Manuals / Garmin / Computer Equipment / Modem

Garmin HM210DP/DI manual Configuring Firewall Settings, Global Firewall Settings

Models: HM210DP/DI

1 135

Download 135 pages 7.76 Kb

Page 86

11 Configuring Firewall Settings

Configuring Firewall Settings

11 Configuring Firewall Settings

The Configuration Manager provides built-in firewall functions, enabling you to protect the system against denial of service (DoS) attacks and other types of malicious accesses to your LAN. You can also specify how to monitor attempted attacks, and who should be automatically notified.

11.1Global Firewall Settings

Follow the steps below to configure the global firewall settings:

1.Select Services > Firewall and the Firewall Configuration page appears:

2. Configure the settings according to the following:

78	EN/LZT 108 6492 R2 - October 2003

Image 86

Garmin HM210DP/DI manual Configuring Firewall Settings, Global Firewall Settings

Contents

User Guide ADSL ModemHM210dp/di Abstract CopyrightDisclaimer Trademark ListGetting Started with the Configuration Manager Hardware Description and InstallationLocal PC Configuration IntroductionConfiguring DHCP Basic ConfigurationConfiguring IP Routes Configuring RIP Configuring NATConfiguring DNS Server Addresses Troubleshooting Configuring Firewall SettingsAdministration Tasks Viewing DSL Line InformationGlossary Page 1.1 About this User Guide 1.2.1 Features1 Introduction 1.2 About the ADSL Modem HM210d2.1.2 Subscription for ADSL Service Hardware Description and Installation2.1.1 Package Contents 2.1 Before You StartLabel 2.2.1 Front Panel and LED Indicators2.2 Physical Appearance Status/DescriptionFigure 2 - Back Panel of the HM210dp/di 2.2.2 Back Panel and Connectors2.3 Choosing a Place for the Router to a hub/switch 2.4 Connecting the Hardware2. Connect to a PC or hub/switch to a single PC to a hub/switch’s uplink port3.1.1 In Windows 95, 98/98SE and Me Local PC Configuration3.1 Configuring PCs as DHCP Clients 192.168.1.13.1.2 In Windows 3.1.3 In Windows XP3.2 Assigning Static IP Addresses to your PCs 3.2.1 In Windows 95, 98/98SE and Me3.2.2 In Windows 3.2.3 In Windows XPManager Getting Started with the Configuration4.1 Accessing the Configuration Manager http//192.168.1.14.2 Functional Layout Task barDescription Button / Symbol4.2.1 Commonly Used Buttons and Icons 4.3 The Home Page and System View Table Description Table HeadingDevice DSL WAN Interfaces LAN Interfaces Services Summary 4.4 Commiting Changes and Rebooting Description 4.4.1 Rebooting the HM210dp/di using OptionsSetting EN/LZT 108 6492 R2 - October Reboot from Minimum ConfigurationGetting Started with the Configuration Manager 4.5 Quick Configuration Username Password Use DNS FieldUse DHCP Default Route Gateway IP Address Enabled/DisabledDescription Getting Started with the Configuration ManagerField Primary/Secondary DNS Server1. Select ATM ATM VC to display the ATM VC Configuration page Basic Configuration5.1 Configuring the ATM Virtual Circuit 5.1.1 Adding ATM VCsSelect a VC interface from the available interfaces, e.g. aal5-0 FieldDescription 5.1.2 Modifying ATM VCs 5.2 Configuring PPP Interfaces 5.2.1 Adding PPP InterfacesThis setting defines the type of firewall FieldDescription PPP InterfaceStatus Protocol Service Name Use DHCP Use DNS Default Route Start - To establish a connection whenever you turn on the HM210dp/diSelect PAP or CHAP as required by your ISP 5.2.2 Checking Your Connection StatusSecurity Information 5.2.3 Modifying and Deleteing PPP Interfaces 5.3 Configuring EoA Interfaces 5.3.1 Adding EoA InterfacesField This setting defines the type of firewallavailable for both public and in-network accesses DescriptionSelect an ATM VC interface previously created, e.g. aal5-0 Basic Configuration EN/LZT 108 6492 R2 - October5.4.1 Adding IPoA Interfaces 5.4 Configuring IPoA Interfaces1. Select WAN IPoA to display the IPoA Configuration page FieldEnable / Disable Interface Sec Type Netmask RFC Use DHCP Default RouteEnable / Disable Gateway IP Address5.4.2 Checking Your Connection Status Basic Configuration5.5 Bridging Connection Mode 5.5.1 Defining Bridge Interfaces5.5.2 Check Your Connection Status 5.5.3 Deleting a Bridge InterfaceConfiguring IP Routes 6.1 Overview of IP Routes6.2 Viewing the IP Routing Table Destination Netmask NextHop IFName Route Type Route Origin Action FieldDescription Displays and icon you can click to delete a route6.3 Adding IP Routes 7.2 DHCP Modes 7 Configuring DHCP7.1 Overview of DHCP DHCP ServerDHCP Client 7.3 Configuring DHCP ServerDHCP Relay Agent 7.3.1 Creating DHCP Server Address Pools Start IP Address End IP Address Mac Address FieldDescription 7.3.2 Enabling DHCP Server Mode 7.3.3 Configuring Your PCs as DHCP Clients 7.3.4 Viewing, Modifying and Deleting Address Pools7.3.5 Excluding IP Addresses from a Pool 7.3.6 Viewing Current DHCP Address AssignmentsField 7.4 Configuring DHCP Relay7.4.1 Defining the DHCP Relay Interfaces Description7.4.2 Enabling DHCP