ZyXEL Communications Prestige 2602R Series - Manual (Page 291)

Prestige 2602R Series User’s Guide
Chapter 30 Filter Configuration 291
The following table describes how to configure your TCP/IP filter rule.
Table 96 Menu 21.1.x.x TCP/IP Filter Rule
FIELD DESCRIPTION
Filter # This is the filter set, filter rule coordinates, for instance, 2, 3 refers to the second filter
set and the third filter rule of that set.
Filter Type Use [SPACE BAR] and then [ENTER] to choose a rule. Parameters displayed for
each type will be different. Choices are TCP/IP Filter Rule or Generic Filter Rule.
Active Select Yes to activate or No to deactivate the filter rule.
IP Protocol This is the upper layer protocol, for example, TCP is 6, UDP is 17 and ICMP is 1.
The value must be between 0 and 255. A value of 0 matches ANY protocol.
IP Source Route IP Source Route is an optional header that dictates the route an IP packet takes
from its source to its destination. If Yes, the rule applies to any packet with an IP
source route. The majority of IP packets do not have source route.
Destination:
IP Addr Type the destination IP address of the packet you want to filter. This field is ignored
if it is 0.0.0.0.
IP Mask Type the IP mask to apply to the Destination: IP Addr field.
Port # Type the destination port of the packets you want to filter. The field range is 0 to
65535. A 0 field is ignored.
Port # Comp Select the comparison to apply to the destination port in the packet against the value
given in Destination: Port #. Choices are None, Less, Greater, Equal or Not
Equal.
Source:
IP Addr Type the source IP Address of the packet you want to filter. A 0.0.0.0 field is ignored.
IP Mask Type the IP mask to apply to the Source: IP Addr field.
Port # Type the source port of the packets you want to filter. The range of this field is 0 to
65535. A 0 field is ignored.
Port # Comp Select the comparison to apply to the source port in the packet against the value
given in Source: Port # field. Choices are None, Less, Greater, Equal or Not
Equal.
TCP Estab This applies only when the IP Protocol field is 6, TCP. If Yes, the rule matches
packets that want to establish TCP connection(s) (SYN=1 and ACK=0); else it is
ignored.
More If Yes, a matching packet is passed to the next filter rule before an action is taken or
else the packet is disposed of according to the action fields.
If More is Yes, then Action Matched and Action Not Matched will be N/A.
Log Select the logging option from the following:
None – No packets will be logged.
Action Matched – Only packets that match the rule parameters will be logged.
Action Not Matched – Only packets that do not match the rule parameters will be
logged.
Both – All packets will be logged.
Action Matched Select the action for a matching packet. Choices are Check Next Rule, Forward or
Drop.