Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) more filter details...

>The packet filter should be configured as follows:
>
> 90-504 discardfilter
> In filter 01
> >Valid =Yes
> Type = IP
> Generic...
> IP...
>
> Ip...
> Forward = No
> Src Mask = 0.0.0.0
> Src Adrs = 0.0.0.0
> Dst Mask = 0.0.0.0
> Dst Adrs = 0.0.0.0
> Protocol = 17
> Src Port Cmp = None
> Src Port # = N/A
> Dst Port Cmp = Eql
> Dst Port # = 9
> TCP Estab = N/A
>
> In filter 02
> >Valid =Yes
> Type = Generic
> Generic...
> IP...
>
>Generic ...
> Forward = Yes
> Offset = 0
> Length = 0
> Mask = 0000000000000000
> Value = 0000000000000000
> Compare = Equals
> More = No
>
>These filters can be applied in a number of different ways.
>
>1    Local Ethernet Interface
>
>
>Under Ethernet -> Mod Config
>     Ether Options ->
>          Filter = x
>
>
>2    Local Conenction Profiles
>
>Under Ethernet -> Conections
>               ->  Profile Name
>                    -> Sessions Options
>                         Data Filter = x
>
>
>
>3    Apply globally under Ethernet Answer Profile
>
>You could apply this filter to all users by activating the filters in the
>Answer Profile
>     Ethernet -> Answer -> Use Answer as Default = Yes
>               -> Session Options
>                    Data Filter = x
>
>The filters would then be automatically applied to all users authenticated
>via Radius.
>
>
>
>4    Apply the filters in Radius profiles
>
>Customers may want to apply these filters in Radius profiles
>You can simply add the followng 2 lines to your Radius profiles
>
>Ascend-Data-Filter = "ip in drop udp dstport = 9"
>Ascend-Data-Filter = "generic in forward 0 0 0"
>
>e.g.
>willie    Password = "test"
>     Service-Type = Framed,
>     Framed-Protocol = PPP,
>     Framed-IP-Address = 1.2.3.4,
>     Framed-IP-Netmask = 255.255.255.0,,
>     Ascend-Data-Filter = "ip in drop udp dstport = 9",
>     Ascend-Data-Filter = "generic in forward 0 0 0"
>
>
>You could also apply this to a default profile in Radius
>
>DEFAULT   Authentication-Type = Unix-Pw
>     Service-Type = Framed,
>     Framed-Protocol = PPP,
>     Ascend-Assign-IP-Pool = 1,
>     Ascend-Data-Filter = "ip in drop udp dstport = 9",
>     Ascend-Data-Filter = "generic in forward 0 0 0"
>
>

Matt Holdrege		http://www.ascend.com	matt@ascend.com
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
Follow-Ups: