Download Pan-Tilt Unit (E Series) Command Reference Manual

A‐TCP/IPFirewall
E
E Series PTUs introduced Ethernet connectivity, which provides easy and reliable communication on all standard PTUs. Ethernet is a multi‐layered technology that allows many different uses and protocols. E Series PTUs take full advantage of this by offering different services over a single Ethernet connection; however, not all services are required or desirable in a production installation.
Firmware version 3.1.4 and later includes lightweight firewall functionality that lets you control or restrict access to E Series services at both the Ethernet and IP layers.
Note: Dedicated firewall equipment is recommended for situations that require complex source/destination/flags/state specifications, deep packet inspection, or egress filter‐
ing.
A.1‐Rules
Rules specify how to identify and process incoming packets of data and form the core of any firewall All rules use the same basic format:
Pass or Block | From (source)| All or TCP or UDP or Both | If TCP/UDP,
then Port Number
Rules work as follows:
•
A Pass rule accepts packets that match the specified criteria.
•
A Block rule rejects packets that match the specified criteria.
•
From specifies a matching parameter, which can be all packets, a MAC address, a single IP address, or network in CIDR notation.
•
Packets are further matched by the particular protocol if matching an IP packet. All IP packets can be matched. TCP or UDP packets can also be matched by additionally specifying the destination port number.
A.1.1‐RuleSyntax
The rule syntax is simple to specify and understand. The destination always matches the PTU and the PTU will not forward packets because it is not a router or a NAT device. The basic firewall rule syntax is:
Rule:
= Action From (Proto Port) *
Action: = Pass | Block
Pass:
= 'P'
Copyright 2014, FLIR Commercial Systems, Inc.
109