NetComm NB712 manual Update Filtering Rule, Filtering Result

Page 54

Update Filtering Rule

Index	Protocol	Direction	Action	Source	Destination	Source Port	Dest. Port

1	TCP	Inbound	Permit	External	Internal	>1023	25

2	TCP	Outbound	Permit	Internal	External	25	>1023

3	TCP	Outbound	Permit	Internal	External	>1023	25

4	TCP	Inbound	Permit	External	Internal	25	>1023

5	Any	Either	Deny	Any	Any	Any	Any

Filtering Result

Index	Protocol	Direction	Action	Source	Destination	Source Port	Dest. Port

1	TCP	Inbound	Permit(A)	192.168.3.4	171.16.1.1	1234	25

2	TCP	Outbound	Permit(B)	171.16.1.1	192.168.3.4	25	1234

3	TCP	Outbound	Permit(C)	171.16.1.1	192.168.3.4	1357	25

4	TCP	Inbound	Permit(D)	192.168.3.4	171.16.1.1	25	1357

5	TCP	Inbound	Deny(E)	10.1.2.3	171.16.3.4	5150	6000

6	TCP	Outbound	Deny(E)	171.16.3.4	10.1.2.3	6000	5150

54	NB712 / NB714 User Guide
	YML829 Rev1

Image 54

Contents Page Contents NB714 User Guide Features Package ContentsIntroduction Bridging SpeciﬁcationRouting SecurityAAL5 Encapsulation IndicatorsATM QoS WAN InterfaceMemory ApplicationPhysical/Electrical Product InformationFirewall Types of Firewall Packet FilteringThere are three types of ﬁrewall Denial of Service Attack Circuit GatewayApplication Gateway Icmp Flood Ping of deathSYN Flood UDP FloodVlan Virtual Local Area Network Frame SpeciﬁcationApplications VID uniquely identiﬁes the Vlan to which the frame belongsGetting to know the router Front PanelLED status Rear Panel LAN 1,2,3,4Determine Connection Setting Connecting your G.SHDSL Modem RouterCheck the Terminal Access Program Check the Ethernet Adapter in PCBridge EoA Route EoA IPoA PPPoA Cross-over Ethernet cables can be used Install the Shdsl RouterPPPoE Port router with network topologyConﬁguration via Web Browser Router, which will lose any previous conﬁguration Basic Setup System error or disconnectionClick Basic for basic installation Bridge Mode LAN ParametersEnter Host Name WAN1 Parameters Enter VPI Enter VCI Click LLC Click NextRouting Mode Click Next to setup WAN1 parameters Dhcp ClientLAN IP Type IP Address Dhcp ServerIP type Subnet MaskTrigger Dhcp Service DNS ServerDhcp relay RelayProtocol PPPoE or PPPoAAAL5 Encap For more information, refer to the section on NAT/DMZUsername PasswordPassword Conﬁrm Idle TimeEprom IPoA or EoA GatewayEprom Advanced Setup Data rate Annex TypeLink Type Data RateMargin, the better the line connection Shdsl SNR marginMargin range is from 0 to Reconnect for better line connectionWAN CBR Constant Bit Rate QoS Quality of ServiceUBR Unspeciﬁed Bit Rate PCR Peak Cell Rate in kbpsBridge Eprom Vlan Pvid PacketsAuto RIP Summary RIP ModeRoute Press ModifyAuthentication required RIP VersionPoison Reverse NAT/DMZ Virtual Start IP Address Multi-DMZMulti-NAT Count Global Start IP AddressVirtual Server Firewall Basic Firewall SecurityAutomatic Firewall Security SYN Attack Advanced Firewall SecurityClick Advanced Firewall Security and then press Finish Connections and will be unresponsiveAddresses originating from your network Ping of death attack attempts to crash your system bySrc. IP Address DirectionDescription Dest. IP AddressFiltering Rule for Smtp connection Filtering rule will be conﬁgured as followUpdate Filtering Rule Filtering ResultWhen the rule is ordered as ABC Rule Order10.0.0.0 172.16.6.0 Permit 10.1.99.0 172.16.0.0 Deny Any IP QoS NB714 User Guide Administration Security NB712 / NB714 User Guide Snmp MIBSnmp status CommunityVersion Community Time Sync Click on Time SyncSntp service Time ServerTime Zone Utility System Info 10.2 Conﬁg Tool Restore ConﬁgurationBackup Conﬁguration Lose all the conﬁgured parametersUpgrade Logout To logout the router, press logoutRestart Status You can monitor the followingLAN-to-LAN connection with bridge Mode CO sideLAN Parameters Enter Gateway 192.168.1.1 Enter Host Name WAN1 ParametersEnter IP 192.168.1.1 Enter Subnet Mask Enter VPI Enter VCI EncapCPE Side Host Name Enter SohoVCI32 EncapLLC Click Route and CO Side then press Next LAN to LAN Connection with Routing ModeDhcp Service IP Address 192.168.20.1 Subnet Mask 255.255.255.0 Host NameClick Next to setup the IP parameters WAN ParametersClick Route and CPE Side then press Next IP Address 192.168.10.1 Subnet Mask 255.255.255.0 Host Name192.168.30.2 Telnet Useradmin PasswordSerial Console Baudrate 9600 Data Bits Parity Check Stop Bits Flow-controlOperation Interface Window structure Menu Driven Interface Commands To choose another parametersCtrl + C To quit the conﬁguring item Ctrl + Q For help Menu Tree 14.7 Conﬁguration Utility Ping Packet internet groper command AdminDone via utility command Exit Quit systemStatus Conﬁg ShowSystem ScriptWrite RebootAdministration PingUser Proﬁle Snmp Edit Community Entry List ShowSupervisor Password and ID Move the cursor to sntp and press enter Move the cursor to service and press enterSntp Move the cursor to timeserver1 and press enterMove the cursor to list and review the setting Exit SetupUtility ModeShdsl 14.16.3 WAN Bridge After enter add menu, the screen will prompt as followVlan Move the cursor to vlan and press enter14.16.6 802.11Q Vlan Follow the following steps to conﬁgure 802.11q VlanFor each VLAN, Vlan ID is a unique number among 1~4095 Route Generic command can setup RIP mode and auto summery modeYou can review the list of RIP parameters via list command Screen will display the following14.16.8 LAN IP share14.16.10 NAT You can conﬁgure NAT parameters in nat menuMapping 14.16.11 PAT After key in enter, the screen will prompt as below14.16.12 DMZ You can enable the demilitarized zone via active commandﬁrewall security level can conﬁgure via level command FirewallActive DoS Protection IPQoS You can view the Dhcp conﬁguration via list command DhcpDefault DNS proxyHost name 10Mbps Appendix a Cable InformationRJ-45 Network Ports 100MbpsStraight and crossover cable conﬁguration Straight-Through CablingCross-Over Cabling RxD O Shdsl Line Connector Console CableNo connection TxDAppendix B Registration and Warranty Information Contact InformationProduct Warranty