Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) more filter details...
Hi,
do you know how the performance of the boxes is effected by the filter, when
it is
a) configured only for the ethernet interface
b) configured on ethernet interface and in /Ethernet/Answer/Session options/ ?
Marc
> >The packet filter should be configured as follows:
> >
> > 90-504 discardfilter
> > In filter 01
> > >Valid =Yes
> > Type = IP
> > Generic...
> > IP...
> >
> > Ip...
> > Forward = No
> > Src Mask = 0.0.0.0
> > Src Adrs = 0.0.0.0
> > Dst Mask = 0.0.0.0
> > Dst Adrs = 0.0.0.0
> > Protocol = 17
> > Src Port Cmp = None
> > Src Port # = N/A
> > Dst Port Cmp = Eql
> > Dst Port # = 9
> > TCP Estab = N/A
> >
> > In filter 02
> > >Valid =Yes
> > Type = Generic
> > Generic...
> > IP...
> >
> >Generic ...
> > Forward = Yes
> > Offset = 0
> > Length = 0
> > Mask = 0000000000000000
> > Value = 0000000000000000
> > Compare = Equals
> > More = No
> >
> >These filters can be applied in a number of different ways.
> >
> >1 Local Ethernet Interface
> >
> >
> >Under Ethernet -> Mod Config
> > Ether Options ->
> > Filter = x
> >
> >
> >2 Local Conenction Profiles
> >
> >Under Ethernet -> Conections
> > -> Profile Name
> > -> Sessions Options
> > Data Filter = x
> >
> >
> >
> >3 Apply globally under Ethernet Answer Profile
> >
> >You could apply this filter to all users by activating the filters in the
> >Answer Profile
> > Ethernet -> Answer -> Use Answer as Default = Yes
> > -> Session Options
> > Data Filter = x
> >
> >The filters would then be automatically applied to all users authenticated
> >via Radius.
> >
> >
> >
> >4 Apply the filters in Radius profiles
> >
> >Customers may want to apply these filters in Radius profiles
> >You can simply add the followng 2 lines to your Radius profiles
> >
> >Ascend-Data-Filter = "ip in drop udp dstport = 9"
> >Ascend-Data-Filter = "generic in forward 0 0 0"
> >
> >e.g.
> >willie Password = "test"
> > Service-Type = Framed,
> > Framed-Protocol = PPP,
> > Framed-IP-Address = 1.2.3.4,
> > Framed-IP-Netmask = 255.255.255.0,,
> > Ascend-Data-Filter = "ip in drop udp dstport = 9",
> > Ascend-Data-Filter = "generic in forward 0 0 0"
> >
> >
> >You could also apply this to a default profile in Radius
> >
> >DEFAULT Authentication-Type = Unix-Pw
> > Service-Type = Framed,
> > Framed-Protocol = PPP,
> > Ascend-Assign-IP-Pool = 1,
> > Ascend-Data-Filter = "ip in drop udp dstport = 9",
> > Ascend-Data-Filter = "generic in forward 0 0 0"
> >
> >
>
> Matt Holdrege http://www.ascend.com matt@ascend.com
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
Best regards,
Mit freundlichen Gruessen
UUNET Deutschland GmbH
Marc Ikemann
(Login-Service)
Networking UUNET Deutschland GmbH
Tel. +49 231 972 00 Emil-Figge-Strasse 80
Fax. +49 231 972 1188 44227 Dortmund, Germany
mi@de.uu.net URL: http://www.de.uu.net
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
References: