11-26 Administration GuideATMP exampleTo enable a firewall to allow ATMP traffic, you must provision the firewall to allow inbound and outbound UDPpackets specifically destined for port 5150. The source port may be dynamic, so often it is not useful to applya compare function on this portion of the control/negotiation packets. You must also set the firewall to allowinbound and outbound GRE packets (Protocol 47, Internet Assigned Numbers Document, RFC 1700), enablingtransport of the tunnel payload.From the Main Menu navigate to Display/Change IP Filter Set, and from the pop-up menu select Basic Firewall.Select Display/Change Input Filter.Display/Change Input Filter screenFor Input Filter 1 set the Destination Port information as shown below.MainMenu System FilterSets IP FilterSets Display/ChangeIP Filter SetConfiguration BasicFirewall+-#----Source IP Addr----Dest IP Addr------Proto-Src.Port-D.Port--On?-Fwd-++-------------------------------------------------------------------------+| 1 0.0.0.0 0.0.0.0 UDP NC =5150 Yes Yes || 2 0.0.0.0 0.0.0.0 GRE -- -- Yes Yes || |Change Input Filter 1Enabled: YesForward: YesSource IP Address: 0.0.0.0Source IP Address Mask: 0.0.0.0Dest. IP Address: 0.0.0.0Dest. IP Address Mask: 0.0.0.0Protocol Type: TCPSource Port Compare... No CompareSource Port ID: 0Dest. Port Compare... EqualDest. Port ID: 1723Established TCP Conns. Only: No
