Specifications
Examples of IP Filter Profiles
AVM Access Server – 5 AVM Access Server Concepts and Functional Principles 73
VPN Packets Only (Lower)
This pre-configured profile can be used to prevent the Access Server
from establishing any connections with computers in the Internet ex-
cept VPN connections.
“VPN packets only (lower)”
Profile active Yes
Name VPN packets only (lower)
Default action Drop
Rules
Status Service/Source/Destination Action Remarks
Active ISAKMP packets
(Virtual Private Network)
Accept If you have configured VPN
connections, activate this
rule for the Internet
connection over which the
VPN links are carried.
Active AH packets
(Virtual Private Network)
Accept If you have configured VPN
connections, activate this
rule for the Internet
connection over which the
VPN links are carried.
Active ESP packets
(Virtual Private Network)
Accept If you have configured VPN
connections, activate this
rule for the Internet
connection over which the
VPN links are carried.
Active ICMP packets
(Internet Control Message
Protocol)
Accept This rule allows error
messages from Internet
servers to reach computers
in your network. ICMP
packets carry error messages
about other Internet
services, such as the
indication that a requested
computer in the Internet is
not reachable.