Draytek Vigor2820 Series User Manual page 107

Fragments
Filter
Branch to other Filter
Set
Session Control
MAC Bind IP
Protocol - Specify the protocol(s) which this filter rule will apply to.
Source/Destination Port –
(=) – when the first and last value are the same, it indicates one
port; when the first and last values are different, it indicates a range
for the port and available for this service type.
(!=) – when the first and last value are the same,
the ports except the port defined here; when the first and
values are different, it indicates that all the ports except the range
defined here are available for this service type.
(>) – the port number greater than this value is available.
(<) – the port number less than this value is available for this
profile.
Service Group/Object - Use the drop down list to choose the one
that you want.
Specify the action for fragmented packets. And it is used for Data
Filter only.
Don't care -No action will be taken towards fragmented packets.
Unfragmented -Apply the rule to unfragmented packets.
Fragmented - Apply the rule to fragmented packets.
Too Short - Apply the rule only to packets that are too short to
contain a complete header.
Specifies the action to be taken when packets match the rule.
Block Immediately - Packets matching the rule will be dropped
immediately.
Pass Immediately - Packets matching the rule will be passed
immediately.
Block If No Further Match - A packet matching the rule, and that
does not match further rules, will be dropped.
Pass If No Further Match - A packet matching the rule, and that
does not match further rules, will be passed through.
If the packet matches the filter rule, the next filter rule will branch
to the specified filter set. Select next filter rule to branch from the
drop-down menu. Be aware that the router will apply the specified
filter rule for ever and will not return to previous filter rule any
more.
The number typed here is the total sessions of the packets that
match the filter rule configured in this page. The default setting is
15000 which means the maximum session for this model is 15000.
Strict –Make the MAC address and IP address settings
configured in IP Object for Source IP and Destination IP be
bound for applying such filter rule.
97
it indicates all
last
Vigor2820 Series User's Guide