Zhone 2000 ユーザーガイド

ページ / 296
C o n f i g u r a t i o n
127
Select “T” to see the menu below displayed.
Figure 4.97
FRF.8 DE Mapping
If you select “0”, the discarding of cells will never be allowed, and if you 
select “1”, discards will never be allowed.
If you select “M”  (refer to the menu below), this allows bi-directional 
mapping of the Frame Relay DE to the ATM CLPI. The purpose of this is to 
identify in the protocol header that this frame may discard the frame if 
congestion is indicated.
Figure 4.98
FRF.8 FECN Mapping
If you select “0”, no congestion will always be indicated, and if you select 
“1”, congestion will always be indicated.
If you select “M”, this allows bi-directional mapping of the Frame Relay 
Forward Explicit Congestion Notification (FECN) to the ATM Explicit 
Forward Congestion Indication (EFCI). The purpose of this is to identify in 
the protocol header that the network has congestion.
Firewall Configuration
Firewall configuration (also known as IP filtering) allows you to specify a 
combination of parameters the IAD uses to selectively eliminate IP traffic.
Refer to the IP Filtering Application Note contained in Appendix C.
Creating a Firewall via IP Filtering and NAT
IP Filtering, in conjunction with NAT, can provide a Firewall for securing the 
local network from unwanted and possibly harmful traffic. By defining a set 
of rules (IP Filtering) and open ports (NAT), you may selectively block traffic 
and deny access to the local network.
IP Filtering controls IP traffic traveling through an interface by selectively 
passing or discarding IP packets based on criteria expressed in the form of a 
“filter.” A filter is simply a set of rules that determine whether a packet 
should be passed or discarded as it crosses an interface. An interface is any