ZyXEL P-1100 User Guide - Page 78

Configuring a Filter Rule

Get ZyXEL P-1100 PDF manuals and user guides View all ZyXEL P-1100 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 78 highlights

Prestige 1100 Internet Access Router Table 8-3 Abbreviations Used If Filter Type Is IPX Abbreviation Description PT IPX Packet Type SS Source Socket DS Destination Socket l If the filter type is Dev (device), the following abbreviations listed in the following table will be used. Table 8-4 Abbreviations Used If Filter Type Is Dev Abbreviation Description Off Offset Len Length Refer to the next section for information on configuring the filter rules. 8.4 Configuring a Filter Rule To configure a filter rule, enter its number in Menu 21.1 - Filter Rules Summary and press [ENTER] to open Menu 21.1.1 for the rule. 8.4.1 Filter Types and SUA There are two types of filter rules, Device Filter rules and Protocol Filter (TCP/IP and IPX) rules. Device Filter rules act on the raw data from/to LAN and WAN. Protocol Filter rules act on the IP and IPX packets. Device and TCP/IP filter rules are discussed in more detail in the next section. When NAT/SUA (Network Address Translation/Single User Account) is enabled, the inside IP address and port number are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire. Therefore, the Prestige applies the protocol filters to the "native" IP address and port number before NAT/SUA for outgoing packets and after NAT/SUA for incoming packets. On the other hand, the device filters are applied to the raw packets that appear on the wire. They are applied at the point where the Prestige is receiving and sending the packets; i.e. the interface. The interface can be an Ethernet, or any other hardware port. The following diagram illustrates this. 8-6 Filter Configuration

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
Prestige 1100 Internet Access Router
8-6
Filter Configuration
Table 8-3 Abbreviations Used If Filter Type Is IPX
Abbreviation
Description
PT
IPX Packet Type
SS
Source Socket
DS
Destination Socket
l
If the filter type is Dev (device), the following abbreviations
listed in the following table will be used.
Table 8-4 Abbreviations Used If Filter Type Is Dev
Abbreviation
Description
Off
Offset
Len
Length
Refer to the next section for information on configuring the filter rules.
8.4
Configuring a Filter Rule
To configure a filter rule, enter its number in Menu 21.1 - Filter Rules Summary and press [
ENTER]
to
open Menu 21.1.1 for the rule.
8.4.1 Filter Types and SUA
There are two types of filter rules, Device Filter rules and Protocol Filter (TCP/IP and IPX) rules. Device
Filter rules act on the raw data from/to LAN and WAN. Protocol Filter
rules act on the IP and IPX packets.
Device and TCP/IP filter rules are discussed in more detail in the next section.
When NAT/SUA (Network Address Translation/Single User Account) is enabled, the inside IP address and
port number are replaced on a connection-by-connection basis, which makes it impossible to know the
exact address and port on the wire.
Therefore, the Prestige applies the protocol filters to the “native” IP
address and port number before NAT/SUA for outgoing packets and after NAT/SUA for incoming packets.
On the other hand, the device filters are applied to the raw packets that appear on the wire. They are applied
at the point where the Prestige is receiving and sending the packets; i.e. the interface. The interface can be
an Ethernet, or any other hardware port. The following diagram illustrates this.