Enterasys Networks CSX6000 - Manual (Page 293)

Central Site Remote Access Switch 293
C ONFIGURING A DVANCED IP R OUTING
IP Filters
The screen identifies the common portion of the packet type, which includes the IP addresses and
protocol information. To modify these values, refer to the following section entitled Configuring the
Common IP Portion.
The criteria for IP addresses includes the:
•
mask (logically ANDed with the packet’s address field),
• target value (with which the result of the AND operation is compared), and
• operator (which specifies the type of comparison to perform)
Based upon what you select for IP protocol, you will be prompted for additional information, as
described in following sections. The IP protocol item allows packet matching based upon one of the
following:
•
a set of recognized upper-level protocols
• a wild card value (with wild card valid only with an “EQUAL” operator), or
• an arbitrary numeric value
The upper-level protocols include:
•
TCP
• UDP
• ICPM
C ONFIGURING THE C OMMON IP P ORTION
U SING CFGEDIT
1. To change the source address, select IP Source Address from the PACKET TYPE menu.
2. Provide IP address mask.
3. Provide comparison operator (equal or not equal).
4. Provide IP address target.
5. To change the destination address, select IP Destination Address from the PACKET TYPE menu.
Continue with steps two through 4, as just described.
6. From the PACKET TYPE menu, select IP Protocol.
7. Select Comparison Operator.
•
If you select EQUAL, you may choose between a specific upper-level protocol, an arbitrary
numeric value, or “any” protocol.
• If you select NOT EQUAL, you may choose between a specific upper-level protocol or an ar-
bitrary numeric value only.
Current Configuration for PACKET TYPE "Type_One"
1) IP Source Address AND 0.0.0.0 EQUAL 0.0.0.0
2) IP Destination Address AND 0.0.0.0 EQUAL 0.0.0.0
3) IP Protocol EQ ANY
Select function from above or for previous menu: