Page 171 / 351 Scroll up to view Page 166 - 170
171
Associating a Filter Set with an Interface
Associating a Filter Set with an Interface
Once you have created a filter set, you must associate it with an interface in order for it to
be effective. Depending on its application, you can associate it with either the WAN (usu-
ally the Internet) interface or the LAN.
To associate an filter set with the LAN, return to the
Filter Sets
page.
Click the
Ethernet 100BT
link.
The
Ethernet 100BT
page appears.
From the pull-down menu, select the filter set to associ-
ate with this interface.
Click the
Submit
button. The Alert icon will appear in
the upper right corner of the page.
Click the Alert icon to go to the validation page, where
you can save your configuration.
Page 172 / 351
172
You can repeat this process for both the WAN and LAN interfaces, to associate your filter
sets.
When you return to the Filter Sets page, it will display your interface associations.
Page 173 / 351
173
Policy-based Routing using Filtersets
Policy-based Routing using Filtersets
Netopia Firmware Version 7.6 offers the ability to route IP packets using criteria other than
the destination IP address. This is called
policy-based routing
.
You specify the routing criteria and routing information by using IP filtersets to determine
the forwarding action of a particular filter.
You specify a gateway IP address, and each packet matching the filter is routed according
to that gateway address, rather than by means of the global routing table.
In addition, the classifier list in a filter includes the TOS field. This allows you to filter on
TOS field settings in the IP packet, if you want.
To use the policy-based routing feature, you
create a filter that forwards the traffic.
Check the
Forward
checkbox. This will dis-
play the Force Routing options.
Check the
Force Route
checkbox.
Enter the
Gateway IP
address in standard
dotted-quad notation to which the traffic should
be forwarded.
You can enter
Source
and
Destination IP
Address
(es) and
Mask
(s),
Protocol Type
,
and
Source
and
Destination Port ID
(s) for the
filter, if desired.
TOS field matching
Netopia Firmware Version 7.6 includes two
parameters for an IP filter:
TOS
and
TOS
Mask
. Both fields accept values in the range 0
– 255.
Certain types of IP packets, such as voice or
multimedia packets, are sensitive to latency
introduced by the network. A delay-sensitive
packet is one that has the low-latency bit set in
the TOS field of the IP header. This means that if such packets are not received rapidly, the
quality of service degrades. If you expect to route significant amounts of such traffic you
can configure your router to route this type of traffic to a gateway other than your normal
gateway using this feature.
The TOS field matching check is consistent with source and destination address matching.
Page 174 / 351
174
If you check the
Idle Reset
checkbox, a match on this rule will keep the WAN connection
alive by resetting the idle-timeout status.
The Idle Reset setting is used to determine if a packet which matches the filter will cause
an “instant-on” link to connect, if it is down; or reset its idle timer, if it is already up. For
example, if you wanted ping traffic not to keep the link up, you would create a filter which
forwards a ping, but with the Idle Reset checkbox unchecked.
Example:
You want packets with the TOS low
latency bit to go through VC 2 (via gateway
127.0.0.3 – the Netopia Gateway will use
127.0.0.
x
, where
x
is the WAN port + 1) instead
of your normal gateway.
You would set up the filter as shown here.
NOTE:
Default Forwarding Filter
If you create one or more filters that have a matching action of
forward
, then
action on a packet matching
none
of the filters is to block any traffic.
Therefore, if the behavior you want is to force the routing of a certain type of
packet and pass all others through the normal routing mechanism, you must
Page 175 / 351
175
Policy-based Routing using Filtersets
configure one filter to match the first type of packet and apply Force Routing. A
subsequent filter is required to match and forward all other packets.
Management IP traffic
If the Force Routing filter is applied to source IP addresses, it may inadvert-
ently block communication with the router itself. You can avoid this by preced-
ing the Force Routing filter with a filter that matches the destination IP
address of the Gateway itself.

Rate

4.7 / 5 based on 3 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top