SMC Networks SMCWHSG44-G manual Vlan, Firewall, To set a rule for packet filtering

To set a rule for packet filtering:

1.Specify the protocol type, source IP address, source IP mask, destination IP address, destination IP mask, and destination port for the rule. Then specify in the Action setting how to deal with a packet that meets the rule.

2.Select the corresponding Enabled check box.

NOTE: Set the rules with great care since incorrect rules would make the Router inaccessible. The last resort to restore the Router to service may be resetting its configuration to factory-set values by pressing the reset button on the back of the Router.

2.8.1.2. VLAN

Fig. 101. VALN Settings.

VLAN (Virtual Local Area Network) settings are for traffic isolation. When the Block wireless-to-Ethernet-LAN traffic check box is selected, the Router does not forward packets between the wireless network interface and the Ethernet LAN interface-traffic is allowed only between the Ethernet WAN interface and the wireless network interface.

2.8.1.3. Firewall

Fig. 102. Packet Filters and Firewall Settings.

SPI analyzes incoming and outgoing packets based on a set of criteria for abnormal content. Therefore, SPI can detect hacker attacks, and can sum- marily reject an attack if the packet fits a suspicious profile. To enable SPI, select the Enable Stateful Packet Inspection (SPI) check box.

Some DoS (Denial of Service) attacks are based on sending invalid ICMP request packets to hosts. The Router can be set to not accept any ICMP requests on the Ethernet WAN interface to defend against attacks of this kind. Enable this capability by selecting the Block ICMP PING from Internet check box.

NOTE: SPI can detect hacker attacks, including IP-Spoofing, Zero IP Length, Land, Smurf, Fraggle, Teardrop, Ping of Death, Syn-Flood, and X-Tree.

NOTE: Because some of the Router's CPU resources are spent in checking packets for these security features, you may notice network performance degradation if the security functions are enabled.

79