User's Manual

User Manual
WCB1200H5PX Wireless High Power 5.8Ghz CPE
101
5.4 Access Control List
5.4.1 IP Filter Setup
Allows to create deny or allow rules to filter ingress or egress packets from specific source and/or to destination IP
address on wired (LAN) or Wireless (WAN) ports. Filter rules could be used to filter unicast or multicast packets on
different protocols as shown in the IP Filter Setup. Important to note that IP filter rules has precedence over Virtual server
rules.
Please click on Advance -> IP Filter Setup and follow the below setting.
 Source Address/Mask : Enter desired source IP address and netmask; i.e. 192.168.2.10/32.
 Source Port : Enter a port or a range of ports as start:end; i.e. port 20:80
 Destination Address/Mask : Enter desired destination IP address and netmask; i.e. 192.168.1.10/32
 Destination Port : Enter a port or a range of ports as start:end; i.e. port 20:80
 In/Out : Applies to Ingress or egress packets
 Protocol : Supports TCP, UDP or ICMP.
 Listen : Click Yes radial button to match TCP packets only with the SYN flag.
 Active : Deny to drop and Pass to allow per filter rules
 Interface : The interface that a filter rule applies
All packets are allowed by default. Deny rules could be added to the filter list to filter out unwanted packets and
leave remaining allowed.
Click “Save” button to add IP filter rule. Total of 20 rules maximum allowed in the IP Filter List. All rules can be edited or
removed from the List. Click Reboot button to activate your changes.
When you create rules in the IP Filter List, the prior rules maintain higher priority. To allow limited access from a subnet to
a destination network manager needs to create allow rules first and followed by deny rules. So, if you just want one IP
address to access the system via telnet from your subnet, not others, the Example 1 demonstrates it, not rules in the
Example 2.