Manuals / Garmin / Computer Equipment / Modem

Garmin HM210DP/DI manual Source Port Dest Port TCP Flag ICMP Type ICMP Code IP Frag Pkt

Models: HM210DP/DI

1 135

Download 135 pages 7.76 Kb

Page 94

Source Port:

Configuring Firewall Settings

Source Port:

Dest Port:

TCP Flag:

ICMP Type:

ICMP Code:

IP Frag Pkt:

Port number criteria for the computer(s) from which the packet originates. This field will be dimmed (unavailable for entry) if you have not specified a protocol critera. See the description of Src IP Address for the selection options.

Port number criteria for the destination computer(s), i.e. the port number of the type of computer to which the packet is being sent. This field will be dimmed (unavailable for entry) unless you have selected TCP or UDP as the protocol. See the description of Src IP Address for the selection options.

Specifies whether the rule should apply only to TCP packets that contain the synchronous (SYN) flag, only to those that contain the non- synchronous (NOT-SYN) flag, or to all TCP packets. This field will be dimmed (unavailable for entry) unless you selected TCP as the protocol.

Specifies whether the value in the type field in ICMP packet headers will be used as a criteria. The code value can be any decimal value from 0 to 255. You can specify that the value must be equal (eq) or not equal (neq) to the specified value, or you can select any to enable the rule to be invoked on all ICMP packets. This field will be dimmed (unavailable for entry) unless you specify ICMP as the protocol.

Specifies whether the value in the code field in ICMP packet headers will be used as criteria. The code value can be any decimal value from 0 to 255. You can specify that the value must be equal (eq) or not equal (neq) to the specified value, or you can select any to enable the rule to be invoked on all ICMP packets. This field will be dimmed (unavailable for entry) unless you specify ICMP as the protocol.

Determines how the rule applies to IP packets that contain fragments. You can choose from the following options:

Yes: The rule will be applied only to packets that contain fragments.

No: The rule will be applied only to packets that do not contain fragments.

86	EN/LZT 108 6492 R2 - October 2003

Image 94

Garmin HM210DP/DI manual Source Port Dest Port TCP Flag ICMP Type ICMP Code IP Frag Pkt

