
A route permission table could look like this:
D |
host1 |
host2 |
serviceX |
|
D |
host3 |
|
|
|
P |
* |
* |
3200.3298 |
|
P |
155.56.*.* |
155.56.*.* |
|
|
P |
155.57.1011xxxx.* |
|
|
|
P |
host4 |
host5 |
* |
pass |
S |
host6 |
|
|
|
P |
host7 |
host8 |
telnet |
|
P*,0 |
* |
* |
|
gui |
Do not allow routes from host1 to host2, service serviceX
Do not allow routes starting from host3
Allow all routes to server processes that use a service in area 3200 to 3298
Allow all routes within subnetwork 155.56.0.0/16
Allow all routes starting from subnetwork 155.57.1011xxxx (the last byte is written as a binary number; each x stands for 0 or 1).
Allow all routes from host4 to host5 if password pass is correct
All routes from host6, but only SAP protocol
Native protocol routes (TCP/IP) from host7 to host8 for the non-SAP service telnet on telnet
All connections to non-SAProuters (no more SAProuters allowed on this route) if password gui is correct