Cabletron Systems WPIM-DDS Installationsanleitung PDF herunterladen (Seite 31)

HSIM-W6 Firmware Support

HSIM-W6 Installation Guide 2-17

Bridging and Routing Protocol Filtering

Filtering is used to allow efﬁcient usage of network resources and provide security for a network

and hosts.

IP Internet Firewall — The HSIM-W6 supports IP Internet Firewall ﬁltering to prevent

unauthorized access to a system and network resources from the Internet or a corporate Intranet.

Security can be conﬁgured to permit or deny IP trafﬁc. The security is established by conﬁguring

IP access ﬁlters, which are based on source IP address, source mask, destination IP address,

destination mask, protocol type, and application port identiﬁers for both the Transmission Control

Protocol (TCP) and User Datagram Protocol (UDP). These IP access ﬁlters allow individual IP

source and destination pair ﬁltering as well as IP address ranges and wild carding to match any IP

address. These Firewall ﬁlters can be deﬁned to allow inbound only, outbound only, or

bi-directional IP communication up to the UDP and TCP application port level. Firewall access

ﬁlters provide a lot of ﬂexibility to establish a powerful IP security barrier.

The HSIM-W6 supports the IP Access Control (from the ctip-mib) Internet Firewall Filter.

Bridge Filtering — Bridge ﬁltering allows a network administrator to control the ﬂow of packets

across the HSIM-W6. Bridge ﬁltering can be used to “deny” or “allow” packets based on a

“matched pattern” using a speciﬁed position and hexadecimal content within the packet. This

enables restricting or forwarding of messages based on address, protocol, or data content.

Common uses include preventing access to remote networks, controlling unauthorized access to

the local network, and limiting unnecessary trafﬁc.

The HSIM-W6 supports the following Bridge Filters:

• dot1d.Static Filters (IETF RFC1493)

• Ethernet Special Filtering Database (from the ctbridge-mib)

System Passwords

System passwords allow the user to control access to the HSIM-W6 by establishing three

passwords. Each password provides varying levels of access to the HSIM-W6. The default

password for each access level is preset to public.

The following deﬁnitions explain each of the three levels of access:

read-only — This access level allows reading of device parameters not including system

passwords.

1 2 ... 26 27 28 29 30 31 32 33 34 35 36 ... 91 92

Keine Kommentare

Cabletron Systems WPIM-DDS Installationsanleitung Seite 31