ZyXEL P-1100 User Guide - Page 82
Executing an IP Filter
 |
View all ZyXEL P-1100 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 82 highlights
Prestige 1100 Internet Access Router The following diagram illustrates the logic flow of an IP filter. Packet into IP Filter Filter Active? No Yes Apply SrcAddrMask to Src Addr Check Src IP Addr Matched Apply DestAddrMask to Dest Addr Not Matched Check Dest IP Addr Matched Check IP Protocol Matched Check Src & Dest Port Matched Not Matched Not Matched Not Matched More? No Action Matched Yes Check Next Rule Check Next Rule Action Not Matched Drop Forward Drop Forward Drop Packet Check Next Rule Figure 8-6 Executing an IP Filter Accept Packet 8-10 Filter Configuration
-
1 -
2
-
3
-
4
-
5
-
6
-
7
-
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77 -
78 -
79 -
80 -
81 -
82 -
83 -
84 -
85 -
86 -
87 -
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
 |
 |
Prestige 1100 Internet Access Router
8-10
Filter Configuration
The following diagram illustrates the logic flow of an IP filter.
Packet
into IP Filter
Matched
Matched
Yes
Action Matched
Action Not Matched
More?
No
Filter Active?
Check
IP Protocol
Drop
Drop Packet
Accept Packet
Drop
Forward
Check Next Rule
Check Next Rule
Check Next Rule
Forward
Not Matched
Yes
No
Check Src
IP Addr
Apply SrcAddrMask
to
Src Addr
Matched
Check Dest
IP Addr
Apply DestAddrMask
to
Dest Addr
Not Matched
Not Matched
Check
Src &
Dest Port
Matched
Not Matched
Figure 8-6 Executing an IP Filter