ZyXEL Communications 100IH Router User Manual


 
Prestige 100 and 100IH ISDN Router and Router/Hub
Filter Configuration 8-9
The following table describes how to configure your TCP/IP filter rule.
Table 8-5 TCP/IP Filter Rule Menu Fields
Field Description Option
Active This field activates/deactivates the filter rule. Yes/No
IP Protocol Protocol refers to the upper layer protocol, e.g., TCP is 6,
UDP is 17 and ICMP is 1. This value must be between 0
and 255
0-255
IP Source Route If Yes, the rule applies to packet with IP source route
option; else the packet must not have source route option.
The majority of IP packets do not have source route.
Yes/No
Destination: IP
Addr
Enter the destination IP Address of the packet you wish to
filter. This field is a don’t-care if it is 0.0.0.0.
IP address
Destination: IP
Mask
Enter the IP subnet mask to apply to the Destination: IP
Addr.
Subnet mask
Destination: Port # Enter the destination port of the packets that you wish to
filter. The range of this field is 0 to 65535. This field is a
don’t-care if it is 0.
0-65535
Destination: Port #
Comp
Select the comparison to apply to the destination port in
the packet against the value given in Destination: Port #.
None/Less/Greater/
Equal/Not Equal]
Source: IP Addr Enter the source IP Address of the packet you wish to
filter. This field is a don’t-care if it is 0.0.0.0.
IP Address
Source: IP Mask Enter the IP subnet mask to apply to the Source: IP Addr. IP Mask
Source: Port # Enter the source port of the packets that you wish to filter.
The range of this field is 0 to 65535. This field is a don’t-
care if it is 0.
0-65535
Source: Port #
Comp
Select the comparison to apply to the source port in the
packet against the value given in Source: Port #.
Yes/No
TCP Estab This field is applicable only when IP Protocol field is 6,
TCP. If yes, the rule matches only established TCP
connections; else the rule matches all TCP packets.
Yes/No
More If yes, a matching packet is passed to the next filter rule
before an action is taken; else the packet is disposed of
Yes / N/A