Sagem 1500, 1500WG 5) DoS Criteria and Port Scan Criteria

4 - Configuring the SAGEM F@st™ 1500 ADSL router

SAGEM F@st™ 1500 Reference Manual - 288053220-03

Page 4-42 Reproduction and communication prohibited without the written permission of E

E E

E

5) DoS Criteria and Port Scan Criteria

Set up DoS and port scan criteria in the spaces provided ( as shown below).

Note: The firewall does not significantl y affect system performance, so we advise enabling the

prevention features to protect your network.

Parameter Defaults Description

Total incomplete

TCP/UDP sessions

HIGH

300 sessions Defines the rate of new unestablished sessions that will cause

the software to start deleting half-open sessions.

Total incomplete

TCP/UDP sessions

LOW

250 sessions Defines the rate of new unestablished sessions that will cause

the software to stop deleting halfopen sessions.

Incomplete

TCP/UDP sessions

(per min) HIGH

250 sessions Maximum number of allowed incomplete TCP/UDP sessions

per minute.

Incomplete

TCP/UDP sessions

(per min) LOW

200 sessions Minimum number of allowed incomplete TCP/UDP sessions per

minute.

Maximum

incomplete

TCP/UDP sessions

number from same

host

10 Maximum number of incomplete TCP/UDP sessions from the

same host.

Incomplete

TCP/UDP sessions

detect sensitive

time period

300 msec Length of time before an incomplete TCP/UDP session is

detected as incomplete.

Maximum half open

fragmentation

packet number

from same host

30 Maximum number of half open fragmentation packets from the

same host.

Half-open

fragmentation

detect sensitive

time period

10000 msec Length of time before a half-open fragmentation session is

detected as half-open.

Flooding cracker

block time

300 second Length of time from detecting a flood attack to blocking the

attack.

Contents

Main Warning ! Contents 1. Introduction 1-1 2. Description and Physical installation 2-1 3. Configuring Client Computer 3-1 4. Configuring the SAGEM F@st 1500 ADSL router 4-1 A. Appendix A - Troubleshooting A-1 B. Appendix B - Safety warnings B-1 C. Appendix C - CABLES C-1 D. Appendix D - Technical specifications D-1 E. Appendix E - Default configuration E-1 List of figures 1. Introduction 1.1 About the SAGEM F@stTM 1500WG ADSL Router 1.2 Features and Benefits 1.3 Applications Wireless and Wired LAN Internet Access Shared IP Address Virtual Server DMZ Host Support Security Virtual Private Network (VPN) 1.4 Composition of the supply 1.5 Prerequisites Page 2. Description and Physical installation 2.1 Hardware Description 2.1.1 Front panel 2.1.2 Rear panel 2.2 Physical Installation 2.2.1 Installation instructions Environment Power supply source Maintenance Page 2.3 Settings and Connecting 2.3.1 ISP settings 2.3.2 Install the SAGEM F@stTM 1500 ADSL Router 2.3.3 Connect the ADSL Line 2.3.4 Phone Line Configuration Page 2.3.5 Attach to Your Network Using Ethernet Cabling 2.3.6 Connect the Power Adapter 2.4 Powering up the SAGEM F@st 1500 ADSL router Page Page PC Mac 3.1 TCP/IP Configuration 3.2 Configuring your Windows computer 3.2.1 On Windows 98 / Me Page Page Page Page Page Page TCP/IP Configuration Setting Page 3.2.3 On Windows 2000 Page Page Page 3.2.4 On Windows XP Page Obtain IP Settings from Sagem F@st1500 ADSL Router Page 3.3 Configuring your Mac computer Page Page Page Navigating the Management Interface Setup Wizard: Advanced Setup: Making Configuration Changes Page 4 - Configuring the SAGEM F@st 1500 ADSL router 4.1 STATUS Page 4.2 "SETUP WIZARD" menu 4.2.1 PPP Setting 4.2.2 Channel and SSID 4.2.3 WEP 4.2.4 Access Control 4.3 SYSTEM 4.3.1 Time Settings 4.3.2 Password Settings 4.3.3 Configuration tools 4.3.4 Firmware Upgrade 4.3.5 Reset 4.4 "WAN" menu E Page 4-15 4.4.1 ATM PVC Enter ATM (Asynchronous Transf er Mode) function parameters here. E The following parameters only appear in "Routed" mode that you can select in the "Protocol" field: Page 4.5 LAN 4.5.1 DNS 4.6 Wireless 4.6.1 Channel and SSID 4.6.2 Access Control Page 4.6.4 WEP 4.6.5 WPA Page Page 4.7 NAT 4.7.1 Address Mapping 4.7.2 Virtual Server 4.7.3 Special Application Page 4.8 Firewall 4.8.1 Access Control Page 4.8.2 MAC Filter 4.8.3 URL Blocking 4.8.4 Schedule Rule 4.8.5 Intrusion Detection 1) Intrusion Detection Feature 2) Stateful Packet Inspection Page 3) When hackers attempt to enter your network, we can alert you by e-mail 4) Connection Policy 5) DoS Criteria and Port Scan Criteria 4.8.6 DMZ 4.9 Route 4.9.1 Static Route Page Page 4.9.3 Routing Table 4.10 QoS Page 4.10.1 Traffic Mapping Page 4.10.2 Traffic statistics 4.11 Advanced 4.11.1 ADSL ADSL Status Information Page The following items are included on this inform ation page: 4.11.2 Remote Management 4.11.3 SNMP SNMP Setting SNMP Trap 4.11.4 UPnP 4.12 Finding the MAC address of a Network Card Page Page Appendix A - Troubleshooting Page Page Page Appendix B - Safety warnings B.1 Safety warnings B.1.1 Safety levels on the mains adapter unit B.1.2 Safety levels on the SAGEM F@st 1500 unit Appendix B - Safety warnings B.2 CE declaration of conformity Safety EMC Radio (specific to SAGEM F@st 1500WG) Page Page C.1 Ethernet cable C.1.1 Specifications C.1.2 Wiring Conventions C.1.3 RJ-45 Port Connection C.1.4 Pin Assignments General Straight-Through Wiring Crossover Wiring Page C.2.2 Wiring Conventions Page D. Appendix D - Technical specifications D.1 Mechanical Characteristics - Displays D.2 Electrical Characteristics ADSL Features Input Power D.3 Soft Component Features ATM Features Management Features Security Features LAN Features D.4 Radio Features RF Output Power Modulation Rate-Output Power (dBm) Modulation Rate-Output Power (dBm) Sensitivity Modulation Rate-Receiver 2.412 ~ 2.484 HGz Sensitivity (dBm) Modulation Rate-Receiver Sensitivity Typical (dBm) D.5 Environmental characteristics Internet Standards Page Page Appendix E - Default configuration E.1 Default user name and password Password Empty E.2 Default configuration on the local area network side E.3 Default configuration on the wide area network side Appendix E - Default configuration