Billion Electric Company 6404VGP, 6404VP user manual Packet Filter

Page 47

Packet Filter

VoIP/(802.11g) Broadband Firewall Router

Packet Filter

This function is only available when the Firewall is enabled and one of these four security levels is chosen (All blocked, High, Medium and Low). The predefined port filter rules in the Packet Filter must modify accordingly to the level of Firewall, which is selected. See Table1: Predefined Port Filter for more detailed information.

46

Chapter 4: Configuration

Image 47

Contents Version Release 5.08a BiPAC 6404VP / 6404VGPVoIP/802.11g Broadband Firewall Router User’s ManualTable of Contents VoIP Voice over Internet Protocol Firewall and Access ControlQoS Quality of Service CHAPTER 5 TROUBLESHOOTING802.11g Wireless AP with WPA Support FeaturesChapter 1 Introduction Introduction to your RouterSOHO Firewall Security with DoS and SPI Quality of Service QoSDynamic Host Configuration Protocol DHCP client and server Network Address Translation NATRich Management Interfaces Firmware UpgradeableDo not use the same power source for this router as other equipment Chapter 2 Installing the RouterImportant note for using this router Package ContentsRJ-11 connector The Front LEDsRJ-45 connector Wireless Router OnlyPhone 1X The Rear PortsPort Power Switch PWR RESET WAN LANCabling Chapter 3 Basic Installation Chapter 3 Basic InstallationATA Mode Broadband Router Mode Connecting Your Router4. Select Internet Protocol TCP/IP and click Properties. See Figure Configuring PCs in Windows in Window XP2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties See Figure Configuring PCs in Windows2. Double-click Local Area “LAN” Connection. See Figure 3. Click Properties Configuring PC in Windows 95/98/ME5. Then select the DNS Configuration tab. See Figure 2. Select TCP/IP Protocol and click Properties. See Figure Configuring PC in Windows NT4.0ISP setting in WAN site Factory Default SettingsWeb Interface Username and Password Device LAN IP settingsPPPoE Information from your ISPDHCP Obtain an IP Address Automatically Static IP Fixed IP Address Configuring with your Web Browser Status Chapter 4 ConfigurationATA / Router Mode Configuration Save Config to FLASHRouting Table Wireless Association Table Wireless Router OnlyStatus ARP TableExpired Table DHCP TableRIP Routing Table Leased TableVoIP Status Email StatusEvent Log Error LogNAT Sessions DiagnosticUPnP Portmap ATA / Router Mode VoIP Router FunctionsLAN NAT DHCP Server Device IP WAN System Firewall QoS Virtual Server Time Schedule AdvancedPrimary IP Address ConfigurationLAN Local Area Network EthernetIP Alias Ethernet Client Filter → Active PC in LANEthernet Client Filter Default setting is set to Disable Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Parameters Wireless Wireless Router OnlyWireless Distribution System WDS WPA-PSK TKIP / WPA-PSK AES Pre-Shared Key Wireless Security Wireless Router OnlyPage →Associated Wireless Clients Wireless Client / MAC Address Filter Wireless Router OnlyWireless Client Filter Default setting is set to Disable DHCP Server Time Zone SystemRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Protocol Example Predefined Port Filters RulesTable 1 Predefined Port Filter ApplicationUDP17 Packet Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Configuring Packet Filter Click DeleteClick Add TCP/UDP Filter Example5. The new port filter rule for HTTP is shown below Block Duration Intrusion DetectionAscend Kill Table 2 Hacker attack types recognized by the IDSIntrusion Name Detect ParameterAlways On URL Filterdropped IM / P2P Blocking Instant Message Blocking The default is set to DisabledPeer to Peer Blocking The default is set to Disabled Log information can be seen in the Status - Event Log after enabling Firewall LogVoIP Broadband Firewall Router VoIP Voice over Internet ProtocolVoice QoS Setting for Phone PortWizard NOTE User defined profiles are limited to 8 only Authentication Username Same as Phone NumberUser-defined Profiles SIP Device Parameters Advanced - Parameters How to register to SIP ServerNote ONHOOK means hung up Advanced - PSTN Environment AdjustmentPhone Port Login Account ConfigurationSpeed Dial For examplesVolume Control Codec PreferencePSTN Dial Plan 1 Dial with Prefix PSTN Dial Plan Examples3 Dial at Timeout 4 Dial at Timeout no PrefixVoIP/802.11g Broadband Firewall Router VoIP Dial Plan Prefix Processing Dial Plan Rules List## xx Dial-Plan ExamplesDescription Special Dial Plan ExamplesLocalcheap.com is the default VoIP provider I set on phone port 1. When I call out any number start with 1 or 2 or 3 and plus rest of the phone number for local call, 03 is always prepended in front of these number. If 23295 are dialed, 03-2-32935 is the actual phone number called out via localcheap.com provider Mobilecheap.com is the default VoIP provider I set on phone port 2. When I call out 123-39-45678 for a mobile call, 123 is replaced with 09. Therefore, 09-39-45678 is the actual phone number called out via Mobilecheap.com provider Tone Parameters Ring & ToneCountry Specific Ring & Tone Ring ParametersFlash-hook Special Dial CodesOption High QoS Quality of ServiceClick Clear PrioritizationStandard DSCP Table 4 DSCP Mapping TableDSCP Mapping Table Wireless Router DeviceOutbound IP Throttling LAN to WAN Inbound IP Throttling WAN to LAN Example QoS for your Network VoIP Normal PCs Restricted PCConnection Diagram Information and SettingsRestricted Application Advanced setting by using IP throttlingMission-critical application Voice applicationVoIP/802.11g Broadband Firewall Router Virtual Server “Port Forwarding” Internal IP Add Virtual ServerIP Address ExampleEdit DMZ Host Global IP Address Edit One-to-One NAT Network Address TranslationSelect the Apply button to apply your changes Protocol Table 5 Well-known and registered PortsExample List of some well-known and registered port numbers Port NumberTime Schedule Delete a Time Slot Click EditConfiguration of Time Schedule Edit a Time SlotManagement and IGMP Static Route AdvancedDynamic DNS Check Email Embedded Web Server 2 Management IP accounts Device ManagementSNMP Version SNMPv2c and SNMPv3 Universal Plug and Play UPnPSNMP V1 and SNMPFrom RFC 1472 PPP/Security MIB From RFC1650 EtherLike-MIBFrom RFC 1493 Bridge MIB From RFC 1471 PPP/LCP MIBIGMP Save Configuration to FlashLogout Problem Chapter 5 TroubleshootingProblems starting up the router Problems with the LAN InterfaceContact Billion WORLDWIDE APPENDIX A Product Support and Contact Information