User manual ZYXEL PRESTIGE 650

[. . . ] Prestige 650 ADSL Router User's Guide Version 3. 40 August 2002 Prestige 650 ADSL Router Copyright Copyright © 2002 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. [. . . ] Local Start IP --------------192. 168. 1. 10 Local End IP --------------192. 168. 1. 12 Global Start IP --------------10. 132. 50. 1 Global End IP --------------10. 132. 50. 3 Type -----M:M NO OV Action= Edit Select Rule= Press ENTER to Confirm or ESC to Cancel: Figure 7-23 Example 4: Menu 15. 1. 1 -- Address Mapping Rules 7-26 NAT Advanced Management Part III: ADVANCED MANAGEMENT This part discusses Filtering, SNMP, System Information and Diagnosis, Firmware and Configuration File Maintenance, System Maintenance and Information, IP Policy Routing, Call Scheduling and Remote Management. III Prestige 650 ADSL Router Chapter 8 Filter Configuration This chapter shows you how to create and apply filters. 8. 1 About Filtering Your Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call. There are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and protocol filters, which are discussed later. Data filtering screens data to determine if the packet should be allowed to pass. Data filters are divided into incoming and outgoing filters, depending on the direction of the packet relative to a port. Data filtering can be applied on either the WAN side or the Ethernet side. Call filtering is used to determine if a packet should be allowed to trigger a call. Outgoing packets must undergo data filtering before they encounter call filtering. Call filters are divided into two groups, the built-in call filters and user-defined call filters. Your Prestige has built-in call filters that prevent administrative, for example, RIP packets from triggering calls. These filters are always enabled and not accessible to you. Your Prestige applies the built-in filters first and then the user-defined call filters, if applicable, as shown next. Filter Configuration 8-1 Prestige 650 ADSL Router Call Filtering No match Built-in default Call Filters No match Outgoing Packet Data User-defined Call Filters (if applicable) No match Active Data Initiate call if line not up Send packet and reset Idle Timer Match Match Match Drop packet Drop packet if line not up Or Drop packet if line not up Or Send packet but do not reset Idle Timer Send packet but do not reset Idle Timer Figure 8-1 Outgoing Packet Filtering Process Two sets of factory filter rules have been configured in menu 21 to prevent NetBIOS traffic from triggering calls. A summary of their filter rules is shown in the figures that follow. The following figure illustrates the logic flow when executing a filter rule. 8-2 Filter Configuration Prestige 650 ADSL Router Start Packet intoFilter Filter Set Fetch Next Filter Set Fetch Next Filter Rule Yes Yes Fetch First Filter Set Fetch First Filter Rule Yes Next Filter Set Available? No Next filter Rule Available? No Active? Yes No Check Next Rule Execute Filter Rule Forward Drop Drop Packet Accept Packet Figure 8-2 Filter Rule Process You can apply up to four filter sets to a particular port to block various types of packets. Because each filter set can have up to six rules, you can have a maximum of 24 rules active for a single port. Filter Configuration 8-3 Prestige 650 ADSL Router For incoming packets, your Prestige applies data filters only. Packets are processed depending on whether a match is found. The following sections describe how to configure filter sets. The Filter Structure of the Prestige A filter set consists of one or more filter rules. Usually, you would group related rules, for example, all the rules for NetBIOS, into a single set and give it a descriptive name. You can configure up to twelve filter sets with six rules in each set, for a total of 72 filter rules in the system. 8. 2 Configuring a Filter Set To configure a filter set, follow the steps shown next. Enter 21 in the main menu to display Menu 21 ­ Filter Set Configuration. Menu 21 - Filter Set Configuration Filter Set # -----1 2 3 4 5 6 Comments ----------------NetBIOS_WAN NetBIOS_LAN TELNET_WAN PPPoE FTP_WAN _______________ Filter Set # -----7 8 9 10 11 12 Comments ----------------_______________ _______________ _______________ _______________ WebSet1 WebSet2 Enter Filter Set Number to Configure= 0 Edit Comments= N/A Press ENTER to Confirm or ESC to Cancel: Figure 8-3 Menu 21 -- Filter Set Configuration Step 2. Filter rule set 11 and 12 are used by the Web Configurator. [. . . ] 15-1 Telnet Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-1 Telnet Under NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-1 TFTP and FTP Over WAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-3 Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ]