Specifications

Explorers Nur für den internen Gebrauch
A31003-H3580-M103-2-76A9, 01-2009
7-34 HiPath 3000/5000 V8 - HG 1500 V8, Administrator Documentation
hg-07.fm
Security
7.2.2.4 Add Rule for IP Address Filtering
This function allows you to create new rules for IP address filtering.
WBM path:
WBM (write access activated with the Padlock icon in the control area?) > Explorers > Security
> (right-click) IP Address Filtering > Add Rule for IP Address Filtering
A warning is displayed. Confirm this message with OK.
The Add Rule for IP Address Filtering mask is displayed. You can edit the following fields:
● Lower Limit of Source IP Address Range: The filter rule only permits IP addresses with
sender addresses that originate in a defined area. In this field, enter the lower limit of the
permitted address range from which packets should be accepted.
● Upper Limit of Source IP Address Range: In this field, enter the upper limit of the permitted
address range from which packets should be accepted.
● Lower Limit of Destination IP Address Range: The filter rule permits an IP range to which
packets can be sent. In this field, enter the lower limit of the permitted address range to
which packets should be allowed to be sent.
● Upper Limit of Destination IP Address Range: In this field, enter the upper limit of the per-
mitted address range to which packets should be allowed to be sent.
● IP Protocol: Specify the protocol that should be permitted (TCP, UDP, ICMP or All).
● IP Port Number: Enter a protocol port for the IP address range. This enables you to restrict
the filter range further. If you want to permit the use of all ports, then activate "All ports per-
mitted".
● ICMP Type: Enter the permitted ICMP protocol types. If you want to permit all ICMP proto-
col types, activate All types permitted.
● ICMP Code: Specify which ICMP codes should be permitted. If you want to permit all ICMP
codes, activate "All codes permitted".
>
To allow packets to be sent to random IP addresses, enter 0.0.0.0 as the Lower
Limit of Destination IP Address Range and 255.255.255.255 as the Upper Limit
of Destination IP Address Range.
The source and destination address ID indicates the device that set up the connec-
tion. If the HG 1500 is to be able to set up the connection, for example, then the
board is the source and the remote end of the connection is the destination.
After a connection has been successfully set up, the packets associated with this
connection are transferred in both directions, even if a filter rule was only specified
for one direction.