EasyManua.ls Logo

ELTEX TAU-36.IP - Appendix H. Device Firewall Configuration-Iptables

Default Icon
299 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Loading...
_________________________________________________________________________________
_________________________________________________________________________________
288 Universal Network Terminal TAU-72.IP/TAU-36.IP
APPENDIX H. DEVICE FIREWALL CONFIGURATION-IPTABLES
Command
Description
iptables
Configuration of firewall rules
iptables-save
Save created firewall rules
iptables-restore
Restore initial firewall rules, if the current rules are not saved
To configure the firewall, connect to the gateway via COM port, SSH or Telnet (factory settings address:
192.168.1.2, network mask: 255.255.255.0) using terminal application, e.g. TERATERM, Putty, SecureCRT.
Firewall configuration procedure as follows:
1. Configuration via COM port:
Connect the null modem cable to COM port of the PC and 'Console' port of the device.
Configuration via SSH, Telnet:
Connect the computer to the Ethernet port of the device using Ethernet cable.
2. Run the terminal application;
3. Configure COM port connection: data rate: 115200, data format: 8bit w/o parity, 1 stop bit, w/o flow
control; or telnet, ssh connection: Factory default IP address: 192.168.1.2, port: 23 (telnet), port 22
(ssh);
4. Enter 'admin' as a login. Go to Linux shell by executing 'shell' command.
5. Create necessary tables according to iptables utility manual, use 'iptables h' command to view
the manual;
iptables utility usage examples:
a) accept TCP packets via port 25 from the host 212.164.54.162:
iptables -A INPUT -s 212.164.54.162 -p tcp -m tcp --dport 25 -j ACCEPT
b) reject all packets from the host 216.223.9.208:
iptables -A INPUT -s 216.223.9.208 -j DROP
c) reject all packets from the network 216.223.0.0/255.255.0.0:
iptables -A INPUT -s 216.223.0.0/255.255.0.0 -j DROP
d) view all tables:
iptables -L
6. Save created rules with 'iptables-save'.
To restore previous rules, if changes have not been saved yet, use 'Iptables-restore'
command.
7. Enter 'save' command to store the configuration into the non-volatile (flash) memory of the device.

Table of Contents

Related product manuals