Billion Electric Company 7402VL Example Predefined Port Filters Rules, Application, Protocol

Page 60
Example: Predefined Port Filters Rules

VoIP/(802.11g) ADSL2+ Router

Example: Predefined Port Filters Rules

The predefined port filter rules for High, Medium and Low security levels are listed. See Table 1.

(Note: Firewall – All Blocked/User-defined, you must define and create the port filter rules yourself. No predefined rule is set)

 

 

 

Table 1: Predefined Port Filter

 

 

 

Application

Protocol

Port Number

Firewall - High

Firewall - Medium

Firewall – Low

Start

End

Inbound
Outbound
Inbound Outbound

Inbound

Outbound

 

 

HTTP(80)

TCP(6)

80

80

NO

YES

NO

YES

NO

YES

DNS (53)

UDP(17)

53

53

NO

YES

NO

YES

YES

YES

DNS (53)

TCP(6)

53

53

NO

YES

NO

YES

YES

YES

FTP(21)

TCP(6)

21

21

NO

NO

NO

YES

NO

YES

Telnet(23)

TCP(6)

23

23

NO

NO

NO

YES

NO

YES

SMTP(25)

TCP(6)

25

25

NO

YES

NO

YES

NO

YES

POP3(110)

TCP(6)

110

110

NO

YES

NO

YES

NO

YES

NEWS(119)

TCP(6)

119

119

NO

NO

NO

YES

NO

YES

RealAudio

UDP(17)

7070

7070

NO

NO

YES

YES

YES

YES

(7070)

 

 

 

 

 

 

 

 

 

PING

ICMP(1)

N/A

N/A

NO

YES

NO

YES

NO

YES

H.323(1720)

TCP(6)

1720

1720

NO

NO

NO

YES

YES

YES

T.120(1503)

TCP(6)

1503

1503

NO

NO

NO

YES

YES

YES

SSH(22)

TCP(6)

22

22

NO

NO

NO

YES

YES

YES

NTP(123)

UDP(17)

123

123

NO

YES

NO

YES

NO

YES

HTTPS(443)

TCP(6)

443

443

NO

NO

NO

YES

NO

YES

ICQ (5190)

TCP(6)

5190

5190

NO

NO

NO

NO

YES

YES

Inbound: Internet to LAN

 

 

 

 

 

 

 

Outbound: LAN to Internet.

 

 

 

 

 

 

 

