Allied Telesis AT-AR256E - Manual (Page 24)

- 24 -
4.6.3.4 Enable Incoming ICMP Ping
Enabling the Incoming Internet Control Message Protocol (ICMP) Ping will allow Echo requests to
come into the gateway. The gateway will respond with a ICMP Echo response message. The
option allows the A DSL Provider or ISP to determine the following:
a. The status of the network.
b. Tracking and isolating hardware and software problems.
c. Testing, measuring and managing networks.
4.6.4 Access Control
Access control can also be called port blocking. Specific types of traffic that is destined to a
selected LAN IP address can be blocked. To enable any of the Access Control features, click
Advanced and under Advanced, select Access Control. A page similar to the port forwarding
page appears. Similar to the port forwarding page, a IP address can be added to a rule. All
Access Control rules have precedence over rules that were added via the port forwarding page.
The Apply button will temporarily save this connection. To make the change permanent, you
need to click on Save Settings (at the side of the page). At the system commands page, click on
Save All.
4.6.5 LAN Clients
To add a LAN client, click Advanced and under Advanced, select LAN Clients. If DHCP is used,
all DHCP clients are automatically assigned. If a fixed IP address server is on the LAN and you
want this server to be visible via the WAN, you must add its IP address. Once the IP address has
been added, you can apply Port Forwarding and Access Control rules to this IP address.
The Apply button will temporarily save this connection. To make the change permanent, you
need to click on Save Settings (at the side of the page). At the system commands page, click on
Save All.
4.6.6 MAC Address Filters
The MAC filtering mechanism provides a way for the users to define rules to allow/deny frames
through the bridge based on source MAC address, destination MAC address and/or frame type.
When bridge filtering is enabled, each frame is examined against the defined filter rules
sequentially, and when a matched is determined, the appropriate filtering action (determined by
the access type selected . . . i.e. allow or deny) is performed. The user should note that the MAC
filter will only examined frames from interfaces that are part of the bridge itself. Twenty filter rules
are supported with MAC filtering. To enable MAC Filters, click Advanced and under Advanced,
select MAC Filters. Figure 15 illustrates a typical Bridge filter configuration.
The User Interface for MAC Filter allows the user to add/edit/delete, as well as, enables the filter
rules. To add rules, simply define the source MAC address, destination MAC address and frame
type with desired filtering type (i.e. allow/deny), and click the “Add” button. The MAC address
must be in the xx-xx-xx-xx-xx-xx format, with 00-00-00-00-00-00 as “don’t care”. Blanks can be
used in the MAC address space, and would also be considered as “don’t care”.
To edit/modify an existing filter rule, select the desired rule created previously from “Add” in the
“Edit” select box. The selected filter rule will appear on the top section, as with the “Add” filter
rule. Make the desired change to the MAC address, frame type and/or access type, and click
“Apply”.
To delete filter rule(s), select the filter rule entry to delete in the “Delete” selection box. Note that
multiple deletions are possible. Once all the desired filter rule(s) is/are selected for deletion, click