Firewall, High, Medium, Standard | RCA 608WL, 620, 605 specification

Chapter 4

Basic Configuration

4.5.10 Firewall

About the firewall The firewall allows you to secure traffic from and to the SpeedTouch™. There are different security levels, depending on the degree of security you need.

Overview The Overview page summarizes the overall security policy configured on your

SpeedTouch™.

Configure On the Configure page you can select the security level of the SpeedTouch™.

Security Levels Select one of following security levels:

High

All outgoing connections are blocked, except for traffic from well-known protocols such as DNS, HTTP, HTTPS, FTP, TELNET, IMAP and POP. All incoming connections are blocked.

Game and Application Sharing is not allowed.

Medium:

All outgoing connections are blocked except MS Windows protocols such as

NetBIOS, RPC and SMB. All incoming connections are blocked as well.

However, Game and Application Sharing is allowed.

Standard:

All outgoing connections are allowed. All incoming connections are blocked, except for inbound connections assigned to a local host via Game and Application Sharing.

72	E-DOC-CTC-20051017-0151 v1.0

Image 82

RCA 608WL, 620, 605 manual Firewall, High, Medium, Standard

Contents

SpeedTouch 605/608/608 WL/620 Page SpeedTouch 605/608 608 WL/620 Trademarks CopyrightDocument Information Contents Basic Configuration Expert Configuration IP Router 121 Software Keys Contents Terminology Documentation and software updates About this User’s Guide About this User’s Guide Getting to know your SpeedTouch Indicator Description Name Colour State SpeedTouch LED Behaviour Indicator Description Name LED Status DSL Accessing your SpeedTouch Access Method Can be used to Access via the Web Interface To access the SpeedTouch via the Web interface To access the SpeedTouch via the Command Line Interface CLI Access via CLIFor more information, see Quote site command on Select All Programs Accessories Command Prompt To start a Telnet session Access via FTP Open a Command Prompt window Common FTP commands Use Command Ftp quote site ip iplist To disable remote access To access the SpeedTouch remotely To enable remote accessRemote Assistance Chapter Local Network Setup Wired Ethernet Wireless Ethernet Wired Ethernet For more information, see Device settings on Wireless Ethernet Introduction Wireless client requirements Wireless Basics Chapter Wireless default settings Connecting Wireless Clients for the First TimeWireless Security on First-time association example Click Connect Anyway Wireless Security Name Ssid WEP Wired-Equivalent Privacy Search for wireless devices taskSecurity disabled default WPA-PSK Wi-Fi Protected Access Pre-Shared Key Click Configure Connecting Additional Wireless ClientsSecurity issues Registering wireless clients Registering clients via Web pages Registering clients via the association button Extending the Range of Your Wirelstess Network Wireless Distribution System WDS Chapter Chapter Web Pages Internet Connectivity Dial-In ClientsSpeedTouch Internet Gateway If your computer runs You can use See 3.1 SpeedTouch Web Pages on page 31 to proceed Introduction Starting an Internet session SpeedTouch Web PagesMonitoring your Internet connection Terminating an Internet session Internet Gateway Device Control Agent Internet connection status Terminating an Internet session Basic Configuration Basic and Expert Mode SpeedTouch documentation Navigation Menu Language Bar Navigation Bar Notification Area Tasks Menu Menu items Collapsing and expanding the menu Language Bar Navigation Bar Notification Area Tasks SpeedTouch home HomeSpeedTouch Broadband Connection Toolbox Office Network Information Configuration Event Logs Update SpeedTouch Information SpeedTouch Easy Setup SpeedTouch RestartRestarting your Click Yes, restart my SpeedTouch. The SpeedTouch restarts Configuration Saving your current configuration Back up & RestoreAccessing the Backup & Restore Restoring a previously saved configuration Reset to Factory Defaults Resetting the SpeedTouch factory defaults Indicator Description Event Logs Update Updating the SpeedTouch system software Broadband Connection DSL Connection Internet ServicesBroadband Connection menu Pick a task list, click Check connectivity to the Internet Connectivity CheckClick Check Connectivity DSL Connection Internet Services Accessing the Internet Service Settings Overview Internet Service SettingsBroadband Connection menu, click Internet Services Toolbox Enabling Remote Assistance Username PasswordTerminating remote assistance Game & Application Sharing Chapter Accessing the Defined Games & Applications Defined Games & Applications Game or Application Definition Accessing the Game or Application Definition OverviewConfigure Under Game or Application Name you can Adding a Port Translation rule New Game or Application Creating a new game or application Web Site Filtering Redirect a Web site Proceed as follows Deny access to a specific Web siteAllow access to a specific Web site Allow is selected under Action for Unknown Sites Redirecting all Web sites Configure content based filtering settingsUnder Content Based Filtering you can Click Redirect in the Action list Web Filtering Activation Standard license activation Accessing this page Proceed as followsWeb Filtering Activation Click Standard Toolbox menu, click Web Site Filtering Click Configure Content LevelAccessing the Content Level Icon Description Accessing the New Content Level New Content LevelContent level creation Proceed as follows Chapter Medium FirewallHigh Standard Editing a security level Proceed as follows DisabledDetails