ELTEX ESR-1511 User Manual

ESR series service routers.ESR-Series. User manual
471
Router always has a security zone named 'self'. When the traffic recipient is the router itself, i.e. traffic is not
transit, pass 'self' zone as a parameter. Create a pair of zones for traffic coming from 'WAN' zone into 'self'
zone. In order the router could response to the ICMP requests from 'WAN' zone, add a rule allowing ICMP
traffic transfer from R2 to ESR router:
esr(config)# security zone-pair WAN self
esr(config-zone-pair)# rule 1
esr(config-zone-pair-rule)# action permit
esr(config-zone-pair-rule)# match protocol icmp
esr(config-zone-pair-rule)# match destination-address WAN
esr(config-zone-pair-rule)# match source-address WAN_GATEWAY
esr(config-zone-pair-rule)# enable
esr(config-zone-pair-rule)# exit
esr(config-zone-pair)# exit
Create a pair of zones for traffic coming from 'LAN' zone into 'self' zone. In order the router could response to
the ICMP requests from 'LAN' zone, add a rule allowing ICMP traffic transfer from R1 to ESR:
esr(config)# security zone-pair LAN self
esr(config-zone-pair)# rule 1
esr(config-zone-pair-rule)# action permit
esr(config-zone-pair-rule)# match protocol icmp
esr(config-zone-pair-rule)# match destination-address LAN
esr(config-zone-pair-rule)# match source-address LAN_GATEWAY
esr(config-zone-pair-rule)# enable
esr(config-zone-pair-rule)# exit
esr(config-zone-pair)# exit
esr(config)# exit
To view port membership in zones, use the following command:
esr# show security zone
To view zone pairs and their configuration, use the following commands:
esr# show security zone-pair
esr# show security zone-pair configuration
To view active sessions, use the following commands:
esr# show ip firewall sessions
13.4.3 Configuration example of application filtering (DPI)
Objective:
Block access to such resources as youtube, bittorrent and facebook.
The use of application filtering mechanism reduces by several times the router performance because
of the need to check each packet. The performance decreases with an increase in amount of the
selected for filtration applications.


ELTEX ESR-1511 Specifications

General

Device Type	Router
WAN Ports	1
LAN Ports	4
Dimensions	190 x 130 x 30 mm
Power Supply	5V 1A
Flash Memory	16 MB
Console Port	No
Operating Temperature	0°C to +40°C
Weight	0.25 kg
Firewall	Yes
QoS	Yes
Ethernet Ports	4
USB Ports	1
Ports	5 (1 WAN + 4 LAN)
VPN Support	PPTP, L2TP
Storage Temperature	-20°C to 70°C
Humidity	10% to 90% (non-condensing)