Huawei Aolynk DR814, Aolynk DR811 user manual Security Policy

User Manual
Aolynk DR811/DR814 ADSL2+Broadband Router	4 Web-based Management

Where item0 is the virtual interface added at the last step.

•

•

Then, enter the Port Filters page of external-dmz (refer to 4.9 Security Policy), configure to ensure that users under the external interface can access the Internet services the DMZ zone specifies such as http, ftp, telnet, and so on. Meanwhile, configure port filtering policies for external-internal to disable users under the external interface from accessing host services under the internal interface.

Finally, configure to allow DMZ hosts to access DMZ zone. Make sure the IP address of the DMZ host is in the same segment as that of the above configured virtual interface (for example, configure the IP address as 172.16.1.100, the mask as 255.255.0.0), enable the corresponding Internet service, and then connect the host to the LAN port of the router, and configure the corresponding virtual server. As such, DMZ is completely and securely configured.

4.9 Security Policy

A policy is the collective term for the rules that apply to incoming and outgoing traffic between two interface types. Firewall must be enabled before you can create policies.

Click Security in the Main menu and choose the Policy tab in the Main Frame to open the Security Policy Configuration page.

Figure 4-20Security policy configuration

This page allows you to:

•Edit a security policy present in the Current Security Policies list.

To edit an existing security policy, click the label to open the web page Port

Filter to configure the port filter rules, and/or click the label to open the web page Host Validators to configure the host validator rules.

30