IP Filtering Example
Example of IP data communication control

In this example IP filtering restricts access from the Internet to one
server on the internal networks behind the firewall.
Requirements
- Two intranets (1 and 2) are each connected to a port on a switch, which
is behind a firewall.
- Intranet 2 has a guest server available for WWW access through the
firewall.
- The Internet guest user should have access only to the guest server on
intranet 2, using only the HTTP protocol.
- Intranets 1 and 2 should have unrestricted access to each other.
Solution
Create two user groups, which solves the IP filtering demands:
- Intranet
This group should contain the IP networks for intranet 1 and intranet 2, as well as the
other protocols member.
- Guest
This group should contain the IP address of the guest server, the IP address of the guest
on the Internet, and the HTTP Protocol.
Default User Group
Remove the Other Hosts and Other Protocols from the Default User Group.
Note:
If users on intranets 1 and 2 need access to the guest server and use HTTP then add
these members to the Intranet group as well.
Procedures
*Legal Information © 2000 Intel Corporation