Contents

HM210dp/di ADSL ModemUser Guide Abstract CopyrightDisclaimer Trademark ListGetting Started with the Configuration Manager Hardware Description and InstallationLocal PC Configuration IntroductionConfiguring IP Routes Basic ConfigurationConfiguring DHCP Configuring DNS Server Addresses Configuring NATConfiguring RIP Troubleshooting Configuring Firewall SettingsAdministration Tasks Viewing DSL Line InformationGlossary Page 1.1 About this User Guide 1.2.1 Features1 Introduction 1.2 About the ADSL Modem HM210d2.1.2 Subscription for ADSL Service Hardware Description and Installation2.1.1 Package Contents 2.1 Before You StartLabel 2.2.1 Front Panel and LED Indicators2.2 Physical Appearance Status/Description2.3 Choosing a Place for the Router 2.2.2 Back Panel and ConnectorsFigure 2 - Back Panel of the HM210dp/di to a hub/switch 2.4 Connecting the Hardware2. Connect to a PC or hub/switch to a single PC to a hub/switch’s uplink port3.1.1 In Windows 95, 98/98SE and Me Local PC Configuration3.1 Configuring PCs as DHCP Clients 192.168.1.13.1.2 In Windows 3.1.3 In Windows XP3.2 Assigning Static IP Addresses to your PCs 3.2.1 In Windows 95, 98/98SE and Me3.2.2 In Windows 3.2.3 In Windows XPManager Getting Started with the Configuration4.1 Accessing the Configuration Manager http//192.168.1.14.2 Functional Layout Task bar4.2.1 Commonly Used Buttons and Icons Button / SymbolDescription 4.3 The Home Page and System View Table Device DSL WAN Interfaces LAN Interfaces Services Summary Table HeadingDescription 4.4 Commiting Changes and Rebooting Setting 4.4.1 Rebooting the HM210dp/di using OptionsDescription Getting Started with the Configuration Manager Reboot from Minimum ConfigurationEN/LZT 108 6492 R2 - October 4.5 Quick Configuration Username Password Use DNS FieldUse DHCP Default Route Gateway IP Address Enabled/DisabledDescription Getting Started with the Configuration ManagerField Primary/Secondary DNS Server1. Select ATM ATM VC to display the ATM VC Configuration page Basic Configuration5.1 Configuring the ATM Virtual Circuit 5.1.1 Adding ATM VCsDescription FieldSelect a VC interface from the available interfaces, e.g. aal5-0 5.1.2 Modifying ATM VCs 5.2 Configuring PPP Interfaces 5.2.1 Adding PPP InterfacesThis setting defines the type of firewall FieldDescription PPP InterfaceStatus Protocol Service Name Use DHCP Use DNS Default Route Start - To establish a connection whenever you turn on the HM210dp/diSecurity Information 5.2.2 Checking Your Connection StatusSelect PAP or CHAP as required by your ISP 5.2.3 Modifying and Deleteing PPP Interfaces 5.3 Configuring EoA Interfaces 5.3.1 Adding EoA InterfacesField This setting defines the type of firewallavailable for both public and in-network accesses DescriptionSelect an ATM VC interface previously created, e.g. aal5-0 Basic Configuration EN/LZT 108 6492 R2 - October5.4.1 Adding IPoA Interfaces 5.4 Configuring IPoA Interfaces1. Select WAN IPoA to display the IPoA Configuration page FieldEnable / Disable Interface Sec Type Netmask RFC Use DHCP Default RouteEnable / Disable Gateway IP Address5.4.2 Checking Your Connection Status Basic Configuration5.5 Bridging Connection Mode 5.5.1 Defining Bridge Interfaces5.5.2 Check Your Connection Status 5.5.3 Deleting a Bridge InterfaceConfiguring IP Routes 6.1 Overview of IP Routes6.2 Viewing the IP Routing Table Destination Netmask NextHop IFName Route Type Route Origin Action FieldDescription Displays and icon you can click to delete a route6.3 Adding IP Routes 7.2 DHCP Modes 7 Configuring DHCP7.1 Overview of DHCP DHCP ServerDHCP Relay Agent 7.3 Configuring DHCP ServerDHCP Client 7.3.1 Creating DHCP Server Address Pools Description FieldStart IP Address End IP Address Mac Address 7.3.2 Enabling DHCP Server Mode 7.3.3 Configuring Your PCs as DHCP Clients 7.3.4 Viewing, Modifying and Deleting Address Pools7.3.5 Excluding IP Addresses from a Pool 7.3.6 Viewing Current DHCP Address AssignmentsField 7.4 Configuring DHCP Relay7.4.1 Defining the DHCP Relay Interfaces Description7.4.2 Enabling DHCP Relay Mode 7.4.3 Configuring Your PCs as DHCP Clients 8 Configuring NAT 8.1 Overview of NAT8.2 Viewing NAT Configuration Configuration page appearsField Enable/Disable radio buttons, which allow you to turn on or off theDescription 8.3 Viewing NAT Rules and Rule Statistics The NAT Rule Configuration table displays a row containing basic information for each rule. For a description of these fields, refer to the instructions for adding rules in section 0 “Adding NAT