NetComm NB712 manual Basic Firewall Security

Page 48

8.8 Firewall

A ﬁrewall is a set of related programs that protect the resources of a private network from other networks. It prevents unauthorised users from accessing private data and resources accidentally.

Basic Firewall Security

This level only enables the NAT ﬁrewall and the remote management security. The NAT ﬁrewall will take effect if the NAT function is enabled. The default remote management security is to block any WAN side connection to the device. Non-empty legal IP pool in ADMIN will block all remote management connection except those IPs speciﬁed in the pool.

Press Finish to ﬁnish setting up the ﬁrewall The screen will display the parameters, which will be written to EPROM. Check the parameters.

Press restart to restart the router or press continue to setup another function.

48	NB712 / NB714 User Guide
	YML829 Rev1

Image 48

Contents Page Contents NB714 User Guide Features Package ContentsIntroduction Speciﬁcation RoutingBridging SecurityIndicators ATM QoSAAL5 Encapsulation WAN InterfaceApplication Physical/ElectricalMemory Product InformationFirewall Types of Firewall Packet FilteringThere are three types of ﬁrewall Denial of Service Attack Circuit GatewayApplication Gateway Ping of death SYN FloodIcmp Flood UDP FloodVlan Virtual Local Area Network Frame SpeciﬁcationApplications VID uniquely identiﬁes the Vlan to which the frame belongsGetting to know the router Front PanelLED status Rear Panel LAN 1,2,3,4Connecting your G.SHDSL Modem Router Check the Terminal Access ProgramDetermine Connection Setting Check the Ethernet Adapter in PCBridge EoA Route EoA IPoA PPPoA Install the Shdsl Router PPPoECross-over Ethernet cables can be used Port router with network topologyConﬁguration via Web Browser Router, which will lose any previous conﬁguration Basic Setup System error or disconnectionClick Basic for basic installation Bridge Mode LAN ParametersEnter Host Name WAN1 Parameters Enter VPI Enter VCI Click LLC Click NextRouting Mode Click Next to setup WAN1 parameters Dhcp ClientLAN IP Type Dhcp Server IP typeIP Address Subnet MaskTrigger Dhcp Service DNS ServerDhcp relay RelayPPPoE or PPPoA AAL5 EncapProtocol For more information, refer to the section on NAT/DMZPassword Password ConﬁrmUsername Idle TimeEprom IPoA or EoA GatewayEprom Advanced Setup Annex Type Link TypeData rate Data RateShdsl SNR margin Margin range is from 0 toMargin, the better the line connection Reconnect for better line connectionWAN QoS Quality of Service UBR Unspeciﬁed Bit RateCBR Constant Bit Rate PCR Peak Cell Rate in kbpsBridge Eprom Vlan Pvid PacketsRIP Mode RouteAuto RIP Summary Press ModifyAuthentication required RIP VersionPoison Reverse NAT/DMZ Multi-DMZ Multi-NATVirtual Start IP Address Count Global Start IP AddressVirtual Server Firewall Basic Firewall SecurityAutomatic Firewall Security Advanced Firewall Security Click Advanced Firewall Security and then press FinishSYN Attack Connections and will be unresponsiveAddresses originating from your network Ping of death attack attempts to crash your system byDirection DescriptionSrc. IP Address Dest. IP AddressFiltering Rule for Smtp connection Filtering rule will be conﬁgured as followUpdate Filtering Rule Filtering ResultWhen the rule is ordered as ABC Rule Order10.0.0.0 172.16.6.0 Permit 10.1.99.0 172.16.0.0 Deny Any IP QoS NB714 User Guide Administration Security NB712 / NB714 User Guide Snmp MIBSnmp status CommunityVersion Community Time Sync Click on Time SyncSntp service Time ServerTime Zone Utility System Info Restore Conﬁguration Backup Conﬁguration10.2 Conﬁg Tool Lose all the conﬁgured parametersUpgrade Logout To logout the router, press logoutRestart Status You can monitor the followingLAN-to-LAN connection with bridge Mode CO sideLAN Parameters WAN1 Parameters Enter IP 192.168.1.1 Enter Subnet MaskEnter Gateway 192.168.1.1 Enter Host Name Enter VPI Enter VCI EncapCPE Side Host Name Enter SohoVCI32 EncapLLC LAN to LAN Connection with Routing Mode Dhcp ServiceClick Route and CO Side then press Next IP Address 192.168.20.1 Subnet Mask 255.255.255.0 Host NameClick Next to setup the IP parameters WAN ParametersClick Route and CPE Side then press Next IP Address 192.168.10.1 Subnet Mask 255.255.255.0 Host Name192.168.30.2 Useradmin Password Serial ConsoleTelnet Baudrate 9600 Data Bits Parity Check Stop Bits Flow-controlOperation Interface Window structure Menu Driven Interface Commands To choose another parametersCtrl + C To quit the conﬁguring item Ctrl + Q For help Menu Tree 14.7 Conﬁguration Ping Packet internet groper command Admin Done via utility commandUtility Exit Quit systemStatus Show SystemConﬁg ScriptReboot AdministrationWrite PingUser Proﬁle Snmp Edit Community Entry List ShowSupervisor Password and ID Move the cursor to service and press enter SntpMove the cursor to sntp and press enter Move the cursor to timeserver1 and press enterMove the cursor to list and review the setting Setup UtilityExit ModeShdsl 14.16.3 WAN Bridge After enter add menu, the screen will prompt as followVlan Move the cursor to vlan and press enter14.16.6 802.11Q Vlan Follow the following steps to conﬁgure 802.11q VlanFor each VLAN, Vlan ID is a unique number among 1~4095 Generic command can setup RIP mode and auto summery mode You can review the list of RIP parameters via list commandRoute Screen will display the following14.16.8 LAN IP share14.16.10 NAT You can conﬁgure NAT parameters in nat menuMapping 14.16.11 PAT After key in enter, the screen will prompt as belowYou can enable the demilitarized zone via active command ﬁrewall security level can conﬁgure via level command14.16.12 DMZ FirewallActive DoS Protection IPQoS You can view the Dhcp conﬁguration via list command DhcpDefault DNS proxyHost name Appendix a Cable Information RJ-45 Network Ports10Mbps 100MbpsStraight and crossover cable conﬁguration Straight-Through CablingCross-Over Cabling Shdsl Line Connector Console Cable No connectionRxD O TxDAppendix B Registration and Warranty Information Contact InformationProduct Warranty