Unicast IP Routing

Configuring a Filter

When adding or editing an input or an output filter, you configure the parameters of the filter in the Add IP Filter or Edit IP Filter dialog boxes. When multiple parameters are configured on a particular filter, as the filter is applied to the incoming packet, the parameters of the filter are compared through a logical AND. The fields in the packet must match all of the configured parameters of the filter to meet the criteria of the filter.

Note

You cannot configure separate active filters for Receive all packets except those that meet the criteria below and Drop all packets except those that meet the criteria below.

You can configure the following fields in the Add IP Filter or Edit IP Filter dialog boxes:

Source Network

IP Address: Type the source IP network ID or a source IP address.
Subnet Mask: Type the subnet mask corresponding to the source network ID or type 255.255.255.255 for a source IP address. The subnet mask bits must encompass all of the bits being used in the IP Address field. The IP address cannot be more specific than the subnet mask.

Destination Network

IP Address: Type the destination IP network ID or a destination IP address.
Subnet Mask: Type the subnet mask corresponding to the destination network ID, or type 255.255.255.255 for a destination IP address. The subnet mask bits must encompass all of the bits being used in the IP Address field. The IP address cannot be more specific than the subnet mask.

Protocol

TCP (Protocol = 6): Select this option to reach text boxes in which you type a source TCP port and a destination TCP port. One or both can be specified. If nothing is specified in these text boxes, they default to 0, meaning any port.
UDP (Protocol = 17): Select this option to reach text boxes in which you type a source UDP port and a destination UDP port. One or both can be specified. If nothing is specified in these text boxes, they default to 0, meaning any port.
ICMP (Protocol = 1): Select this option to reach text boxes in which you type an ICMP code and an ICMP type. One or both can be specified. If nothing is specified in these text boxes, they default to 255, meaning any code or any type.
Any: Select this option to make any IP protocol value assumed.
Other: Select this option to reach the text box in which you type any IP protocol.