User manual ZYXEL PRESTIGE 1400

[. . . ] Prestige 1400 WAN Router with Integrated Ethernet Switch ZyNOS Version 3. 20 February 2001 User's Guide Prestige 1400 WAN Router with Integrated Ethernet Switch Prestige 1400 WAN Router with Integrated Ethernet Switch Copyright Copyright © 2000 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patents rights of others. [. . . ] Filters are subdivided into device and protocol filters, which are discussed later. Data filtering screens the data to determine if the packet should be allowed to pass. Data filters are divided into incoming and outgoing filters, depending on the direction of the packet relative to a port. Call filtering is used to determine if a packet should be allowed to trigger a call. Outgoing packets must undergo data filtering before they encounter call filtering as shown in the following figure. Call Filtering Active Data Outgoing Packet Data Filtering No match Built-in default Call Filters No match User-defined Call Filters (if applicable) No match Initiate call if line not up Send packet and reset Idle Timer Match Match Match Drop packet Drop packet if line not up Or Drop packet if line not up Or Send packet but do not reset Idle Timer Send packet but do not reset Idle Timer Figure 9-1 Outgoing Packet Filtering Process The following sections describe how to configure filter sets. Please see the application notes for more information and examples on creating and configuring filters. 9. 2 The Filter Structure of the Prestige A filter set consists of one or more filter rules. Usually, you would group related rules, e. g. , all the rules for NetBIOS, into a single set and give it a descriptive name. The Prestige allows you to configure up to twelve filter sets with six rules in each set, for a total of 72 filter rules in the system. You can apply up to four filter sets to a particular port to block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24 rules active for a single port. The following diagram illustrates the logic flow when executing a filter rule. Filter Configuration 9-1 Prestige 1400 WAN Router with Integrated Ethernet Switch Start Packet into filter Filter Set Fetch Next Filter Set Fetch Next Filter Rule Yes Yes Fetch First Filter Set Fetch First Filter Rule Next Filter Set Available? No Next filter Rule Available? No Active? Yes No Check Next Rule Execute Filter Rule Forward Drop Drop Packet Accept Packet Figure 9-2 Filter Rule Process 9-2 Filter Configuration Prestige 1400 WAN Router with Integrated Ethernet Switch 9. 3 Step 1. Configuring a Filter Set Enter 21 from the main menu to open Menu 21 - Filter Set Configuration. Menu 21 - Filter Set Configuration Filter Set # -----1 2 3 4 5 6 Comments -----------------______________ ______________ ______________ ______________ ______________ ______________ Filter Set # -----7 8 9 10 11 12 Comments -----------------______________ ______________ ______________ ______________ ______________ ______________ To configure a filter sets, follow the procedure below: Enter Filter Set Number to Configure= Edit Comments= Press ENTER to Confirm or ESC to Cancel: Figure 9-3 Menu 21 - Filter Set Configuration Enter the index of the filter set you wish to configure (no. Enter a descriptive name or comment in the Edit Comments field and press [ENTER]. Press [ENTER] at the message "Press ENTER to confirm" to open Menu 21. 1 - Filter Rules Summary. Step 2. Step 4. Filter Configuration 9-3 Prestige 1400 WAN Router with Integrated Ethernet Switch Menu 21. 1 - Filter Rules Summary # A Type Filter Rules Mmn - - ---- -------------------------------------------- ------ - - 1 Y IP Pr=6, SA=0. 0. 0. 0, DA=0. 0. 0. 0, DP=137 NDN 2 Y IP Pr=6, SA=0. 0. 0. 0, DA=0. 0. 0. 0, DP=138 NDN 3 Y IP Pr=6, SA=0. 0. 0. 0, DA=0. 0. 0. 0, DP=139 NDN 4 Y IP Pr=17, SA=0. 0. 0. 0, DA=0. 0. 0. 0, DP=137 NDN 5 Y IP Pr=17, SA=0. 0. 0. 0, DA=0. 0. 0. 0, DP=138 NDN 6 Y IP Pr=17, SA=0. 0. 0. 0, DA=0. 0. 0. 0, DP=139 NDF Enter Filter Rule Number (1-6) to Configure: 1 Edit Comments= NetBIOS_WAN Press ENTER to Confirm or ESC to Cancel: Enter Filter Rule Number (1-6) to Configure: Figure 9-4 Menu 21. 1 - Filter Rules Summary 9. 3. 1 Filter Rules Summary Menu These screens show a summary of the existing rules in an example filter set. The following tables contain a brief description of the abbreviations used in Menu 21. 1 and Menu 21. 2. Table 9-1 Abbreviations Used in the Filter Rules Summary Menu ABBREVIATIONS # A DESCRIPTION Refers to the filter rule number (1-6). This shows IP for TCP/IP, and Device Filter Rules M The filter rule parameters are displayed here (see below). "Y" means an action can not yet be taken as there are more rules to check, which are concatenated with the present rule to form a rule chain. "N" means you can now specify an action to be taken i. e. , forward the packet, drop the packet or check the next rule. For the latter, the next rule is independent of the rule just checked. If More is Yes, then Action Matched and Action Not Matched will be N/A. "F" means to forward the "Y" means there are more rules to check. [. . . ] 13-5 Menu 24 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-1 Restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-5 FTP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-4 TFTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ]