CNet Technology CNIG904S manual Access Control, To use this feature

Page 46

Chapter 9

9

Access Control

This Chapter explains how to configure and use the Broadband Router's "Ac- cess Control" feature.

Overview

The Access Control feature allows administrators to restrict Internet Access by individual PCs. The process uses "Packet Filtering" to block or discard data packets. By default, no packets are blocked or discarded.

To use this feature:

Set the desired restrictions on the "Everyone" group.

All PCs are in the "Everyone" group unless explicitly moved to another group, using the PC screen.

Generally, access rights are managed by making the "Everyone" group the most re- strictive group. Additional access rights then have to be explicitly granted by assigning a user to a less restrictive group.

However, if you wish to restrict only a small number of users, it may be more conven- ient to reverse this, and make the "Everyone" group the least restrictive group. Only users requiring restrictions need to be assigned to a more restrictive group.

Set the desired restrictions on the other groups ("Group 1", "Group 2", etc ) as needed.

For each PC you wish to move from the "Everyone" group, enter their details on the PCs screen, and assign them to the desired group

You can limit Internet access for ALL PCs without entering ANY PC data. Simply apply the desired restrictions to the "Everyone" group.

It is also possible to define your own packet filters, and use these filters in addition to the pre- defined filters. Defining your own filters is optional.

43

Image 46
Contents Shared Broadband Internet Access User’s GuideTable of Contents Overview General Problems Internet Access Broadband RouterLAN Features Broadband Router FeaturesIntroduction Security Features Internet Access FeaturesConfiguration & Management Advanced Internet FunctionsPackage Contents Top Mounted LEDs Physical DetailsRear Panel Restore Default IP Address and Clear Password DIP SwitchesDIP Switch Setting Description Choose an Installation Site InstallationInstallation Procedure RequirementsConnect Adsl or Cable Modem Power UpCheck the LEDs Overview ConfigurationTo Do this Refer to Connecting to the Broadband Router Configuration ProgramPreparation If you cant connect Navigation & Data InputData LAN Screen LAN ConfigurationLAN Screen IP AddressDNS Domain Name Server Dhcp ServerRouting Table Tip WAN ConfigurationWAN Direct Connection Data WAN Direct ConnectionIP Address ButtonsAccount WAN PPPoEData WAN PPPoE OptionsData WAN StatusWAN Status Direct Connection WAN StatusStatus Data WAN Status PPPoEConnection Log Connection Log Messages Message DescriptionDevice LAN/Device StatusData LAN/Device Status LAN PortStatus TCP/IP Settings PC ConfigurationTo check your PCs TCP/IP Settings Using Dhcp Using Specify an IP AddressDNS Tab Win 95/98 Internet Access Configuration Accessing AOLMacintosh Configuration Chapter Using the Broadband Routers Dhcp ServerUsing another Dhcp Server What Dhcp DoesTo Configure your PCs to use Dhcp Using this Screen Broadband Router ConfigurationRouting Gateway Routing Table DataDestination InterfaceLocal Router Router ConfigurationRouting Example Other Routers on the Local LANFor the Broadband Routers Routing Table For Router As Default RouteFor Router Bs Default Route Entry 1 SegmentWhen prompted for the password, leave the User Name blank PasswordDevice Options Remote Management NAT Network Address TranslationTo connect from a remote PC via the Internet Advanced Internet Advanced Internet ScreenSpecial Applications Screen Using a Special ApplicationSpecial Internet Applications At any time, only one 1 PC can use each Special ApplicationConfiguration Data from Service Provider IP Address seen by Internet Users Virtual ServersRemote PC Types of Virtual ServersType Virtual Server ConfigurationWAN IP Address LAN IP AddressTo Delete a defined Server User Defined Virtual ServersTo Modify Edit a defined Server To List all ServersConnecting to the Virtual Servers DetailsConfiguring the DMZ DMZ ScreenFeature EnableEnable DMZ DataAccess Control To use this featureOperations To Change Access for an Existing GroupSecurity Groups To Define a Security GroupAccess Rights Internet Access for this Group Packet Filter TableTo Delete an Existing PC PCsTo Add a New PC To Change an Existing PCs DetailsFilters Port No TCP PacketsTCP Filters UDP FiltersTroubleshooting General ProblemsInternet Access Specifications Broadband Router