Multi-Tech Systems S000573A manual Setting up firewalls, Defining firewall rules

Page 22

Setting up firewalls

Defining firewall rules

The router's firewall enforces a set of rules that determine how incoming and outgoing packets are handled. By default, all outbound traffic originating from the LAN is allowed to pass through the firewall, and all inbound traffic originating from external networks is dropped. This effectively creates a protective barrier between the LAN and all other networks.

Adding forwarding rules

For a device within the LAN to be visible from the internet or from an outside network, create a forwarding rule to allow incoming packets to reach the device.

1.In the Port Forwarding group, click Add Rule.

2.Enter a name and description. Click Next.

3.In the IP Forwarding DNAT pane, enter the following:

ƒIn the External WAN Ports field, type the port(s) to be forwarded. Common ports are listed in the field's attached drop‐down list and are exposed once you enter a character. Type ANY to forward all ports.

ƒIn the Destination LAN IP field, type the IP address of the device packets will be forwarded to. The attached drop‐down list contains DHCP leased and Saved Network addresses.

ƒIn the Destination LAN Ports field, type the port to which packets are translated. If there is a range of ports, the ending port is automatically set. The Destination LAN ending port is based on the Destination LAN starting port and the range provided in the External WAN Port(s) field.

ƒFrom the Protocol drop‐down list, select the protocol of the messages that can be forwarded.

ƒA default filter allowing forwarded packets through the firewall is automatically created. If desired you can use the Advanced Setting mode of the Port Forwarding wizard to further restrict packets based on source address and source ports. In most cases this is not necessary.

4.Click Finish.

Adding Outbound Traffic Rules

To prevent a device within the LAN from communicating with a device in an external network, a rule has to be established in the firewall to drop packets destined to the external device.

1.Click Add Rule in the Outbound Traffic section.

2.Enter a name and description. Click Next.

3.In the Destination IP field, type the IP address of the device or network packets are being sent to. Type ANY if the destination address does not matter.

4.In the Destination Mask field, type the network mask of the destination network.

5.In the Destination Port field, type the port packets are destined for. Common destination ports are listed in the Destination Port field's attached drop down list. Type ANY if the destination port does not matter.

6.In the Source IP field, type the IP address of the device or network that the traffic originates from. Type ANY if the source address does not matter.

7.In the Source Mask field, type a network mask for the origin of the traffic.

Using the Router’s Web Interface

22

Page 21 Page 23
Image 22
Page 21 Page 23
Contents MultiConnect rCell Router Online Support Portal https//support.multitech.com Table of Contents Using the Router’s Web Interface Using the Router’s Web Interface Welcome Getting startedSetting up your device Using the Router’s Web Interface Configuring IP address and DNS information for LANs Configuring miscellaneous features for your deviceFrom Setup, select IP Configuration Entering authentication information Configuring Dynamic Domain Naming System DdnsForcing a Ddns server update Configuring the Dhcp server From Setup, select Dhcp ConfigurationConfiguring GPS Assigning fixed addressesSending GPS information to a remote server Configuring the serial port Configuring the serial portSetting the date and time Setting the devices date and timeConfiguring networks and services Configuring Sntp to update date and timeEditing or deleting an existing network Setting up wireless features Setting up Wi‐Fi access pointsSetting security options Setting up Wi‐Fi client Setting up bluetoothƒ Always Connected Using the Router’s Web Interface Adding forwarding rules Setting up firewallsDefining firewall rules Adding Outbound Traffic RulesSetting up static routes Advanced SettingsPPP configuration Setting up cellular featuresConfiguring Point‐to‐Point PPP Configuring PPP Setting up authentication Configuring PPP Setting up the modemConfiguring PPP Configuring keepalive checks Configuring Modem AT Commands Setting up wake up on callConfiguring wakeup‐on‐call Example of Useful Hspa AT CommandsWakeup‐on‐Call Configuration AuthenticationModem Configuration PPP GeneralCaller ID Configuration SubmitSetting up Wake up on call Setting up PPPSetting up SMS Using Telnet to communicate with the cellular radio Setting up Caller AcknowledgementSetting up Generic Routing Encapsulation GRE tunnels Defining tunnels to your deviceDefining Virtual Private Networks VPNs Setting up the Remote Server Administering devicesConfiguring how routers access the Internet Managing Your Device from Remote ServerCustomizing the user interface Defining When the Device Connects to Remote ServerDefining When Device Gets or Sends Updates Customizing support informationUpgrading firmware Specifying Device SettingsClick Start Upgrade Before you beginSaving and restoring settings Automatically rebooting the device Setting up the routers debug optionsConfiguring Syslog Viewing device statistics Viewing services running on routersChecking the status of devices From Status, select Statistics
Top Page Image Contents