
628 Chapter 67 Configuring IP Filter Rules
N0060606N0060606
Basic (stateless) Packet Filter
BCM supports basic (or stateless) packet filtering for IP protocols. Stateless packet filtering
examines each packet and determines whether or not to pass it through based on the rules entered.
No state is maintained for packets evaluated using stateless rules.
Basic Packet Filters are configured by clearing the Stateful check box on the Add or Modify filter
rules dialog boxes.
For more information, refer to “Stateful Packet Filters” on page 723.
IP Filters and NAT
When you use NAT and IP Filters, there are two interactions you need to be aware of.
• On inbound traffic, the NAT rules are applied before the IP Firewall Filter rules.
• On outbound traffic, the IP Firewall Filter rules are applied before the NAT rules.
Adding an Inbound filter rule
To add an inbound filter
1 Click the Inbound Filter Rule tab.
The Inbound Filter Rule details panel appears.
2 Click Add.
The Add Inbound Filter Rule dialog box appears. See Figure 204.
3 Configure the Inbound Filter Rule settings. Refer to the information in Table 154.
4 Click OK.
Note: Add the rule in Table 158 to ensure access to the Element Manager is not blocked.
To allow access for SSH, you must set the filters to allow the flow of packets to the SSH
port (port 22).
To allow access for Telnet, you must set the filters to allow the flow of packets to the
Telnet port (port 23).
To allow access for FTP, you must set the filters to allow the flow of packets to the FTP
port (port 20)
Note: To mark inbound packets the stateful check box must be selected. Refer
to “Stateful Packet Filters” on page 723 for more information.
Komentarze do niniejszej Instrukcji