Manuals / Technicolor - Thomson / Computer Equipment / Network Router

Technicolor - Thomson 605, 620 Firewall, Chapter, Click, “5.3.2 Expressions” on page, Policy

Models: 608 608 WL 605 620

1 212

Download 212 pages 50.78 Kb

Page 177

Image 177

Chapter 5

Expert Configuration

5.6 Firewall

Overview The Firewall menu consists of the following topics:

Click ...	To ...

Expressions	view/configure interface, or IP, or Service related
	expressions. For more information, see
	“5.3.2 Expressions” on page 125.

Policy	view/configure the SpeedTouch™ Stateful
	Inspection Firewall security level and its policies.

Log	view log messages for SpeedTouch™ firewall
	events.

E-DOC-CTC-20050429-0104 v1.0	167

Page 177

Image 177

Technicolor - Thomson 605, 620, 608 WL manual Firewall, Chapter, Click, “5.3.2 Expressions” on page, Policy

Contents

SpeedTouch 605/608/608 WL/620 Wireless Business DSL RoutersUser’s Guide Release R5.3.1Page User’s Guide R5.3.1 SpeedTouch 605/608 608 WL/620Trademarks CopyrightDocument Information Status v1.0 May Reference E-DOC-CTC-20050429-0104Local Network Setup ContentsContents About this User’s GuideContents Basic ConfigurationContents Expert Configuration5.2.1 ContentsTroubleshooting Software Upgrade6 Software Keys ContentsE-DOC-CTC-20050429-0104 ContentsDocumentation and software updates Used SymbolsAbout this User’s Guide About this User’s GuideE-DOC-CTC-20050429-0104 About this User’s GuideChapter 1 Your SpeedTouchHardware Specifications Software Features 1.1 SpeedTouch FeaturesChapter E-DOC-CTC-20050429-01041.1.1 Hardware SpecificationsPhysical interfaces Memory and CPUATM features Software FeaturesBridging features Routing featuresChapter Chapter Management and monitoring VoIP1.2 SpeedTouch LED Behaviour IndicatorDescription NameIndicator LED StatusIndicator ChapterAccess Method 1.3 How to Access your SpeedTouchCan be used to ChapterChapter 1.3.1 Access via the Web InterfaceCommand Line Interface CLI 1.3.2 Access via CLIFor more information, see “ Quote site command” on page ChapterChapter 2 Select All Programs Accessories Command PromptFile Transfer Protocol FTP 1.3.3 Access via FTP1 Open a Command Prompt window 2 Select All Programs Accessories Command PromptCommand Common FTP commandsYou can use to Access rightsChapter 331 SpeedTouch 00-90-D0-01-02-03 User doejohn OK. Password requir ed1.3.4 Remote Assistance Disabling remote access3 Click Enable Remote Assistance 3 Click Disable Remote Assistance2 Local Network Setup Chapter2 In the menu select Home Network Devices 2.1 Wired Ethernet For more information, see “ Device settings” on pageChapter Chapter 2.2 Wireless EthernetRegulatory Domain 2.2.1 Wireless BasicsAllowed Radio Channels ChapterChapter AntennasWireless default settings Preparing first-time wireless clients 2.2.2 Connecting First-time Wireless ClientsConfiguring first-time wireless clients First-time association example2 The Wireless Network Connection window appears ChapterClick Connect Anyway Chapter Wireless device settings2.2.3 Wireless Security ChapterName SSID Chapter Registering clients via web pages 2.2.4 Connecting Additional Wireless Clients3 Under Pick a task..., click Search for wireless devices 7 Click Configure 8 Select Allowed on WLAN and click ApplyChapter Registering clients via association button2.2.5 Extending the Range of Your Wireless Network ChapterWDS Link 6 Select WDS Enabled 7 In the Pick a task... list, click Scan for wireless access pointsChapter Dial-in method 3 Internet Connectivity Dial-In Clientscan be used on For more informationEmbedded PPP dial-in clients Broadband host PPPoE dial-in clients ChapterSee “3.1 SpeedTouch Web Pages” on page 35 to proceed Introduction Starting an Internet session 3.1 SpeedTouch Web PagesMonitoring your Internet connection ChapterTerminating an Internet session ChapterE-DOC-CTC-20050429-0104 Starting an Internet IGD Control Agentsession 2 Select Settings Control PanelChapter