User Documentation

Version 1.2 / August 2020 Page 75 / 102
► Again login into the Web interface of the Router using a Web browser
Use IP address 192.168.10.254 (http://192.10.1.254) on LAN port
User: admin
Password: Detmold
6. Step-by-step description of creating a new packet filter (firewall rules) to prohibit ping requests
from devices of network 2 to devices B and C of network 1
General description of the Packet filter
The feature „Packet filter“ can be used to create firewall rules for IP address (Layer 3) and MAC address
level ( Layer 2). The packet filter is organized hierarchical by using rule-sets which contains several single
rules.
To define new firewall rules, you first have to create a rule-set or you have to add the rule to an existing rule-
set. A rule-set can contain up to 10 firewall rules.
The manner how to configure rule-sets or rules is the same for Layer 2 and Layer 3 packet filters. All created
rule-sets are displayed in menu windows „Packet filter“. By clicking on the triangle icon (►) on the left side of
a displayed rule-set the belonging rules additionally will be displayed.
By default the Router contains 1 rule-set called Allow_L3* which is acting as a general permission to allow
inbound and outbound traffic without any limitation.
Application method of defined rule-sets
Several configured rule-sets will be applicated top-down. That means every data traffic will first be checked
by the top-most displayed rule-set with its containing rules.
If a defined rule match the inspected data, the filter rule will be applied. After that the packet filter function
immediately will be left and no further defined rules and rule-sets will be applied.
If a defined rule does not match the inspected data, the current filter rule will be skipped and the data will be
checked by the next filter rule (from top to down). This method will be conducted step-by-step with each de-
fined rule-set (and belonging rules) until a valid rule will be found and applied or no further rule exists.
7. Setup the firewall rules
► Select menu Configuration → Packet filter →Tab “Layer 3”
Figure 4: Packet filter
► Click on the icon + (right side of line “Add a new rule set”) to create a new rule-set and follow the below
described steps (Figure 5)