WF200

802.11g Wireless Router

41

Port-Based VLAN: each physical switch port is configured with an access list specifying membership

in a set of VLANs.

ATM VLAN-using LAN Emulation(LANE) protocol to map Ethernet packets into ATM cells and

deliver then to their destination by converting an Ethernet MAC address into an ATM address.

The key for the IEEE 802.1Q to perform the above functions is in its tags. 802.1Q-compliant switch

ports can be configure to transmit tagged or untagged frames. A tag field containing VLAN (and/or

802.1p priority) information can be inserted into an Ethernet frame. If a port has an 802.1Q-compliant

device attached (such as another switch), these tagged frames can carry VLAN membership

information between switches, thus letting a VLAN span multiple switches. However, it is important to

ensure ports with non-802.1Q-compliant devices attached are configured to transmit untagged frames.

Many NICs for PCs and printers are not 802.1Q-compliant. If they received a tagged frame, they will

not understand the VLAN tab and will drop the frame. Also, the maximum legal Ethernet frame size

for tagged frames was increased in 802.1Q (and its companion, 802.3ac) from 1518 to 1522 bytes. This

could cause network interface cards and older switches to drop tagged frames as “oversized”

Î

Assign VLAN PVID for each interface: You can assign ATM VC, Ethernet (LAN) port, and

Wireless LAN port’s PVID in this section.

Î

Define VLAN Group: Based on each VLAN group, you can configure each group’s VLAN setting.

You can configure up to 8 VLAN settings.

WF200

802.11g Wireless Router

42

6.6 ADSL

Select this option to set ADSL Mode and ADSL Type information.

ADSL Mode:

Select which mode your ADSL connection uses from the dropdown list.

The option has

Auto Sync-up, ADSL2+, ADSL2, G.DMT, T1.413, G.LITE

ADSL Type:

Select the ADSL type you use from the dropdown list. ANNEX A, ANNEX I, ANNEX

A/L, ANNEX M, ANNEX A/I/J/L/M

When you are done making changes, click on

SAVE

to save your changes.

WF200

802.11g Wireless Router

43

7. Access Management

7.1 ACL

Go to

Access Management

Æ

ACL

to enable remote management. Access Control Listing (ACL) is a

management tool that acts as a filter for incoming or outgoing packets, based on application. You may

use telnet or Web to remotely manage the ADSL Router. User just needs to enable Telnet or Web

browser and give it an IP address that wants to access the ADSL Router. The default IP 0.0.0.0 allows

any client to use this service to remotely manage the ADSL Router.

ACL:

There has

Activated

&

Deactivated

option. The default setting is

Deactivated

which means all

IP can access via router. If you choose

Activated

, you only can access via router by listed IP addresses.

ACL Rule Index:

Index number from 1 and up to 16.

Active:

Once you choose

Yes

then you can access the IP via router.

Application:

Each of these labels denotes a service that you may use to remotely manage the Router.

Choices are

Web, FTP, Telnet, SNMP, Ping, ALL

.

Interface:

Select the access interface. Choices are

WAN, LAN

and

Both.

For Example:

How to set your ACL?

1.

You must choose

Activated

to enable your ACL function.

2.

Select the ACL Rule Index number (up to 16 numbers)

3.

You can set the specific

Secure IP address

or set

0.0.0.0

for all IPs.

4.

Choose the

Application

which you want to access for this ACL Rule index.

5.

Select the

Interface

you want to access from.

6.

After all settings are ready, click

SAVE

and continue next ACL Rule Index setting.

WF200

802.11g Wireless Router

44

[Note]

1. You must set one ACL index to access your router via LAN interface. If you don’t, your

router cannot access other listed IP Address. (Refer to Index 1).

2. Remember! Once you have activated your ACL function, you only can access via router by

listed Secure IP Address.

7.2 Filter

The Router provides extensive firewall protection by restricting connection parameters to limit the risk

of intrusion and defending against a wide array of common hacker attackers. Go to

Access

Management

Æ

Filter

to set different IP filter rules of a given protocol (TCP, UDP, or ICMP) and a

specific direction (incoming, outgoing, or both) to filter the packets.

IP Filter is a more complex filtering tool, based more on IP and custom rules. Each of the indices can

hold six rules, and each interface can have four associated indices, allowing 24 rules per interface. If all

six rules in an index are Next rules, the data will be sent to the next index for filtering.

WF200

802.11g Wireless Router

45

Filter Type:

You can select

IP/MAC Filter

,

Application

, and

URL Filter

type.

IP/MAC Filter Set Index:

The IP/MAC Filter Set Index from 1 to 12 and each index can set up to 6 IP

Filter.

Interface:

Choices from

PVC0

to

PVC7

and

LAN

.

Direction:

Choices are

Both

,

Incoming

and

Outgoing

. Select which direction of data flow you wish to

apply the filters to.

Note

that

Incoming and Outgoing

are from the point of view of your router,

relative to the interface you select.

For WAN

, data coming from outside your system is considered

Incoming and data leaving your system is Outgoing.

For LAN

, data leaving your system is considered

Incoming and data entering your system is Outgoing.

IP/MAC Filter rule Index:

The IP/MAC Filter rule Index from 1 to 6.

IP/MAC Filter Rule Editing:

Select the IP/MAC Filter Rule Index you wish to modify.

Active:

Toggle this rule index on or off with Yes or No, respectively.

Source IP Address:

Enter the source IP address you wish to deny access to your system.

Subnet Mask:

Enter the subnet mask of the source IP address.

Port Number:

Enter the port number of the source IP address. Note that 0 means that all ports are

allowed.

Destination IP Address:

Enter the destination IP address that you wish to deny access to your system.

Subnet Mask:

Enter the subnet mask of the destination IP address

Port Number:

Enter the port number of the destination IP address. Note that 0 means that all ports are