of a security level Creating a new security level Low Source Interface and IP Address range Destination Interface and IP Address range Intrusion Detection On the Dynamic DNS page, click Configure Dynamic DNS User Management User Privileges Chapter Editing a user account Proceed as follows Edit UserToolbox menu, click User Management Changing the default user Change Default UserChange Default User page appears Add User Devices Office NetworkInterfaces See 4.6.2 Device Settings on page 84 for more information Devices Office Network menu, click Devices Device SettingsAccessing the device settings Overview Connection Sharing Chapter Assign Public IP Assigning the public IP address to a device Accessing the wireless Wireless Device SettingsDevice settings Accessing the Access Access Point SettingsPoint settings Allow New Devices Allow multicast from Broadband NetworkBroadcast Network Name Encryption 128 bit, Hexadecimal 64 bit, Hexadecimal128 bit, Alphanumeric Select Use WPA-PSK Encryption New stations are allowed automatically Access control on the SpeedTouchFor more information, see Allowing new wireless on New stations are allowed via registration Information, see 4.6.4 Wireless Device Settings on Pick a task list, click Scan for wireless Access Points Configuring WDSClick Configure Pick a task list, click Configure WDS Establishing a WDS connection Interfaces Interface Settings Assigning a new IP address to the SpeedTouch Dhcp Pool Dhcp Pool Accessing the Dhcp PoolOffice Network menu, click Interfaces Components of the Dhcp Pool Chapter IP Router Expert ConfigurationClick Connections 100 101 System Update Easy SetupDiagnostics SpeedTouch Services Easy Setup System Information Diagnostics DSL Line Info Configuration SystemSee 5.2.6 System Update on page 110 for more information If result is Then Product Name Software Release Board Name Serial Number Product Code Connections Diagnostics If the status is Then Syslog Messages ConfigurationFacility Severity 109 System configuration System Upgrade System UpdateSee Upload system files on page 110 for more information Manage configuration files Upload system software Proceed as follows Switchtoanothersystem software versionSystem software version View detailed SpeedTouch service information SpeedTouch ServicesEdit SpeedTouch service properties Edit SpeedTouch service properties Service properties Type Indicates a SpeedTouch service that Sntp Sntp Client Manual 9 SLA Modify ping test properties Modify traceroute test properties Delete the entry see Add/delete a traceroute test Properties Add/delete a traceroute testModify traceroute test Traceroute tests and results Add-on IP Router Add/change an IP address IP AddressesSelect Obtain an IP address automatically Related expression Interface ServiceExpressions Interface Expressions Properties table Service Adding a service related expression Adding an IP related expression Classification TCP Ack class Name ServiceIndex Label IP Routing Adding an IP route To add an IP route Configuration Interfaces Neighbours 5 RIP 6 NAT Group MappingCreating a NAT template Type Configuration Queues Meter IP QoS Priority WFQ queue WeightDiscard Wfq Drop rate PropagateAckFilter Mark rate Drop action # marked# compliant Mark action Routed PPPoI Routed PPPoERouted PPPoA Bridged Ethernet 1 ATM Connection Service NamePhonebook QoS Book Interfaces Identifiers VPI and VCI Upper layer protocol Creating a Routed PPPoE connection entry Routed PPPoERouting Other Always-On ModeManually On-Demand Routed PPPoA Introduction Creating a Routed PPPoA connection entry 142 143 Introduction Routed PPPoIAvailability Creating a Routed 145 146 Bridged Ethernet Vlan 148 Vlan interface configuration Routed Ethernet IPoA Ethernet Interface Routed IPoACreating a new Routed Generated IP routes PPTP-to-PPP Relay Virtual LAN Wireless Managed SwitchLocal Networking Activate verify first DhcpActivate server Activate trust client Pool Client IDAddress Used Primary DNS Server Secondary DNS Server Relay Config Relay Interfaces Selecting InitRequesting Bound Configuration Hostname Table 2 DNS Managed Switch Overview Managed Ethernet Switch 162 Wireless Only stations with correct Network name Ssid can connect Interoperability ModeRate Framebursting Network Name broadcast Interoperability Mode Channel Selection list, click auto Select Wireless interface enabled Enable/disable the wireless interfaceClear wireless interface enabled Security Mode settings Access Control settings Bits, Hexadecimal Select Security Level 1 WEPBits, Alphanumeric Select Security Level 2 WPA-PSK WPA Personal Select Security Level 2 WPA Scan for Other Networks Policy Expressions onLog Policy Buttons Click Click Customize Flags EnableReset Destination Interface 174 2 Log VPN LAN to LAN ConfigurationProcedure Remote Gateway Address Known as the starting page when VPN Client Configuration procedureSelect VPN VPN Client VPN Server SpeedTouch as VPN Server Configuration procedureSelect VPN VPN Server Certificates Advanced Browse again to Expert mode VPN Debug Logging Browse to Expert mode VPN Debug LoggingDebug General Location Service Call Logging Call Screening SIP PBX 184 Software Keys HowtoactivateaSoftware module 186 Troubleshooting Poor SpeedTouch General SpeedTouch TroubleshootingSpeedTouch does not work SpeedTouch unreachable Performance Wired Ethernet Troubleshooting LANLEDdoesnotlightup Make sure that Wireless Ethernet Troubleshooting Not able to connect wireless clients Upgrade Troubleshooting Message Due to UPnP on Windows XP Systems Adding IGD Discovery and Control Resetting your SpeedTouch Software reset Hardware reset 195 196 Page Need more help?