
Using Eiconcard Routing Services
page 38
For more information on the options available for configuring packet filtering rules, consult
/opt/dialogic/c4l/docs/mprif.html.
Load the mpr.if file
Once the mpr.if file is configured, it must be loaded down to the Eiconcard Routing Services
driver. Before doing this, you must ensure your Eiconcards are started using the eccard start
command.
Once your Eiconcards are started, run mprload at the command line to load the mpr.if file,
and mprstart to start your configured circuits.
The following commands are available with Eiconcard Routing Services:
• mprload: Loads the default mpr.if file down to the Eiconcard Routing Services driver.
• mprstart: Starts the circuits created with Eiconcard Routing Services
• mprstop: Stops the circuits created with Eiconcard Routing Services
• mprstat: Displays the status of the configured circuits or packet filtering rules
• mprauto: A script file that can be used to load and start your circuits automatically when
the system is started.
For more information on these commands, refer to the appropriate HTML page located in the
/opt/dialogic/c4l/docs directory.
IP Routing Tables
You can add IP-routing entries by using the Linux route command or the TCP/IP routing
daemon, routed. Entries you add with route are static. The routed daemon uses TCP/IP’s
Routing Information Protocol (RIP) to exchange information and update the routing table
entries.
-dport
[dest_port]
Specifies the destination port for which you are specifying a packet
filtering rule. All packets with a destination port that matches a port
specified in the packet filtering rules are either forwarded or
dropped. A destination port is specified to prevent access to certain
services or applications on a remote system by local hosts. This
option must be enclosed within the brackets.
in|out|both Specifies whether a rule should be executed on receipt of a packet
from an Eiconcard, prior to being sent out over the Eiconcard, or
both. All rules should be executed on receipt of a packet,
guaranteeing that a packet is validated prior to being received by
IP. However, as packets cannot be validated on being received over
non-Eiconcard interfaces (i.e. LAN card), the facility will be available
to validate these packets prior to being sent out over Eiconcard
controlled interfaces.
drop|forward Specifies whether a packet should be dropped or forwarded based
on the configured packet filtering rules.
Parameters Description
Komentarze do niniejszej Instrukcji