IS200DAMBG1ACB库存备件,工业备件
目标端口1。所需设置2。默认设置为Any。此字段用于指定目标端口号。选择Any（任意）可过滤到任何端口的数据包。选择Specific Service Port（特定服务端口）可过滤到此字段中输入的特定端口的数据。选择Port Range（端口范围）以过滤进入此字段中输入的特定端口范围的数据包。时间表规则必需设置将特定时间表应用于此规则；否则将其保留为（0）Always。如果下拉列表为空，请确保“时间表”为空。请参阅“对象定义”>“调度”>“配置”选项卡。默认情况下未选中规则单击“启用”框以激活此规则。保存NA单击保存按钮保存设置。撤消NA单击“撤消”按钮取消更改。后退NA单击后退按钮返回URL阻止配置页面。EW200工业蜂窝网关265 5.2.3 MAC控制“MAC控制”功能允许您根据设备的MAC地址为不同用户分配网关的可访问性。当管理员想要拒绝某些具有特定MAC地址的客户端主机的流量时，可以根据黑名单配置使用“MAC控制”功能来拒绝。带有黑名单的MAC控制方案如图所示，启用MAC控制功能并将“MAC控制规则列表”指定为黑名单，并为网关设置一个MAC控制规则，以拒绝来自“JP NB”的具有其自己MAC地址的连接请求20:6A:6A:6A:6B。该系统将阻止从“JP NB”到网关的连接，但允许其他连接。EW200工业蜂窝网关266 MAC控制设置转到安全>防火墙>MAC控制选项卡。MAC控制设置允许用户创建和自定义MAC地址策略，以允许或拒绝具有特定源MAC地址的数据包。启用MAC控制配置窗口项值设置描述MAC控制默认情况下未选中选中启用框以激活MAC过滤器功能黑名单/白名单拒绝下面的MAC地址默认情况下已设置当选择拒绝下面的地址时，如名称所示，规则中指定的数据包将被阻止–列入黑名单。相比之下，使用Allow MAC Address Below，您可以明确列出要传递的数据包，其余数据包将被阻止。日志警报默认情况下未选中选中启用框以激活事件日志。Kwn LAN PC列表中的MAC从LAN客户端列表中选择MAC地址。单击复制将所选MAC地址复制到筛选器规则。保存单击保存保存设置撤消单击撤消取消设置EW200工业蜂窝网关267创建/编辑MAC控制规则网关最多支持20个过滤规则集。在创建控制规则之前，请确保已启用MAC控制。应用添加按钮后，将显示过滤器规则配置屏幕。MAC控制规则配置项值设置描述规则名称1。字符串格式，任意文本2。必需设置输入MAC控制规则名称。MAC地址（使用：撰写）1。MAC地址字符串格式2。必需设置指定要筛选的源MAC地址规则。
Destination Port 1. Required setting 2. Any is set by default This field is to specify the Destination Port number. Select Any to filter packets going to any Port. Select Specific Service Port to filter packets going to a specific Port entered in this field. Select Port Range to filter packets going to a specific range of Ports entered in this field. Time Schedule Rule Required setting Apply a specific Time Schedule to this rule; otherwise leave it as (0) Always. If the dropdown list is empty ensure Time Schedule is pre-cond. Refer to Object Definition > Scheduling > Configuration tab. Rule Unchecked by default Click the Enable box to activate this rule. Save NA Click the Save button to save the settings. Undo NA Click the Undo button to cancel the changes. Back NA Click the Back button to return to the URL Blocking Configuration page. EW200 Industrial Cellular Gateway 265 5.2.3 MAC Control "MAC Control" function allows you to assign the accessibility to the gateway for different users based on device’s MAC address. When the administrator wants to reject the traffic from some client hosts with specific MAC addresses, the "MAC Control" function can be used to reject according to the blacklist configuration. MAC Control with Blacklist Scenario As shown in the diagram, enable the MAC control function and specify the "MAC Control Rule List" as a blacklist, and con one MAC control rule for the gateway to deny the connection request from the "JP NB" with its own MAC address 20:6A:6A:6A:6A:6B. The system will block connections from the "JP NB" to the gateway but allow others. EW200 Industrial Cellular Gateway 266 MAC Control Setting Go to Security > Firewall > MAC Control Tab. The MAC control setting allows user to create and customize MAC address policies to allow or reject packets with specific source MAC address. Enable MAC Control Configuration Window Item Value setting Description MAC Control Unchecked by default Check the Enable box to activate the MAC filter function Blacklist / White List Deny MAC Address Below is set by default When Deny MAC Address Below is selected, as the name suggest, packets specified in the rules will be blocked – blacklisted. In contrast, with Allow MAC Address Below, you can specifically white list the packets to pass, and the rest will be blocked. Log Alert Unchecked by default Check the Enable box to activate to activate Event Log. Kwn MAC from LAN PC List Select a MAC Address from LAN Client List. Click the Copy to copy the selected MAC Address to the filter rule. Save Click Save to save the settings Undo Click Undo to cancel the settings EW200 Industrial Cellular Gateway 267 Create/Edit MAC Control Rules The gateway supports up to a of 20 filter rule sets. Ensure that the MAC Control is enabled before creating control rules. When the Add button is applied, the Filter Rule Configuration screen will appear. MAC Control Rule Configuration Item Value setting Description Rule Name 1. String format, any text 2. Required setting Enter a MAC Control rule name. MAC Address (Use: to Compose) 1. MAC Address string format 2. Required setting Specify the Source MAC Address to filter rule.
