Siemens HiPath AP2620 - Filtering Rules by Filter ID Examples

hwc_vnsconfiguration.fm
A31003-W1040-U101-1-7619, July 2006 DRAFT
HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide
161
Virtual Network configuration
Configuring filtering rules for a VNS
The Filtering tab automatically provides a Deny All rule already in place. This rule can be
modified to Allow All, if appropriate to the network access needs for this VNS.
5. For each filtering rule you are defining, do the following:
● In the IP/subnet:port box, type the destination IP address. You can also specify an IP
range, a port designation, or a port range on that IP address.
● In the Protocol drop-down list, select the applicable protocol. The default is N/A.
6. Click Add. The information appears in the Filter Rules area of the tab.
7. Select the new filter, then do the following:
● If applicable, select In to refer to traffic from the wireless device that is trying to get on
the network.
● If applicable, select Out to refer to traffic from the network host that is trying to get to
a wireless device.
● Select the Allow checkbox applicable to the rule you defined.
8. Edit the order of a filter by selecting the filter and clicking the Up and Down buttons. The
filtering rules are executed in the order you define here.
9. To save your changes, click Save.
7.6.3.1 Filtering rules by filter ID examples
Below are two examples of possible filtering rules for a filter ID. The first example disallows
some specific access before allowing everything else.
The second example does the opposite of the first example. It allows some specific access and
denies everything else.
In Out Allow IP / Port Description
x x *.*.*.*:22-23 SSH and telnet sessions
x x [specific IP address, range] Deny all traffic to a specific IP address or
address range
x x x *.*.*.*. Allow everything else
Table 9 Filtering rules by filter ID example A
In Out Allow IP / Port Description
x x x [specific IP address, range] Allow traffic to a specific IP address or
address range.
Table 10 Filtering rules by filter ID example B