Network Interfaces - Demand-dial - Set IP Demand-dial Filters

Applies To: Windows Server 2008

Dialog box element Description

Only for the following traffic

Specifies that a demand-dial connection is initiated only when IP packets forwarded over this demand-dial interface match one of the filters listed. When the demand-dial interface is in a disconnected state, all packets forwarded by using the demand-dial interface are compared to the filters listed. If a packet matches a filter, the demand-dial connection is initiated and the packet is forwarded across the demand-dial connection. If the packet does not match a filter, the demand-dial connection is not initiated and the packet is discarded.

This option applies to all the filters that you have added. You cannot change this option for individual filters.

You can only configure this option after you have added at least one filter.

For all traffic except

Specifies that a demand-dial connection is not initiated for IP packets forwarded over this demand-dial interface that match one of the filters listed. When the demand-dial interface is in a disconnected state, all packets forwarded by using the demand-dial interface are compared to the filters listed. If the packet matches a filter, the demand-dial connection is not initiated and the packet is discarded. If a packet does not match a filter, the demand-dial connection is initiated and the packet is forwarded across the demand-dial connection.

This option applies to all the filters that you have added. You cannot change this option for individual filters.

You can only configure this option after you have added at least one filter.

New

Click to add a filter. You can set filters based on where the packet is coming from (the source), where the packet is going (the destination), or what protocol the packet is using. You can set all three of these values for a filter or set any one or combination of the three, depending on the level of control that you want.

Edit

Click to modify the settings for a selected filter.

Delete

Removes a selected filter from the list.

Add IP Filter

Dialog box element Description

Source network

Specifies whether the filter checks the network from which the packet is coming. After selecting this check box, you must specify a network IP address and subnet mask.

Destination network

Specifies whether the filter checks the network to which the packet is going. After selecting this check box, you must specify a network address and subnet mask.

IP address

The IP address of the network from which the packet was sent or to which the packet is going. You must also specify a subnet mask.

Subnet mask

The subnet mask that corresponds to the network IP address.

Protocol

Lists the available protocol types that you can base a filter on. The default is Any protocol. If you select Other, you must type a protocol identifier in Protocol number.

Source port

For TCP, TCP (established), and UDP protocols, provides a space for you to type the port number specified by the source to be used by the filter. Some applications use well-known ports to send and receive packets. You can set a filter for one of these ports if you know what numbers the application uses for the protocol specified in Protocol. For example, you can try to block FTP traffic or allow only PPTP traffic.

Destination port

For TCP, TCP (established), and UDP protocols, type the port number used by the destination for the packet.

ICMP type

The ICMP type.

ICMP code

The ICMP code.

Protocol number

The IP protocol number.