Internet connection status Terminating an Internet session3.3 MS Windows XP BroadBand Connection Prerequisites Configuring a broadband connection1 On the Start menu, click Settings Control Panel 5 Select Set up my connection manually and click NextChapter Starting a broadband Internet session ChapterNetwork and Dial-up connections YourISP Terminating a broadband Internet session Chapter3 Click Disconnect Prerequisites Configuring a broadband connection 3.4 Mac OS X PPPoE Dial-in ClientChapter 1 On the Apple menu, click System PreferencesStarting a broadband Internet session ChapterTerminating a broadband Internet session 3 Click Disconnect4 Basic Configuration Basic and Expert Mode SpeedTouch documentationChapter Chapter 4.1 NavigationMenu Language Bar Navigation Bar Notification Area Tasks Navigation barCollapsing and expanding the menu 4.1.1 MenuExpert Configuration Mode ChapterChapter 4.1.2 Language BarChapter 4.1.3 Navigation Bar4.1.4 Notification Area ChapterE-DOC-CTC-20050429-0104 4.1.5 Tasks ChapterE-DOC-CTC-20050429-0104 SpeedTouch home page 4.2 HomeChapter SpeedTouch Broadband Connection Toolbox Office NetworkInformation Configuration Event Logs Update 4.3 SpeedTouchConfiguration Chapter4.3.1 Information ChapterE-DOC-CTC-20050429-0104 2 In the Pick a task... list, click Set up 4.3.2 SpeedTouch Easy SetupChapter E-DOC-CTC-20050429-01044.3.3 Accessing the RestartRestart pageChapter 4.3.4 ConfigurationAccessing the Backup & Restore page 4.3.5 Backup & RestoreSaving your current configuration Restoring a previously saved configurationAccessing the Reset to Factory Defaults page 4.3.6 Reset to Factory DefaultsResetting the SpeedTouch to factory defaults ChapterIndicator Description 4.3.7 Event LogsChapter 4.3.8 Update Updating the SpeedTouch system softwareChapter The Broadband Connection menu The Broadband Connection page 4.4 Broadband ConnectionInternet Services Chapter4.4.1 Connectivity Check Introduction Accessing the Connectivity Check pageChecking you Internet Connectivity Analysing the test results ChapterChapter 4.4.2 DSL ConnectionChapter 4.4.3 Internet ServicesAccessing the Internet Internet Service SettingsService Settings page 4.4.4Chapter 4.5 ToolboxRemote Assistance Game & Application Sharing2 Click Enable Remote Assistance 4.5.1 Remote AssistanceURL Username Password ChapterChapter 4.5.2 Game & Application Sharing4.5.3 Defined Games & Applications Accessing the Defined Games & Applications pageThe Defined Games & Applications page ChapterConfigure Under Accessing the Game or Application Definition page Overview4.5.4 Game or Application Definition Adding a Port Translation rule4.5.5 New Game or Application Accessing the Game or Application DefinitionCreating a new game or application ChapterDeny access to a specific web site 4.5.6 Web Site FilteringAllow access to a specific web site Redirect a web site Configure content based filtering settingsAllow access to a specific web site Redirect a web site Deny access to a specific web siteChapter Allow is selected under Action for Unknown SitesUnder Content Based Filtering you are able to Redirecting all web sites Configure content based filtering settingsChapter 2 Click Redirect in the Action list4.5.7 Web Filtering Activation Accessing this page Proceed as followsWeb Filtering Activation page Standard license activation ChapterIcon Description 4.5.8 Content LevelAccessing this page Proceed as follows 1 On the Toolbox menu, click Parental Control 2 Click ConfigureContent level creation Proceed as follows 4.5.9 New Content LevelContent level configuration Content level definition 3 Under Pick a task..., click Create a new content levelChapter 1 On the Toolbox menu, click Parental ControlE-DOC-CTC-20050429-0104 Disabled 4.5.10 FirewallChapter MediumChapter 4.5.11 Intrusion Detection4.5.12 Dynamic DNS 2 On the Dynamic DNS page, click ConfigureChapter 4.5.13 User Management ChapterE-DOC-CTC-20050429-0104 4.5.14 