Field
Description
ure ensures a smaller long-term queue size for TCP-based data
traffic, so that traffic bursts can also usually be transmitted
without large packet losses.
The function is activated with
;
.
The function is disabled by default.
Min. queue size
Enter the lower threshold value for the process prevention of
data congestion (RED) in bytes.
Possible values are
to
+
.
The default value is
.
Max. queue size
Enter the upper threshold value for the process prevention of
data congestion (RED) in bytes.
Possible values are
to
+
.
The default value is
+,
.
20.4 Access Rules
Accesses to data and functions are restricted with access lists (which user gets to use
which services and files).
You define filters for IP packets in order to allow or block access from or to the various
hosts in connected networks. This enables you to prevent undesired connections being set
up via the gateway. Access lists define the type of IP traffic the gateway is to accept or
deny. The access decision is based on information contained in the IP packets, e.g.:
• source and/or destination IP address
• packet protocol
• source and/or destination port (port ranges are supported)
Access lists are an effective means if, for example, sites with LANs interconnected over a
bintec elmeg gateway wish to deny all incoming FTP requests or only allow Telnet sessions
between certain hosts.
Access filters in the gateway are based on the combination of filters and actions for filter
rules (= rules) and the linking of these rules to form rule chains. They act on the incoming
data packets to allow or deny access to the gateway for certain data.
20 Networking
bintec elmeg GmbH
400
elmeg hybird 120 / hybird 130