Relay Mode 7.4.3 Configuring Your PCs as DHCP Clients 8 Configuring NAT 8.1 Overview of NAT8.2 Viewing NAT Configuration Configuration page appearsDescription Enable/Disable radio buttons, which allow you to turn on or off theField 8.3 Viewing NAT Rules and Rule Statistics The NAT Rule Configuration table displays a row containing basic information for each rule. For a description of these fields, refer to the instructions for adding rules in section 0 “Adding NAT Rules” Description 8.4 Viewing Current NAT TranslationsField NAT Direction Entry Age FieldDescription Translated InAddress In Address Out Address In/Out Pckets In Ports8.5 Adding NAT Rules 8.5.1 The NAPT Rule8.5.2 The RDR Rule 2. In the ”Rule Flavor” dropdown list, select RDR 8.5.3 The BASIC Rule 2. In the ”Rule Flavor” dropdown list, select BASIC 8.5.4 The FILTER Rule 2. In the ”Rule Flavor” dropdown list, select FILTER 8.5.5 The BIMAP Rule 8. Enter a “Destination Address From/To” …2. In the ”Rule Flavor” dropdown list, select NAPT 8.5.6 The PASS Rule 5. In the “Local Address From/To” fields, type the lowest and highest IP addresses that define the range of private addresses you want to be passed without translation Statically 9 Configuring DNS Server Addresses9.1 Assigning DNS Addresses Dynamically from a DHCP poolOption 1 - Using a PPP connection to learn the DNS 9.3 Configuring DNS RelayConfigured on the HM210dp/di 9.2 Overview of DNS RelayEN/LZT 108 6492 R2 - October Option 2 - Configuring DNS on the HM210dp/diConfiguring DNS Server Addresses Go to Service DNS to display the DNS Configuration page Configuring DNS Server Addresses10 Configuring RIP 10.1 Overview of RIP10.2 Configuring the RIP 1. Select Services RIP and the RIP Configuration page appears10.3 Viewing RIP Statistics Configuring RIP EN/LZT 108 6492 R2 - October11 Configuring Firewall Settings 11.1 Global Firewall SettingsBlacklist Status Blacklist Periodmin Attack Protection DOS Protection FieldDescription Max Half open TCP Conn11.2 Configuring IP Filters format, e.g. j.smith@onecompany.xom11.2.1 Viewing Your IP Filter Configuration 11.2.2 Configuring IP Filter Global Settings 11.2.3 Creating IP Filter RulesEN/LZT 108 6492 R2 - October Configuring Firewall Settings2. Enter or select data for each field that applies to your rule Rule ID Action Direction Interface In Interface Log Option FieldDescription Security Level Blacklist Status Log TagApply Stateful Inspection Enable if you configure a Log TagStart/End Time Src IP Address Dest IP Address Protocol Source Port Dest Port TCP Flag ICMP Type ICMP Code IP Frag Pkt Yes The rule will be applied only to packets that contain fragmentsEnable Default The rule is in effect for the specified time period 11.2.4 Viewing IP Filter Statistics 11.2.3.1 IP Filter Rule ExamplesDescription 11.2.5 Managing Current IP Filter SessionsField Session Index11.3 Blocking Specific Protocols Description ProtocolThe following list describes each of the available protocols AppleTalk NetBEUI 1. Select Home Modify to display the System - Modify page 12 Administration Tasks12.1 Changing the System Date and Time Fieldhttp//myrouter.mydomain.com 12.2 Configuring User Names and PasswordsManager http//myrouter To add login User Id or change the login password, proceed as follows 12.3 Upgrading the Software 12.4 Using Diagnostics Select the VC on which you want to execute diagnostics and then click the Submit button 12.5 Modifying Port Settings 12.5.1 Accessing a Server with a Non-Standard Port Number12.6 Viewing System Alarms 13 Viewing DSL Line Information Viewing DSL Line InformationYou can click the Clear button to reset all counters to zero, and the The DSL Statistics page reports error data relating to the last 15 minutes interval, the current day, and the previous day Troubleshooting Suggestion TroubleshootingIndication/Symptom 14.1Troubleshooting Suggestion 14.2 Internet AccessIndication/Symptom 14.4.1 How to use WINIPCFG 14.3 Configuration Manager Program14.4 Diagnosing Problem Using IP Utilities Indication/Symptom14.4.2 How to use IPCONFIG 14.4.3 How to use PING 15.1 Product Care and Maintenance 15 Important Information15.2.1 License 15.2.3 Limited Warranty15.2 License Agreement 15.2.2 Term15.2.6 Governing Law 15.2.4 Intended Use15.2.5 Limitation of Liability 15.3.1 EU Directives 15.3.2 Safety Approvals15.3 Regulatory Information 15.3.1.1 Declaration of Conformity15.3.3 EMC Approvals 15.3.2.1 UL 1950 Statement15.3.3.1 FCC Part 15 Statement 15.3.4 Telecom Approval 15.3.4.1 FCC Part 68 Statement15.3.7 Environmental Information 15.3.6 Power Supply15.3.5 Caution For EUImportant Information 15.3.8 Intended UseThe HM210dp/di is intended for indoor public and private use EN/LZT 108 6492 R2 - OctoberADSL Authenticate16 Glossary BridgingCHAP BroadbandBroadcast DeviceEncapsulation Domain nameDownstream EthernetG.dmt FirmwareGateway G.liteICMP HostHTTP IGMPMAC address NAT rulePort PacketPING POTSSDNS RemoteRouting SNMPTelnet T1.413TCP/IP TFTPUpstream VPI and VCI