Edit User Accessing the User Edit page Editing a user accountChapter 1 On the Toolbox menu, click User ManagementChanging the default 4.5.15 Change Default Useruser ChapterChapter 4.5.16 Add UserChapter 4.6 Office NetworkDevices InterfacesChapter 4.6.1 DevicesAccessing the device settings page Overview 4.6.2 Device SettingsChapter 1 On the Office Network menu, click Devices4.6.3 Assign Public IP Accessing the Assign Public IP pageAssigning the public IP address to a device ChapterAccessing the wireless device settings page Overview 4.6.4 Wireless Device SettingsChapter 1 On the Office Network menu, click DevicesAccessing the Access Access Point SettingsPoint settings 4.6.5Broadcast Network Name ChapterAllow New Devices EncryptionRegistering new wireless clients WPA-PSK Access control on the SpeedTouchFor more information, see “ Registering new wireless clients” on page 2 Under Pick a task..., click Search for wireless devicesAccessing the WDS page SpeedTouch configuration 4.6.6 Configuring WDS3 Click Configure 4 Under Pick a task... list, click Configure WDS 1 Under Pick a task..., click Scan for wireless accesspoints4.6.7 Interfaces ChapterE-DOC-CTC-20050429-0104 Assigning a new IP address to the SpeedTouch 4.6.8 Interface SettingsChapter Under IP Addresses4.6.9 DHCP Pool Accessing the DHCP Pool page3 Click Configure ChapterChapter The DHCP Pool pageInterface Start AddressBasic Configuration ChapterE-DOC-CTC-20050429-0104 Click 5 Expert ConfigurationConfiguration ChapterClick Chapter5.1 Home ChapterE-DOC-CTC-20050429-0104 Easy Setup 5.2 SpeedTouchDiagnostics System UpdateChapter 5.2.1 Easy SetupIf result is 5.2.2 System InformationThen Diagnostics DSL Line Info Configuration SystemChapter SystemProduct Name Software Release Board Name Serial Number Product Code5.2.3 Connections Start/stop PPP sessionsChapter If the status is 5.2.4 DiagnosticsChapter ThenMessages Configuration 5.2.5 SyslogChapter SeverityChapter Facility SeveritySystem configuration System Upgrade 5.2.6 System UpdateSee “ Manage configuration files” on page 113 for more information ChapterManage configuration files Manage language packs Chaptersee “4.1.2 Language Bar” on page Switch to another system software version System Upgrade Upload system softwareUpload system software Switch to another system software version ChapterView detailed SpeedTouch service information 5.2.7 SpeedTouch ServicesEdit SpeedTouch service properties Chapter2 In Service properties Edit SpeedTouch service properties5 In Accept service from Remote IP, optionally ChapterIndicates a SpeedTouch service that TypeChapter 5.2.8 SNTP ChapterSNTP Client Manual 5.2.9 SLA Modify ping test propertiesChapter Expert Configuration Ping tests and results To start/stop a ping test ChapterDelete the entry see Add/delete a traceroute test Add/delete a traceroute test Modify traceroute test properties traceroute tests and resultsChapter Chapter 5.2.10 Add-onChapter 5.3 IP RouterClick IP Addresses5.3.1 IP Addresses Add/change an IP addressChapter related expression 5.3.2 ExpressionsIP Service ChapterAdding a service related expression Adding an IP related expressionChapter Chapter 5.3.3 ClassificationChapter ServiceIndex Name5.3.4 IP Routing Adding an IP route To add an IP routeChapter 5.3.5 RIP Configuration Interfaces NeighboursChapter Access list 5.3.6 NATChapter Interfaces Mappings TemplatesAccess list Creating a NAT mapping Templates Creating a NAT templateChapter InterfaceChapter 5.3.7 IP QoSChapter WFQ queue WeightName StateChapter 5.4 ConnectionsClick Routed PPPoE5.4.1 ATM Connection Service Name Virtual Channel Identifiers VPI and VCIChapter Phonebook QoS Book InterfacesChapter QoS Book InterfacesName txctdPPPoE connection entry 5.4.2 Routed PPPoEChapter Routing OtherChapter Other StatisticsMode Manually5.4.3 Routed PPPoA Additional configuration RoutingIntroduction Creating a Routed PPPoA connection entry ChapterOther Statistics ChapterMode