any
222.199.19.3 dport=23
Router/configure/ip/access-list# add permit ip any any
Router/configure/ip/access-list# end
Router# save local
230
© SAMSUNG Electronics Co., Ltd.