Siemens EF 711 Series Podręcznik Użytkownika Pobierz pdf (Strona 189)

Configuring Policies

Filtering Rules

SCALANCE WLC711

User Guide, V8.11, 07/2012, C79000-G8976-C260-03 5-5

Once a wireless device user has logged in on the Captive Portal page, and has been authenticated

by the RADIUS server, then the following filters will apply:

• Policy filters — If a filter ID associated with this user is returned by the authentication server,

then the Policy with the same name as the filter ID will be applied.

• Default filter — If no matching filter ID is returned from the authentication server.

Authenticated Filter Examples

Below are two examples of possible filtering rules for authenticated users. The first example

disallows some specific access before allowing everything else.

The second example does the opposite of the first example. It allows some specific access and

denies everything else.

ICMP Type Enforcement

ICMP filter rules can now be constrained to ICMP type/range. You can define the ICMP type/

range in the Port field using the TCP/UDP port definition nomenclature. That is, define the rule as

a normal IP/subnet:port signature (10.0.0.0/24:8), where the ICMP type is entered in the Port field.

This feature allows for tighter granularity over enforcement of ICMP restrictions. You can allow

redirects and DF/MTU indications, and deny ICMP Echo (pings) for users.

x x x IP address of the DNS

Server

Allow all incoming wireless devices access to the

DNS server of the VNS.

x x [a specific IP address, or

address plus range]

Deny all traffic to a specific IP address, or to a

specific IP address range (such as:0/24).

x x x *.*.*.*:80 Allow all port 80 (HTTP) traffic.

x x *.*.*.* Deny everything else.

Table 5-4 Non-authenticated Filter Example B (continued)

In Out Allow IP / Port Description

Table 5-5 Filtering Rules Example A

In Out Allow IP / Port Description

x x *.*.*.*:22-23 SSH and telnet sessions

x x [specific IP address, range] Deny all traffic to a specific IP address or

address range

x x x *.*.*.*. Allow everything else

Table 5-6 Filtering Rules Example B

In Out Allow IP / Port Description

x x x [specific IP address, range] Allow traffic to a specific IP address or address

range.

x x *.*.*.*. Deny everything else.

1 2 ... 184 185 186 187 188 189 190 191 192 193 194 ... 491 492

Komentarze do niniejszej Instrukcji

Brak uwag

Siemens EF 711 Series Podręcznik Użytkownika Strona 189

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Płyty grzewcze Siemens EF 711 Series