Digi TransPort LR54 - Page 83

Security Firewall management with IP filters
Digi TransPort WR Routers User Guide
83
Command line
To show IPfilter rules, use the show ip-filter or ip-filter commands.
For example, to show a specific IPfilter:
digi.router> show ip-filter 1
IP Filter 1
-----------
Description : Allow WAN SSH only from 10.20 network
Action : Accept
State : On
Source : any-wan
Destination : none
Filter Criteria
---------------
Protocol : tcp udp
Source IP Address : 10.20.0.0/16
Source IP Port : 0
Destination IP Address :
Destination IP Port : 22
digi.router> ip-filter 1
action accept
description Allow WAN SSH only from 10.20 network
dst none
dst-ip-address
dst-ip-port 22
protocol tcp,udp
src any-wan
src-ip-address 10.20.0.0/16
src-ip-port 0
state on
To show all IPfilters:
digi.router> show ip-filter
# State Action Source Destination Protocol Description
---------------------------------------------------------------------------------
1 On Accept any-wan none tcp udp Allow WAN SSH only from 10.20 network
2 On Drop any-lan none tcp udp Restrict LAN from HTTP,HTTPS,SSH,SNMP
3 On Accept any-wan none tcp udp Allow WAN SNMP only from 10.20 network
4 On Reject any-lan any-wan tcp udp Restrict LAN to WAN for various email services
5 On Accept lan1 any-lan tcp Allow LAN1 SSH to Other LANs
6 On Reject lan1 any-lan any Restrict LAN1 from Accessing Other LANs