18

301 Fulling Mill Road, Suite G

©Copyright 2006 by On-Q/Legrand, Inc All Rights Reserved.

Middletown, PA

17057

www.onqlegrand.com

(800)-321-2343

Some applications require multiple connections, such as Internet games, video conferencing,

Internet telephony and others. The Special Applications section (see

Figure 23

) allows you to

configure the router to support multiple connections for these types of applications.

If you need to run applications that require multiple connections, then specify the port (outbound)

normally associated with that application in the "Trigger Port" field. Then select the protocol type

(TCP or UDP) and enter the public ports associated with the trigger port to open them up for

inbound traffic.

Example:

ID

Trigger Port

Trigger Type

Public Port

Public Type

Comment

1

28800

UDP

2300-2400, 47624

TCP

MSN Game Zone

2

6112

UDP

6112

UDP

Battle.net

In the example above, when a user trigger’s port 28800 (outbound) for MSN Game Zone then the

router will allow incoming packets for ports 2300-2400 and 47624 to be directed to that user.

Note

: Only one LAN client can use a particular special application at a time.

The Port Mapping function (see

Figure 24

) allows you to re-direct a particular range of service

port numbers (from the Internet/WAN Ports) to a particular LAN IP address. It helps you to host

some servers behind the router NAT firewall.

Figure 23

19

301 Fulling Mill Road, Suite G

©Copyright 2006 by On-Q/Legrand, Inc All Rights Reserved.

Middletown, PA

17057

www.onqlegrand.com

(800)-321-2343

You can select ALG (see

Figure 25

) to enable “Application Layer Gateway” for an application and

then the router will let that application correctly pass though the NAT gateway. If you are having

trouble supporting VPN functionality, try selecting “PPTP passthrough”.

Figure 24

Figure 25

20

301 Fulling Mill Road, Suite G

©Copyright 2006 by On-Q/Legrand, Inc All Rights Reserved.

Middletown, PA

17057

www.onqlegrand.com

(800)-321-2343

If you have a local client PC that cannot run an Internet application (e.g. Games) properly from

behind the NAT firewall, then you can open the client up to unrestricted two-way Internet access

by defining a DMZ Host. The DMZ function (see

Figure 26

) allows you to re-direct all packets

going to your WAN port IP address to a particular IP address in your LAN. The difference

between the virtual server and the DMZ function is that the virtual server re-directs a particular

service/Internet application (e.g. FTP, websites) to a particular LAN client/server, whereas DMZ

re-directs all packets (regardless of services) going to your WAN IP address to a particular LAN

client/server.

E. Firewall Configuration

The Firewall selection of the On-Q Router provides an extensive array of firewall protection

capability by restricting connection parameters, thus limiting the risk of hacker attack, and

defending against a wide variety of common Internet attacks.

The Firewall Options selection screen (see

Figure 27

) enables the firewall to block common

hacker attacks, including Denial of Service, Ping of Death, Port Scan and Sync Flood.

If Internet

attacks occur the router can log the events.

Figure 26

Figure 27

21

301 Fulling Mill Road, Suite G

©Copyright 2006 by On-Q/Legrand, Inc All Rights Reserved.

Middletown, PA

17057

www.onqlegrand.com

(800)-321-2343

When you select the Client Filtering Option (see

Figure 28

), you can filter Internet access for

local clients based on IP addresses, application types, (i.e., HTTP port), and time of day.

With the URL Filtering Option (see

Figure 29

), you can block access to some Web sites from

particular PCs by entering a full URL address or just keyword of the Web site.

Figure 28

Figure 29

22

301 Fulling Mill Road, Suite G

©Copyright 2006 by On-Q/Legrand, Inc All Rights Reserved.

Middletown, PA

17057

www.onqlegrand.com

(800)-321-2343

You can also filter Internet access for local clients based on MAC Address (see

Figure 30

).

F. Routing Configuration

The “Routing” selection at the top of the page allows you to set up an internal static route on the

On-Q Router/Switch (see

Figure 31

) and check the current routing table (see

Figure 32

) . The

routing is only for internal routing use, so you do not need to disable any NAT function.

Figure 30

Figure 31

Figure 32