Configuring Packet Filter | Billion Electric Company 7402 manual

Configuring Packet Filter

Billion BIPAC-7402 / 7402W (Wireless) ADSL VPN Firewall Router with 3DES Accelerator

Example: Configuring your firewall to allow for a publicly accessible web server on your LAN

The pre-defined port filter rule for HTTP (TCP port 80) is the same no matter whether the firewall is set to a high, medium or low security level. To setup a web server located on the local network when the firewall is enabled, you have to configure the Port Filters setting for HTTP.

As you can see from the diagram below, when the firewall is enabled with one of the three presets (Low/Medium/High), inbound HTTP access is not allowed.

Configuring Packet Filter

1.Click Packet Filter - you will get the following page:

Click Port Filters

59

Chapter 4: Configuration

Image 65

Billion Electric Company 7402 user manual Configuring Packet Filter, Click Port Filters

Contents

Wireless ADSL VPN Firewall Router with 3DES Accelerator Version Release 1.54cBIPAC-7402 / 7402W User’s ManualPage CHAPTER 3 BASIC INSTALLATION CHAPTER 2 INSTALLING THE ROUTERCHAPTER 1 INTRODUCTION Table of Contents Q UICK S TART Table of Contents P ROBLEMS STARTING UP THE ROUTER S AVE C ONFIGURATION TO F LASHP ROBLEMS WITH THE WAN I NTERFACE P ROBLEMS WITH THE LAN I NTERFACEPage Wireless Ethernet 802.11b 7402W Only FeaturesFast Ethernet Switch Quick Installation Wizard Network Address Translation NAT Dynamic Host Configuration Protocol DHCP client and serverFirewall Domain Name System DNS relay Static and RIP1/2 Routing Firmware UpgradeableSimple Network Management Protocol SNMP Web based GUI 7402 BIPAC-7402 / 7402W ADSL Router Application7402W Figure 1.1 Application Diagram of Package Contents Chapter 2 Installing the RouterImportant note for using the BIPAC-7402W ADSL Router Meaning The Front LEDsPPP / MAIL ADSL LAN Port 1X password Power Switch PWR RESET LAN 1XThe Rear Ports Port Cabling Connecting your router Chapter 3 Basic Installation For Windows XP Configuring PCs in Windows2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties. See Figure 2. Double-click Local Area “LAN” Connection. See For WindowsFigure 3.7 TCP / IP Figure 3.8 IP Address & DNS Configuration Figure 3.5 LAN Area Connection Select the Disable DNS radio button and click OK to Then select the DNS Configuration tab. See Figurefinish the configuration For Windows 98 / ME 2. Select TCP/IP Protocol and click Properties. See For Windows NT4.0 Username and Password Factory Default SettingsLAN Device IP Settings ISP setting in WAN site PPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoA Information from your ISP Figure 3.14 User namd & Password Prompt Widonw Configuring with your Web Browser Quick Start Chapter 4 ConfigurationSave Config to FLASH ARP Table Status RIP Routing Table Routing TableRouting Table Leased Table DHCP TableExpired Table Permanent Table PPTP Status IPSec Status Email Status L2TP Status Event Log Error Logging UPnP Portmap NAT Sessions Quick Start Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options LAN Local Area Network ConfigurationEthernet LAN, WAN, System, Firewall, VPN, QoS, Virtual Server and Advanced ESSID Broadcast Wireless 7402W Only WPA Pre-Shared Key Wireless Security 7402W OnlyPage Port Setting DHCP Server Click Apply to enable this function WAN Wide Area Network RFC 1483 Routed Connections PPPoE Connections Connection Advanced Options PPPoE Give DNSto Relay Controls whether the PPP Internet Protocol Control Protocol IPCP can request the DNS server IP address for a remote PPP peer. Once IPCP has discovered the DNS server IP address, it automatically gives the address to the local DNS relay so that a connection can be established All Ip Pppoe RFC 1483 Bridged Connections PPPoA Routed Connections Advanced Options PPPoA Chapter 4 Configuration IPoA Routed Connections Page ADSL Time Zone System Remote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control URL Filter To block PCs on your local network from unwanted websites General Settings Packet Filter Table 1 Pre-defined Port Filter Port Filters Address Filters Click Port Filters Configuring Packet Filter 4. Click Add TCP Filter Click DeleteClick Add TCP Filter Input HTTP port number Select “Allow” HTTP inbound & outbound application Block Duration Intrusion Detection Intrusion Name Table 2 Hacker attack types recognized by the IDSDetect Parameter Blacklist Type of Block Duration MAC Address Filter URL Filter Restrict URL Features Log information can be seen in the Status - Event Log after enabling Firewall Log PPTP VPN Virtual Private Networks Remote Access PPTP Connection Click Apply after changing settings LAN to LAN PPTP Connection Click Apply after changing settings Click Create to configure a new IPSec VPN connection IPSec Local Configure a new VPN ConnectionRemote Proposal MD5 A one-way hashing algorithm that produces a 128−bit hash Remote ID Advanced OptionLocal ID L2TP Remote Access L2TP Connection IPSec Enable for enhancing your LT2P VPN security LAN to LAN L2TP Connection IPSec Enable for enhancing your LT2P VPN security Dial-in Configuring PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-in Connection Description Function Dial-out Configuring the PPTP VPN in the Office Example Configuring a Remote Access PPTP VPN Dial-out Connection Description Function Example Configuring a LAN-to-LAN PPTP VPN Connection Configuring PPTP VPN in the Head Office Configuring PPTP VPN in the Branch Office Table 3 Network Configuration and Security Plan Example Configuring a IPSec LAN-to-LAN VPN Connection192.168.0.0/24 69.1.121.30 192.168.1.0/24 69.1.121.3 12345678 Tunnel mode ESPMD5 with AES IP address of the head office router in WAN side Configuring IPSec VPN in the Head Office Configuring IPSec VPN in the Branch Office Dial-in Example Configuring a Remote Access L2TP VPN Dial-in Connection Configuring L2TP VPN in the Office Dial-out Example Configuring a Remote Access L2TP VPN Dial-out Connection Configuring the L2TP VPN in the Office Example Configuring your Router to Dial-in to the Server Example Configuring LAN-to-LAN L2TP VPN Connection Configuring L2TP VPN in the Head Office Configuring L2TP VPN in the Branch Office QoS Quality of Service High Prioritization IP Throttling Table 4 Well-know and registered Ports Virtual Server “Port Forwarding”Port Number Protocol NEWS Network News Transfer Protocol In addition to specifying the port number to be used, you will also need to specify the protocol used. The protocol used is determined by the particular application. Most applications will use TCP or UDP, however you can specify other protocols using the drop-down Protocol menu. Setting the protocol to “all” will cause all incoming connection attempts using all protocols on all port numbers to be forwarded to the specified IP address Static Routing Advanced Dynamic DNS Check Emails Embedded Web Server Device Management SNMP Universal Plug and Play UPnPSNMP V1 and From RFC 1213 MIB-II SNMP Version SNMPv2c and SNMPv3From RFC1650 EtherLike-MIB From RFC 1493 Bridge MIB From RFC 1473 PPP/IP MIB From RFC 1472 PPP/Security MIBFrom RFC 1474 PPP/Bridge MIB From RFC1573 IfMIB Save Configuration to Flash Logout Problems starting up the router Chapter 5 TroubleshootingProblems with the WAN Interface Problem Can’t ping any PCs on the LAN Problems with the LAN InterfaceFrequent loss of ADSL linesync disconnections WORLDWIDE APPENDIX A Product Support and Contact InformationContact Billion AUSTRALIA