59

Chapter 4: Configuration

Image 60
Contents Version Release BiPAC 7402VL/VGL/VGPVoIP/802.11g ADSL2+ Router User’s ManualCHAPTER 2 INSTALLING THE ROUTER CHAPTER 3 BASIC INSTALLATIONCHAPTER 4 CONFIGURATION CHAPTER 1 INTRODUCTIONCHAPTER 5 TROUBLESHOOTING APPENDIX A PRODUCT SUPPORT AND CONTACT INFORMATIONFirewall and Access Control QoS Quality of ServiceFeatures Chapter 1 IntroductionIntroduction to your Router ModelsQuick Installation Wizard Quality of Service QoSMulti-Protocol to Establish A Connection Universal Plug and Play UPnP and UPnP NAT TraversalDynamic Host Configuration Protocol DHCP client and server Firmware UpgradeableRich Packet Filtering Static and RIP1/2 RoutingChapter 2 Installing the Router Important note for using this routerPackage Contents Do not use the same power source for this router as other equipmentThe Front LEDs MeaningRJ-45 connector RJ-11 connectorThe Rear Ports 7402VL7402VGL 7402VGPPort 1 Power Switch 2 PWR 3 RESET LAN 4 1X - 3X RJ-45 connector 5 CONSOLE Phone 6 1X 2X RJ-11 connector 7 ADSL8 Antenna 7402VGL/VGP only MeaningCabling Chapter 3 Basic Installation Chapter 3 Basic InstallationConnecting your router 7402VL/VGL7402VGP Configuring PCs in Windows in Window XP Figure 3.3 TCP / IP Figure 3.4 IP Address & DNS Configuration2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties. See FigureConfiguring PCs in Windows Figure 3.8 IP Address & DNS Configuration2. Double-click Local Area “LAN” Connection. See Figure Figure 3.5 LAN Area ConnectionConfiguring PC in Windows 95/98/ME 5. Then select the DNS Configuration tab. See FigureFigure 3.11 DNS Configuration 3. Click Properties Figure 3.9 TCP / IPConfiguring PC in Windows NT4.0 2. Select TCP/IP Protocol and click Properties. See FigureFigure 3.12 TCP / IP Figure 3.13 IP AddressFactory Default Settings Web Interface Username and PasswordLAN Device IP Settings ISP setting in WAN siteInformation from your ISP PPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoAConfiguring with your Web Browser Figure 3.14 User name & Password Prompt WidonwChapter 4 Configuration Quick Start ConfigurationSave Config to FLASH Wireless Association Table 7402VGL/VGP only StatusARP Table Routing Table Routing TableRIP Routing Table DHCP Table Leased TableExpired Table Permanent TableEmail Status VoIP StatusEvent Log Error Log NAT SessionsUPnP Portmap Quick Start Chapter 4 Configuration Configuration LAN Local Area NetworkEthernet Ethernet Client Filter Default setting is set to Disable Ethernet Client FilterActive PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Enable ParametersWireless Distribution System WDS WPA Pre-Shared Key Wireless Security 7402VGL/VGP onlyPage Wireless Client MAC Address Filter 7402VGL/VGP only →Associated Wireless ClientsAssociate Wireless Client displays a list of individual wireless device’s MAC Address that currently connects to the router DHCP Server WAN Wide Area Network RFC 1483 Routed Connections RFC 1483 Bridged Connections PppoePPPoA Routed Connections Connection Advanced Options PPPoAGive DNSto DHCP Server Similar to the above, but gives the DNS server address to the DHCP server IPoA Routed Connections PPPoE Connections Advanced Options PPPoE Chapter 4Configuration VoIP/802.11g ADSL2+ RouterPage ADSL System Time ZoneRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Example Predefined Port Filters Rules Table 1 Predefined Port FilterApplication ProtocolPacket Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Click Delete Click Add TCP/UDP FilterConfiguring Packet Filter 3. Click Add TCP/UDP Filter5. The new port filter rule for HTTP is shown below Intrusion Detection Block DurationTable 2 Hacker attack types recognized by the IDS Intrusion NameDetect Parameter Ascend KillURL Filter Domains Filtering This function checks the domain name only, not the IP address, in URLs accessed against your list of domains to block or allow. If it is matched, the URL request will be sent Trusted or dropped Forbidden. For this function to be activated, both check-boxes must be checked. The checking procedure is Restrict URL Features This function enhances the restriction to your URL rules Firewall Log Log information can be seen in the Status - Event Log after enablingVoIP Voice over Internet Protocol PSTN Dial PlanAuthentication Username Same as Phone Number Please refer to the description of “Setting for Phone Port 1”Setting for Phone Port WizardGeneral Configuration SIP Device ParametersRegistrar Port from VoIP device Phone Configuration Login Account ConfigurationAuthentication Username Same as Phone Number Codec Preference Speed DialFor examples Action For ExampleDial without Prefix Dial only the Number of Digits and not the prefix Power down Internet Service failSIP service is not available automaticallyOption DescriptionFlash-hook 74xnumber#QoS Quality of Service Prioritization HighWireless ADSL Router Table 4 DSCP Mapping TableStandard DSCP DSCP Mapping TableOutbound IP Throttling LAN to WAN Inbound IP Throttling WAN to LAN Example QoS for your Network VoIP Normal PCs RestrictedConnection Diagram Information and SettingsMission-critical application Voice applicationRestricted Application Advanced setting by using IP throttling Virtual Server “Port Forwarding” Add Virtual Server Application HTTPSever Time Schedule Always On Protocol tcp IP AddressEdit DMZ Host Edit One-to-One NAT Network Address Translation Global IP AddressSelect the Apply button to apply your changes Example List of some well-known and registered port numbers Table 5 Well-known and registered PortsPort Number ProtocolTime Schedule Edit a Time Slot Delete a Time SlotClick Edit Configuration of Time ScheduleAdvanced Static RouteDynamic DNS Check Email Device Management Embedded Web ServerSNMP Version SNMPv2c and SNMPv3 Universal Plug and Play UPnPSNMP V1 and SNMPFrom RFC 1213 MIB-II From RFC1650 EtherLike-MIBFrom RFC 1493 Bridge MIB From RFC 1471 PPP/LCP MIBFrom RFC 1473 PPP/IP MIB From RFC 1474 PPP/Bridge MIBFrom RFC1573 IfMIB From RFC1695 atmMIBIGMP Save Configuration to Flash Logout Chapter 5 Troubleshooting Problems starting up the routerProblems with the WAN Interface ProblemProblems with the LAN Interface Can’t ping any PCs on the LANAPPENDIX A Product Support and Contact Information Contact Billion AUSTRALIAWORLDWIDE