9 • Filter IP '6/'$&6$GPLQLVWUDWRUVª5HIHUHQ H*XLGH60 ,QWURGX WLRQIntroductionThe DACS software provides an IP filtering system that enables you to set up security for the internal manage-ment system.Each filter is a defined list of parameters based upon attributes in the IP, TCP, and UDP headers. There are twomajor steps to filter creation: first defining the filter, then applying it to a user connection. The same filter canbe shared by several users.The DACS enables 20 separate filters to be defined, of which up to 10 can be used during a single user connec-tion. Since the IP connections in the 3092 are only for the superuser and the monitor user, these will be theonly two users. The application of the filters is done on the Filter IP main web page.Click on )LOWHU IP under the &RQILJXUDWLRQ0HQX to display the ),OWHU,3main window (see figure 20).)LJXUH)LOWHU,3PDLQZLQGRZDefining a filterThis section gives a brief summary on defining a filter. For a complete discussion with filter examples, see thefinal section.To define a new filter, select an ID number and a name, then click on the 6XEPLW4XHU\ button to submit therequest. The ID number and name must not already exist in the IP FILTER list, and the number must be aninteger between 1 and 20. To delete a filter, enter just the ID number without a name and click on the 6XEPLW4XHU\ button.Note Block filters take priority, therefore any applied and matching blockfilters will drop the packet. Next, pass filters are examined, if PASS fil-ters have been defined, then at least one of them must match or elsethe packet will be dropped. After the block and pass filters are exam-ined, the WRAP filter, if it exists, will be applied.
