Configuring Firewall Settings
11.2.2Configuring IP Filter Global Settings
The IP Filter Configuration page enables you to configure several global IP Filter settings, and displays a table showing all existing IP Filter rules. The global settings that you can configure are:
Security Level: When High is selected, only those rules that are assigned a security value of “High” will be in effect. The same is true for the Medium and Low settings. When None is selected, IP Filtering is disabled.
Private/Public/DMZ Default Action: This setting specifies a default action to be taken (Accept or Deny on private, public or
Private – Typically, the global setting for private interfaces is Accept, so that LAN computers have access to the Internet connection of the HM210dp/di.
Public – The interface connect to the Internet, e.g. PPP, EoA and IpoA interfaces. Typically, the global setting for public interfaces is Deny, so that all accesses to your LAN initiated from external computers are denied (discarded at the public interface), except for those allowed by a specific IP Filter rule.
DMZ – Refers to computers that are available for both public and in- network accesses (such as a company’s public Web server). Packets received on a DMZ interface – whether from a LAN or external source – are subject to a set of protections that is in between public and private interfaces. The global setting for DMZ- type interfaces may be set to Deny so that all attempts to access these servers are denied by default. The administrator may then configure IP Filter rules to allow accesses of certain types.
11.2.3Creating IP Filter Rules
To create an IP filter rule, you set various criteria that must be met in order for the rule to be invoked. Use these instructions to add a new IP filter rule, and refer to the examples in section 11.2.3.1 for assistance:
1.On the main IP Filter Configuration page, click the Add button. The IP Filter Rule – Add page appears:
82 | EN/LZT 108 6492 R2 - October 2003 |