Rules” Field 8.4 Viewing Current NAT TranslationsDescription NAT Direction Entry Age FieldDescription Translated InAddress In Address Out Address In/Out Pckets In Ports8.5 Adding NAT Rules 8.5.1 The NAPT Rule8.5.2 The RDR Rule 2. In the ”Rule Flavor” dropdown list, select RDR 8.5.3 The BASIC Rule 2. In the ”Rule Flavor” dropdown list, select BASIC 8.5.4 The FILTER Rule 2. In the ”Rule Flavor” dropdown list, select FILTER 8.5.5 The BIMAP Rule 8. Enter a “Destination Address From/To” …2. In the ”Rule Flavor” dropdown list, select NAPT 8.5.6 The PASS Rule 5. In the “Local Address From/To” fields, type the lowest and highest IP addresses that define the range of private addresses you want to be passed without translation Statically 9 Configuring DNS Server Addresses9.1 Assigning DNS Addresses Dynamically from a DHCP poolOption 1 - Using a PPP connection to learn the DNS 9.3 Configuring DNS RelayConfigured on the HM210dp/di 9.2 Overview of DNS RelayConfiguring DNS Server Addresses Option 2 - Configuring DNS on the HM210dp/diEN/LZT 108 6492 R2 - October Go to Service DNS to display the DNS Configuration page Configuring DNS Server Addresses10 Configuring RIP 10.1 Overview of RIP10.2 Configuring the RIP 1. Select Services RIP and the RIP Configuration page appears10.3 Viewing RIP Statistics Configuring RIP EN/LZT 108 6492 R2 - October11 Configuring Firewall Settings 11.1 Global Firewall SettingsBlacklist Status Blacklist Periodmin Attack Protection DOS Protection FieldDescription Max Half open TCP Conn11.2 Configuring IP Filters format, e.g. j.smith@onecompany.xom11.2.1 Viewing Your IP Filter Configuration 11.2.2 Configuring IP Filter Global Settings 11.2.3 Creating IP Filter Rules2. Enter or select data for each field that applies to your rule Configuring Firewall SettingsEN/LZT 108 6492 R2 - October Rule ID Action Direction Interface In Interface Log Option FieldDescription Security Level Blacklist Status Log TagStart/End Time Src IP Address Dest IP Address Protocol Enable if you configure a Log TagApply Stateful Inspection Source Port Dest Port TCP Flag ICMP Type ICMP Code IP Frag Pkt Yes The rule will be applied only to packets that contain fragmentsEnable Default The rule is in effect for the specified time period 11.2.4 Viewing IP Filter Statistics 11.2.3.1 IP Filter Rule ExamplesDescription 11.2.5 Managing Current IP Filter SessionsField Session Index11.3 Blocking Specific Protocols The following list describes each of the available protocols ProtocolDescription AppleTalk NetBEUI 1. Select Home Modify to display the System - Modify page 12 Administration Tasks12.1 Changing the System Date and Time FieldManager http//myrouter 12.2 Configuring User Names and Passwordshttp//myrouter.mydomain.com To add login User Id or change the login password, proceed as follows 12.3 Upgrading the Software 12.4 Using Diagnostics Select the VC on which you want to execute diagnostics and then click the Submit button 12.5 Modifying Port Settings 12.5.1 Accessing a Server with a Non-Standard Port Number12.6 Viewing System Alarms 13 Viewing DSL Line Information Viewing DSL Line InformationYou can click the Clear button to reset all counters to zero, and the The DSL Statistics page reports error data relating to the last 15 minutes interval, the current day, and the previous day Troubleshooting Suggestion TroubleshootingIndication/Symptom 14.1Indication/Symptom 14.2 Internet AccessTroubleshooting Suggestion 14.4.1 How to use WINIPCFG 14.3 Configuration Manager Program14.4 Diagnosing Problem Using IP Utilities Indication/Symptom14.4.2 How to use IPCONFIG 14.4.3 How to use PING 15.1 Product Care and Maintenance 15 Important Information15.2.1 License 15.2.3 Limited Warranty15.2 License Agreement 15.2.2 Term15.2.5 Limitation of Liability 15.2.4 Intended Use15.2.6 Governing Law 15.3.1 EU Directives 15.3.2 Safety Approvals15.3 Regulatory Information 15.3.1.1 Declaration of Conformity15.3.3 EMC Approvals 15.3.2.1 UL 1950 Statement15.3.3.1 FCC Part 15 Statement 15.3.4 Telecom Approval 15.3.4.1 FCC Part 68 Statement15.3.7 Environmental Information 15.3.6 Power Supply15.3.5 Caution For EUImportant Information 15.3.8 Intended UseThe HM210dp/di is intended for indoor public and private use EN/LZT 108 6492 R2 - OctoberADSL Authenticate16 Glossary BridgingCHAP BroadbandBroadcast DeviceEncapsulation Domain nameDownstream EthernetG.dmt FirmwareGateway G.liteICMP HostHTTP IGMPMAC address NAT rulePort PacketPING POTSSDNS RemoteRouting SNMPTelnet T1.413TCP/IP TFTPUpstream VPI and VCI