User manual

59
The "IP Filtering" page is used to configure IP filters.
The user can enter up to 20 IP filters. Each IP filter is identified by a unique number (from 1 to 20). An IP packet goes
through the filtering logic when IP filtering is enabled and:
1) An IP packet is received on one of the interface and is destined to the Vanguard unit
OR
2) An IP packet is sent by the Vanguard unit
OR
3) An IP packet is forwarded by the Vanguard unit.
The filtering logic is the following:
if exists(filter[1]) AND match(packet, filter[1]) then apply(action[1])
else if exists(filter[2]) AND match(packet, filter[2]) then apply(action[2])
else if exists(filter[3]) AND match(packet, filter[3]) then apply(action[3])
else if exists(filter[20]) AND match(packet, filter[20]) then apply(action[20])
else process packet normally.
Where:
exists(filter[n]) -> The user as defined filter number n.
match(packet, filter[n]) -> The IP packet matches filter number n.
apply(action[n]) -> The action identified in filter number n.
IP Filters
 IP FIltering:
Enable : IP filtering is enabled. Any custom IP filters entered by the user will be taken into account when processing
IP packets. The predefined IP filters will also be taken into account.
Disable : IP filtering is disabled.
Add Custom IP Filters
 Filter Number:
Each IP filter is identified by a unique number from 1 to 20.
 Source IP Address:
Any: Any source IP Address will satisfy this criteria.
Specific :A specific Host IP address.
Range : A range of IP addresses.
If the Exclude field is checked, it means that in order for the packet to match with this criteria, it must NOT have
this source IP address (or NOT be in the given source IP address range).
 Destination IP Address:
Any : Any destination IP Address will satisfy this criteria.
Specific :A specific Host IP address.
Range : A range of IP addresses.
If the Exclude field is checked, it means that in order for the packet to match with this criteria, it must NOT have
this destination IP address (or NOT be in the given destination IP address range).