30

Note

: Individual port numbers are separated by a comma (e.g. 47624, 5775, 6541

etc.). To input a port range use a “dash” to separate the two port number range (e.g.

2300-2400)

Trigger Type

Select whether the outbound port protocol is “TCP”, “UDP” or both.

Trigger Start/Finish Range

This is the out-going (Outbound) range of port numbers for this particular

application

Enable

Enable the specified Special Application function.

Click <

Apply>

at the bottom of the screen to save the above configurations. You can now configure other advance

sections or start using the router (with the advance settings in place)

Example: Special Applications

If you need to run applications that require multiple connections, specify the port (outbound) normally associated with

that application in the "Trigger Port" field. Then select the protocol type (TCP or UDP) and enter the public ports

associated

with

the

trigger

port

to

open

them

up

for

inbound

traffic.

Example:

Name

Incoming

Type

Incoming Port Range

Trigger

Type

Trigger

Start

Port

Trigger

Finish

Port

Enable

MSN

Game

Zone

TCP

2300-2400, 47624

UDP

28800

28800

MSN

Game

Zone

Battle.net

UDP

6112

UDP

6112

6112

Battle.net

In the example above, when a user trigger’s port 28800 (outbound) for MSN Game Zone then the router will allow

incoming packets for ports 2300-2400 and 47624 to be directed to that user.

Note

: Only one LAN client can use a particular special application at a time.

2.5.3 ALG Settings

You can select applications that need “Application Layer Gateway” to support.

Downloaded from

www.Manualslib.com

manuals search engine

31

Parameters

Description

Enable

You can select to enable “Application Layer Gateway”, then the router will let that application

correctly pass though the NAT gateway.

Click <

Apply>

at the bottom of the screen to save the above configurations. You can now configure other advance

sections or start using the router (with the advance settings in place)

2.5.4 UPnP Settings

With UPnP, all PCs in you Intranet will discover this router automatically. So you do not have to do any configuration for

your PC and can access the Internet through this router easily.

Parameters

Description

UPnP Feature

You can Enable or Disable UPnP feature here. After you enable the UPnP feature, all

client systems that support UPnP, like Windows XP, can discover this router

automatically and access the Internet through this router without any configuration.

The NAT Traversal function provided by UPnP can let applications that support UPnP

smoothly connect to Internet sites without any incompatibility problem due to the

NAPT port translation.

Click <

Apply>

at the bottom of the screen to save the above configurations. You can now configure other advance

sections or start using the router (with the advance settings in place)

Downloaded from

www.Manualslib.com

manuals search engine

32

2.5.5 Static Routing

This router provides Static Routing function when NAT is disabled. With Static Routing, the router can forward packets

according to your routing rules. The IP sharing function will not work anymore in Static Routing mode.

Note:

The DMZ function of firewall will not work if static routing is enabled.

Parameter

Description

Route

The network address of destination LAN.

Route Mask

The subnet mask of destination LAN.

Next Hop IP

The next stop gateway of the path toward the destination LAN. This is the IP of the

neighbor router that this router should communicate with on the path to the destination

LAN.

Interface

The interface that go to the next hop (router).

Click <

Apply>

at the bottom of the screen to save the above configurations. You can now configure other advance

sections or start using the router (with the advance settings in place)

2.6 Firewall

The Broadband router provides extensive firewall protection by restricting connection parameters, thus limiting the risk of

hacker attack, and defending against a wide array of common Internet attacks. However, for applications that require

unrestricted access to the Internet, you can configure a specific client/server as a Demilitarized Zone (DMZ).

Note

: To enable the Firewall settings select

Enable

and click

Apply

Downloaded from

www.Manualslib.com

manuals search engine

33

Parameters

Description

2.6.1 Access Control List

Access Control List allows you to specify which hosts users can or cannot have

access to certain Internet applications

2.6.2 URL Filter

URL Filter allows you to specify which URLs can’t be accessed by users.

2.6.3 Anti-DoS

The Broadband router's firewall can block common hacker attacks and can log

the attack activities.

2.6.4 DMZ Host

The DMZ Host function allows you to re-direct all packets going to your WAN port

IP address to a particular IP address in your LAN.

Click on one of the firewall selections and proceed to the manual’s relevant sub-section

2.6.1 Access Control List

If you want to restrict users from accessing certain Internet applications/services (e.g. Internet websites, email, FTP etc.),

this is the place to set that configuration. Access Control allows users to define the traffic type permitted in your LAN. You

can control which PC client can have access to these services.

Parameters

Description

Policy

User can choose to log or not to log packets which match any configured ACL.

Direction/IP

Ingress means packets from LAN to Gateway and Egress means packets from Gateway to

WAN. Pay special attention to the “egress, source ip/port” direction group. The source ip

address of an lan-to-wan packet will be already changed to gateway’s public ip address.

That means if you created a system-wise egress rule, please specifying the Gateway WAN

ip address as the source IP.

Type

Specify the traffic type here. You can pick TCP for TCP traffic, UDP for UDP traffic, or IP for

all kind of IP traffic.

Port

Specify the TCP/UDP port number for filtered traffic.

Downloaded from

www.Manualslib.com

manuals search engine

34

Day/Time

You can select a range of day and time that the specified PCs will not able to access the

Internet on these time period.

Enable

You can Enable/Disable some policies by check their enable checkbox.

You can now configure other advance sections or start using the router (with the advance settings in place)

Example: Access Control List

In the example below, LAN client A can only access websites that use Port 80. However, LAN client B is able to access

websites and any other service that uses ports between 80 and 999.

2.6.2 URL Filter

You can block access to some Web sites from particular PCs by entering a full URL address or just keyword of the Web

site.

Parameters

Description

URL String Pattern

You can enter the full URL address or the keyword of the web site you want to block.

Source IP Range

You can specify a range of LAN PCs that apply to the URL filter feature.

Enable URL Blocking

Check the check box to Enable URL Blocking

You can now configure other advance sections or start using the router (with the advance settings in place)

Downloaded from

www.Manualslib.com

manuals search engine