Specifications

Attach
LAN
and
GRE
interfaces to a zone by selecting the
Config Name
for those interfaces. For LANs, these names are defined in
Network Settings → WiFi / Local
Networks; for GRE tunnels, these names are defined in Internet → GRE Tunnels.
Sample zone interface assignments: LAN & GRE
LAN Config Name is Primary LAN
LAN Config Name isn't Guest LAN
GRE Config Name is office_tunnel
The third field defaults to “is,” but you can also select “is not,” “starts with,” “contains,” or “ends with” to define the zone.
WAN Interfaces
Attaching WAN interfaces to a zone includes many more options. Select “WAN” in the first field, and then select from each of the following fields to create a statement that
defines which WAN interfaces to attach to this zone.
Field 2: Choose one of the following:
Port – Select by the physical port on the router (e.g., "Modem 1").
Manufacturer – Select by the modem manufacturer (e.g., "CradlePoint Inc.").
Model – Select according to the specific model of modem.
Type – Select by type of Internet source (Ethernet, LTE, Modem, Wireless as WAN, WiMAX).
Serial Number – Select a 3G or LTE modem by the serial number.
MAC Address – Select from a dropdown list of attached devices.
Unique ID – Select by ID. This is generated by the router and displayed when the device is connected to the router.
Field 3: Select “is,” “is not,” “starts with,” “contains,” or “ends with” to create your condition.
Field 4: If the desired values are available, select from the dropdown list. You may need to manually input the value.
Sample zone interface assignments: WAN
WAN Type is Ethernet
WAN Port isn't Modem 1
Filter Policies
A Filter Policy is a one-way filter applied to initialized network traffic flowing from one zone to another. A Filter Policy needs to be assigned to a Forwarding for it to take effect.
Filter Policies can either be Added, Edited, Removed, or Cloned. Cloning a Policy will copy the entire policy. The name of the cloned policy will include the name plus “Clone”.
Default Allow All is a preconfigured policy to allow all traffic initialized from one zone to flow to another zone. The state of the connection is tracked to allow
responses to traverse the zones back to the source. LAN to WAN forwardings use this policy by default. The policy can be removed or altered to filter the traffic flow.
Default Deny All is a preconfigured policy to deny all traffic initialized from one zone to be blocked to another zone. WAN to LAN forwardings use this policy by
default. The policy can be removed or altered to filter the traffic flow.
Click Add to create a new filter policy, or select an existing policy and click Edit to open the filter policy editor.
CradlePoint AER 2100 – Manual
07/03/2014
54