BreezeMAX PRO 6000 Product Manual

Chapter 6 - Setting Advanced Parameters

Security

54

To issue a Ping command, enter the destination address and click

Ping

. The response will be displayed

in the area below the Ping button.

To access the unit from WAN, use

https://CPE_WAN_IP_Address:8080

.

INFORMATION

The Enable Ping From Internet option is used for testing, therefore it is recommended to keep it disabled

during normal operation.

You can ping and receive a replay from the LAN network while ping is disabled. However, when this

option is disabled, you cannot ping from WAN to the unit.

BreezeMAX PRO 6000 Product Manual

Chapter 6 - Setting Advanced Parameters

Firewall

55

6.4

Firewall

The BreezeMAX PRO 6000 provides extensive firewall protection by restricting connection parameters to

limit the risk of intrusion and defending against a wide array of common hacker attacks. However, for

applications that require unrestricted access to the Internet, you can configure a specific client/server as

a demilitarized zone (DMZ).

The following configuration parameters are available:

NOTE!

Changes made on this page may affect your internet connection. If you notice an undesirable change

in your internet service after making a change to the firewall, you may want to return to the previous

setting.

Figure 6-3: Advance - Firewall

BreezeMAX PRO 6000 Product Manual

Chapter 6 - Setting Advanced Parameters

Firewall

56



Firewall

settings

»

Enable Firewall

- Select this check-box to enable or disable firewall.

»

Block Anonymous Internet Requests

- Select this check-box to reject anonymous Internet

requests.

»

Filter Multicast

- Select this check-box to filter out mutlicast packets.

»

Filter Internet NAT Redirection -

NAT Redirection is used to block access to the local server

from the local PC via unit’s WAN IP. If this feature is enabled, local PC can only access the local

server via unit’s LAN IP.

»

Filter IDENT (Port 113)

- Select this check-box to drop incoming packets from the unit WAN side

with destination port 113.



DMZ (“Demilitarized Zone”)

»

Enable DMZ -

Set a server that acts as a "neutral zone"and separates an internal network

from

a public one in order to prevent outside access to private data. The DMZ forwards the network

traffic to specific hosts based on the protocol and port number.

»

DMZ

- DMZ IP Address.



UPnP

-

Enable UPnP IGD

- Select this check-box to enable/disable Universal Plug and Play Internet

Gateway Device - a protocol that simplifies device connection and network implementation. When

this option is enabled, certain Windows applications would setup the port forwarding rule

dynamically.



VPN Passthrough -

Select one of the following security protocols to define the Virtual Private

Network traffic sessions.

»

Enable IPSec pass-through

- Internet Protocol Security. IPSec provides encrypted security

services at the IP layer, and enables to use encrypted tunnels /traffic between two hosts.

»

Enable PPTP pass-through

- Point to Point Tunneling Protocol. This protocol enables the

transfer of data packets of TCP / IP through a foreign network that is not based on these

protocols (by marking the packet with an address suited to the foreign network)

»

Enable L2TP pass-through

- Layer 2 Tunneling Protocol

,

an open standard with mutlivendor

interoperability and acceptance.

NOTE!

Do not change parameters in this page unless specifically instructed by your service provider.

BreezeMAX PRO 6000 Product Manual

Chapter 6 - Setting Advanced Parameters

MAC Filter

57

6.5

MAC Filter

You can block access to the Internet from clients on the local network by MAC addresses. In the MAC

Filter page you set MAC addresses to be filtered out by the security system. You can add addresses to

the filtered group or delete them, and also enable or disable filtering at different times.

The following configuration parameters are available:



Select

- Select this check-box to delete this entry.



MAC

- Enter the MAC address to be filtered.



Enabled

- Select this check-box to enable/disable filter for the specific MAC address.

Use the

Add

or

Del

buttons to add the address to the filtered group or clear it from the group. Click

Apply

to activate your changes.

Figure 6-4: Advance - MAC Filter

BreezeMAX PRO 6000 Product Manual

Chapter 6 - Setting Advanced Parameters

IP Filter

58

6.6

IP Filter

You can block access to the Internet from clients on the local network by specifying IP addresses and

TCP/UDP port numbers. You can configure up to five IP filters on the unit.

In the IP Filter page you set IP addresses to be filtered out by the security system. You can add addresses

to the filtered group or delete them. You can also enable or disable filtering at different times.

The following configuration parameters are available:



Select

- Select this check-box to delete this entry.



IP Range

- Specify an IP address or range on the local network. (Range: 192.168.254.1 to

192.168.254.254)



Port Range

- Enter the port range to be filtered



Protocol

- set the protocol to be filtered: TCP (default) or UDP.



Enabled

- Select this check-box to enable (default) or disable filtering for the specific table entry.

Use the

Add

or

Del

buttons to add the address to the filtered group or clear it from the group. Click

Apply

to activate your changes.

Figure 6-5: Advance - IP Filter