Zyxel D1000 eircom Router Manual PDF (Setup & Configuration Guide)

Page 141 / 228 Scroll up to view Page 136 - 140

ericom D1000 modem User’s Guide

141

C

HAPTER

12

Filter

12.1

Overview

This chapter introduces the filters supported by the Device. You can configure rules to restrict traffic

by IP addresses, MAC addresses, and/or IPv6 addresses.

12.1.1

What You Can Do in the Filter Screens

•

Use the

IP/MAC Filter

screen (

Section 12.2 on page 141

) to create IP and MAC filter rules.

•

Use the

IPv6/MAC Filter

screen (

Section 12.3 on page 143

) to create IPv6 and MAC filter rules.

12.1.2

What You Need to Know About Filtering

URL

The URL (Uniform Resource Locator) identifies and helps locates resources on a network. On the

Internet the URL is the web address that you type in the address bar of your Internet browser.

URL and IP Filter Structure

The URL, IP and IPv6 filters have individual rule indexes. The Device allows you to configure each

type of filter with its own respective set of rules.

12.2

The IP/MAC Filter Screen

Use this screen to create and apply IP and MAC filters. Click

Security

>

Filter

>

IP/MAC Filter

.

The screen appears as shown.

Page 142 / 228

Chapter 12 Filter

ericom D1000 modem User’s Guide

142

Figure 97

Security > Filter > IP/MAC Filter

The following table describes the labels in this screen.

Table 53

Security > Filter > IP/MAC Filter

LABEL

DESCRIPTION

Rule Type

Rule Type selection

Select

White List

to specify traffic to allow and

Black List

to specify traffic to

disallow.

IP / MAC Filter Rule Editing

IP / MAC Filter Rule Index

Select the index number of the filter rule.

Active

Use this field to enable or disable the filter rule.

Interface

Select the PVC to which to apply the filter.

Direction

Apply the filter to

Incoming

or

Outgoing

traffic direction.

Rule Type

Select

IP

or

MAC

type to configure the rule.

Use the

IP

Filter to block or allow traffic by IP addresses.

Use the

MAC

Filter to block or allow traffic by MAC address.

Source IP Address

Enter the source IP address of the packets you wish to filter. This field is

ignored if it is 0.0.0.0.

Subnet Mask

Enter the IP subnet mask for the source IP address

Page 143 / 228

Chapter 12 Filter

ericom D1000 modem User’s Guide

143

12.3

IPv6/MAC Filter

Use this screen to create and apply IPv6 filters. Click

Security

>

Filter

>

IPv6/MAC Filter

. The

screen appears as shown.

Port Number

Enter the source port of the packets that you wish to filter. The range of this

field is 0 to 65535. This field is ignored if it is 0.

Destination IP Address

Enter the destination IP address of the packets you wish to filter. This field is

ignored if it is 0.0.0.0.

Subnet Mask

Enter the IP subnet mask for the destination IP address.

Port Number

Enter the destination port of the packets that you wish to filter. The range of

this field is 0 to 65535. This field is ignored if it is 0.

Protocol

Select

ICMP

,

TCP

or

UDP

for the upper layer protocol.

IP / MAC Filter Listing

IP / MAC Filter Rule Index

Select the index number of the filter set from the drop-down list box.

#

This is the index number of the rule in a filter set.

Active

This field shows whether the rule is activated.

Interface

This is the interface that the filter set applies to.

Direction

The filter set applies to this traffic direction.

Src IP/Mask

This is the source IP address and subnet mask when you select

IP

as the rule

type.

Dest IP/Mask

This is the destination IP address and subnet mask.

Mac Address

This is the MAC address of the packets being filtered.

Src Port

This is the source port number.

Dest Port

This is the destination port number.

Protocol

This is the upper layer protocol.

Apply

Click this to apply your changes.

Delete

Click this to remove the filter rule.

Cancel

Click this to restore your previously saved settings.

Table 53

Security > Filter > IP/MAC Filter (continued)

LABEL

DESCRIPTION

Page 144 / 228

Chapter 12 Filter

ericom D1000 modem User’s Guide

144

Figure 98

Security > Filter > IPv6/MAC Filter

The following table describes the labels in this screen.

Table 54

Security > Filter > IPv6/MAC Filter

LABEL

DESCRIPTION

Rule Type

Rule Type selection

Select

White List

to specify traffic to allow and

Black List

to specify traffic to

block.

IPv6 / MAC Filter Rule Editing

IPv6 / MAC Filter Rule Index

Select the index number of the filter rule.

Active

Use this field to enable or disable the filter rule.

Interface

Select the PVC to which to apply the filter.

Direction

Apply the filter to

Incoming

or

Outgoing

traffic direction.

Rule Type

Select

IP

or

MAC

type to configure the rule.

Use the

IP

Filter to block or allow traffic by IPv6 addresses.

Use the

MAC

Filter to block or allow traffic by MAC address.

Source IP Address

Enter the source IPv6 address of the packets you wish to filter. This field is

ignored if it is ::.

Source Prefix Length

Enter the prefix length for the source IPv6 address

Destination IPv6 Address

Enter the destination IPv6 address of the packets you wish to filter. This field is

ignored if it is ::.

Destination Prefix Length

Enter the prefix length for the destination IPv6 address.

Page 145 / 228

Chapter 12 Filter

ericom D1000 modem User’s Guide

145

ICMPv6 Type

Select the ICMPv6 message type to filter. The following message types can be

selected:

1 / Destination Unreachable:

0

-

no route to destination; 1 -

communication with destination administratively prohibited; 3 - address

unreachable; 4 - port unreachable

2 / Packet Too Big

3

/

Time Exceeded:

0 - hop limit exceeded in transit; 1 - fragment

reassembly time exceeded

4

/

Parameter Problem

: 0 - erroneous header field encountered; 1 -

unrecognized Next Header type encountered; 2 - unrecognized IPv6 option

encountered

128

/

Echo Request

129 /

Echo Response

130

/

Listener Query -

Multicast listener query

131

/

Listener Report -

Multicast listener report

132

/

Listener Done

- Multicast listener done

143

/

Listener Report v2 -

Multicast listener report v2

133

/

Router Solicitation

134

/

Router Advertisement

135

/

Neighbor Solicitation

136

/

Neighbor Advertisement

137

/

Redirect -

Redirect message

Protocol

This is the (upper layer) protocol that defines the service to which this rule

applies. By default it is ICMPv6.

IPv6 / MAC Filter Listing

IPv6 / MAC Filter Rule Index

Select the index number of the filter set from the drop-down list box.

#

This is the index number of the rule in a filter set.

Active

This field shows whether the rule is activated.

Interface

This is the interface that the rule applies to.

Direction

The filter set applies to this traffic direction.

Rule Type

The ICMPv6 message type to filter.

Src IP/PrefixLength

This displays the source IPv6 address and prefix length.

Dest IP/PrefixLength

This displays the destination IPv6 address and prefix length.

Mac Address

This is the MAC address of the packets being filtered.

Protocol

This is the (upper layer) protocol that defines the service to which this rule

applies. By default it is ICMPv6.

Apply

Click this to apply your changes.

Delete

Click this to remove the filter rule.

Cancel

Click this to restore your previously saved settings.

Table 54

Security > Filter > IPv6/MAC Filter (continued)

LABEL

DESCRIPTION

Rate

Popular Zyxel Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share