ManuallyRouted PPPoI 5.4.4Availability IntroductionOther Statistics ChapterMode Manually5.4.5 Bridged Ethernet ChapterBridged Ethernet VLAN Chapter Add a new Bridge port VLAN VLAN interface overviewChapter VLAN interface configurationChapter 5.4.6 Routed EthernetCreating a new Routed IPoA Ethernet Interface Generated IP routes 5.4.7 Routed IPoAChapter Interface NameChapter 5.4.8 PPTP-to-PPP RelayChapter 5.4.9 Virtual LANManaged Switch 5.5 Local NetworkingWireless ChapterServer Config 5.5.1 DHCPChapter DHCP ServerChapter Server LeasesClient ID AddressChapter Address Pools Address pool typesName InterfaceRelay Config ChapterRelay Interfaces Interface Chapterinit requestingConfiguration Hostname Table 5.5.2 DNSChapter Server and ApplyOverview Managed Ethernet Switch 5.5.3 Managed SwitchChapter StateChapter Mirror ConfigurationChapter 5.5.4 WirelessInteroperability Mode Access point settingsWireless interface enabled ChapterChannel Network Name SSID Network Name broadcast Interoperability ModeChapter 1 In the Channel Selection list, click auto1 Clear wireless interface enabled Enable/disable the wireless interface Security1 Select Wireless interface enabled Access Control settings1 Select Security Level 1 - WEP Chapter64 bits, Alphanumeric 64 bits, HexadecimalChapter Access ControlScan for Other Networks ChapterChapter 5.6 FirewallClick ExpressionsDisabled 5.6.1 PolicyChapter BlockAllButtons Loose UDP tracking Game & Application Sharing Allowed Proxying allowedChapter Service Creating a firewall ruleFlags Enable Reset5.6.2 Log ChapterE-DOC-CTC-20050429-0104 Chapter 5.7 VPNClick LAN to LANConfiguration procedure 5.7.1 LAN to LANChapter Configuration procedure 5.7.2 VPN ClientChapter 1 Select VPN VPN Client5.7.3 VPN Server The SpeedTouch as VPN Server Configuration procedureChapter 1 Select VPN VPN ServerChapter 5.7.4 CertificatesChapter 5.7.5 Advanced1 Browse to Expert mode VPN Debug Logging 5.7.6 Debug4 Browse again to Expert mode VPN Debug Logging Chapter1 On the SpeedTouch menu, click SpeedTouch Services 5.8 SIP PBXGeneral Location Service Call Logging Call Screening ChapterChapter 6 Software Keys How to activate a Software module2 Select Expert Mode SpeedTouch Add-On ChapterChapter Introduction System software upgrades availability 7 Software UpgradeSystem software packages and security Chapter1 Click Check For Updates 7.1 Embedded Update Page2 In the Pick a task... list, click Update software ChapterFrom a PC Chapter1 Click SpeedTouch Support Site Introduction Starting the Upgrade Wizard 7.2 Upgrade Wizard on Setup CD7 See “ Upgrade procedure” on page 187 to continue Chapter1 In the Welcome to the SpeedTouch Upgrade Wizard window, click Next Upgrade procedurewindow appears, refer to “8.1.3 Upgrade Troubleshooting” on page ChapterChapter System software downgrade7.3 Upgrade via a BOOTP/TFTP Server SpeedTouch system software managementChapter Chapter =software upgradeChapter 8 Troubleshooting8.1 General SpeedTouch Troubleshooting SpeedTouch does not work SpeedTouch unreachableChapter LAN LED does not light up 8.1.1 Wired Ethernet TroubleshootingChapter E-DOC-CTC-20050429-0104Not able to connect wireless clients 8.1.2 Wireless Ethernet TroubleshootingNo wireless connectivity Make sure that Poor wireless connectivity or reachMessage 8.1.3 Upgrade TroubleshootingDue to ChapterChapter Upgrade via Setup CDSpeedTouch not detected by UPnP or IGD Control Client Adding UPnP 8.2 UPnP on Windows XP Systems1 On the Start menu, click Settings Control Panel Chapter2 Select Settings Control Panel Add or Remove Programs Adding IGD Discovery and ControlSelect Networking Services in the Components list and click Details ChapterResetting your SpeedTouch 8.3 Reset to Factory DefaultsHardware reset Software reset ChapterChapter 2 In the menu select SpeedTouch ConfigurationPage THOMSON All rights reserved Need more help?C-20050429 -0104 E-DOC -CT

5.6 Firewall

“5.3.2 Expressions” on page 125.

Policy