Avaya 3.7 Manuel D’Utilisation

Page de 326
Establishing security
192 Avaya VPNmanager Configuration Guide Release 3.7
4. From the drop-down list, select Packet Filtering, then click GO to open the Policy Manager 
for Packet Filtering.
5. Click Advanced to open the Packet Filter Rule-Advanced dialog box.
6. Use 
 for determining which option you want.
7. Click OK to return to the Policy Manager for Packet Filtering.
8. Click Save to save your work.
Marking packets for differentiated services (QoS)
If your network is running Differentiated Services, a VSU can be configured to mark specific IP 
packets for specific types of services.
Table 12: Packet Filter rule-advanced options 
Option
Description
Permit all non VPN traffic
Select this button to permit all non VPN packets.
Deny all IP non VPN traffic
Select this button to block all IP non VPN packets.
Deny all non VPN traffic
Select this button to block all non VPN packets.
Drop all IP fragments
Select this check box to block all IP packets that 
have been fragmented. See 
 for information about 
packet fragmentation.
Drop all Short IP Packets
Select this check box to block all IP packets that 
are unusually small. The following are considered 
short packets.
IP packets shorter than 20 bytes.
TCP packets shorter than 40 bytes.
UDP packets shorter than 28 bytes.
ICMP packets shorter than 28 bytes.
Keep Filter Statistics
Select this check box if you want to send the 
“packet filtering log” to a common SNMP 
manager. The manager that is used is configured 
in the