RayTalk RA-696 - Generic Firewall Rules



Fromtheoverviewtable,eachruleisdesignatedwiththefollowingfield;

 No.:Thenumberingwilldecidethepriorityofwhichth esystemwillcarryouttheavailablefirewallrulesinthetables.
 Active:Checkingthisfieldwillmarktheruleasactivewhichmeansthisrulewillbeenforced.

 Action:Blockdenotesablockrule;PASSdenotesapassrule.

 RuleName:Thisisthedenominatednameoftherule .

 EtherType:Itdenotesthetypeoftrafficsubjectedtoth isrule.

 Remark:Itshowstheadditionalreferenceinformationofthisrule.

 Operation: 4 actions are available; Edit denotes to edit the rule details, Move to denotes to move the rule to a
specifiedrulenumber,InsertBeforedenotestoinsertarulebeforethecurrentrule,andDeletedenotestodeletetherule.

>>Toeditaspecificrule,
EditinOperationcolumnoffirewallruleswillleadtothefollowingpagefordetailedconfiguration.Onthispage,theru lecanbe
editedfromanexistingruleforrevision.



 RuleNumber:Thenumberingofthisspecificrulewilldecideitspriorityamongavailablefirewallrulesonthelist.
 Rulename:Therulenamecanbedenominatedhere.

 ActionforMatchedPackets:TherulecanbechosentobeBlockorPasspacketsthatmatchtherulecriteria.
 RuleRemark:Theadditionalreferencenoteofthisrulecanbespecifiedhere.

 EtherType:Thedrop‐downlistwillprovidetheavailabletypesoftrafficssubjecttothisrule.
 Interface:Forspecifyingthetrafficdirection(ToorFromVAP2)subjectedtothisrule.

 IPv4Service(whenEtherTypeisIPv4):Selecttheavailableupperlayerprotocols/servicesfromthedrop‐downlist.
 DSAP/SSAP (when EtherType is IEEE 802.3): The value can be further specified for the fields in 802.2 LLCframe
header.
 SNAPType(whenEtherTypeisIEEE802.3):Thefieldcanbeusedtoin
dicatethetyp eofencapsulatedtraffics.
 Opcode(whenEtherTypeisARP):ThislistcanbeusedtospecifytheARPOpcodeinARPheader.

 Source: MAC Address/Mask indicates the source MAC; IP Address/Mask indicates the source IP address (when
EtherTypeisIPv4);ARPIP/MAC&MASKindicatetheARPpayloadfields(whenEtherT ypeisARP).
25