Page 46 / 86 Scroll up to view Page 41 - 45
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
35
365-095-25781 x.1
Figure 33 – Firewall Parental Control Screen
5.
Enter a name for the user profile that you want to create in the Description field.
6.
Enter the 12-digit (hexadecimal) MAC address of the device for which you are creating Parental
Controls in the MAC Address field.
7.
Enter the web address of the Internet site that you want to block or access.
8.
Enter the Starting port number of the in the Start Port field.
9.
Enter the Ending port number of the in the End Port field.
10.
Select
TCP
,
UDP
, or
BOTH
from the Internet Protocol drop-down list.
11.
Select the days of the week that you want to allow the selected user to access the Internet.
12.
Select the time range that you want to allow the selected user to access the Internet.
13.
Select to
Allow
or
Block
Internet access for the time and days you set previously.
14.
Select
On
or
Off
in the Enabled field to enable or disable this Parental Control restriction.
15.
Click
Apply
, when done.
Page 47 / 86
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
36
365-095-25781 x.1
Set Up Port Triggers
You can use Port Triggers to configure dynamic triggers to specific devices on the LAN. This allows
special applications that require specific port numbers with bi-directional traffic to function properly.
Applications such as video conferencing, voice, gaming, and some messaging program features may
require these special settings.
Note
: If you enable the firewall and set up custom port triggers, then you must configure the firewall to allow
traffic through those custom ports. See
Set Up Firewall Protection
for more information.
To configure Port Triggers:
1.
Click
Advanced
on the SBG6700-AC Main Menu bar.
2.
Click
Port Triggers
from the Advanced submenu options.
Figure 34 – Advanced Port Triggers Screen
3.
Click
Create Port Triggers
button to open the Add Port Triggering Entry window.
Figure 35 – Create Port Triggers Screen
4.
Enter the starting port number for the port to be triggered in the Trigger Start Port field.
5.
Enter the ending port number for the port to be triggered in the Trigger End Port field.
6.
Enter the starting port number of the Port Trigger range in the Target Start Port field.
7.
Enter the ending port number of the Port Trigger range in the Target End Port field.
8.
Select
TCP
,
UDP
, or
BOTH
from the Internet Protocol drop-down list.
9.
Enter a unique name in the Description field.
10.
Select
On
to enable IP port triggers or
Off
to disable them.
Page 48 / 86
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
37
365-095-25781 x.1
11.
Click
Apply
to create your port triggers.
12.
Repeat steps 3 thru 11 for each additional port trigger that you want to create.
Set Up Port Forwarding
You can use Port Forwarding to set up a computer or other network device on your home network
(LAN) to be accessible to computers or other remote network devices on the Internet. This allows you to
open specific ports behind the firewall on your LAN to set up dedicated connections between your
computer and other remote computers for online gaming or other online services. Some allowable
services are predefined under the Commonly Forwarded Ports. See Figure 37 for a list of commonly
used port numbers.
Note
: It is recommended that you manually configure the TCP/IP settings listed below on the computer you
are setting up for remote access. Otherwise, remote access to your computer will not be available on the
Internet.
IP address
Subnet mask
Default gateway
DNS address (at least one)
To set up Port Forwarding:
1.
Click
Advanced
on the SBG6700-AC Main Menu bar.
2.
Click
Port Forwarding
from the Advanced submenu options.
Note
: To map a port, you would enter the range of port numbers that you want forwarded locally and
the IP address for sending traffic to those ports. If you only want a single port specification, enter the
same port number in the start and end locations for that IP address.
Figure 36 – Advanced Port Forwarding Screen
3.
Do either of the following to set up the External IP Address:
ο
Keep the IP Address set at
0.0.0.0
in the External IP Address field and then enter the port
number in the Start Port field. Repeat the same port number in the End Port field (select a
specific port from the Commonly Forwarded Ports drop-down list or see Figure 37 for the list).
This allows incoming data traffic on the specified ports from
any
remote IP address.
Page 49 / 86
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
38
365-095-25781 x.1
ο
Enter a specific remote IP address of your choice in the External IP Address field and then enter
the specific port numbers in the Start and End Port fields (select a specific port from the
Commonly Forwarded Ports drop-down list or see Figure 37 for the list).
This allows incoming data traffic on the specified ports from only
one
remote IP address.
Note
: To forward a range of ports, enter the first number of the port range in the Start Port field and
the last number of the port range in the End Port field.
4.
Do the following to set up your Local IP Address:
a.
Enter the IP address of your local computer that you are setting up for port forwarding.
b.
Enter the port number of your choice in the Start Port field. Repeat the same port number in
the End Port field (select a specific port from the Commonly Forwarded Ports drop-down list or
see Figure 37 for the list).
Note
: To forward a range of ports, enter the first number of the port range in the Local Start Port
field and the last number of the port range in the Local End Port field.
5.
Enter a description to name the forwarded port you are creating.
6.
Select
TCP
,
UDP
, or
BOTH
from the Internet Protocol drop-down list.
7.
Select
On
to enable port forwarding or
Off
to disable it.
8.
Click
Apply
.
Figure 37 – Commonly Used Forwarded Ports List
Page 50 / 86
Protecting & Monitoring Your Wireless Network
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
39
365-095-25781 x.1
Set Up the DMZ Host
WARNING!
The gaming DMZ host is not protected by the SBG6700-AC gateway firewall.
It is exposed to the Internet and thus vulnerable to attacks or hacking from any computer
on the Internet. Consider carefully before configuring a device to be in the DMZ.
You can configure one computer on your home network to be the DMZ Host. That computer will
operate outside of the SBG6700-AC firewall and allow remote access from the Internet to your
computer, gaming device, or other IP-enabled device. The DMZ Host feature will only allow outside
users to have direct access to the designated DMZ Host device and not your home network. See
DMZ
Host
for more information.
To create the DMZ Host:
1.
Click
Advanced
on the SBG6700-AC Main Menu bar.
2.
Click
DMZ Host
from the Advanced submenu options.
Figure 38 – Advanced DMZ Host Screen
3.
Enter the last one to three digits (from
2
to
254
) of the IP address of the computer or gaming device
that you are setting up as the DMZ host.
4.
Click
Apply
.
Note
: Remember to reset the IP address back to
0
(zero) to close all the ports when you are finished with the
needed application. If you do not reset the IP address, that computer will be exposed to the public Internet.
Store Remote Firewall Logs
You can store firewall attack reports or logs on a computer in your home, so that multiple instances can
be logged over a period of time. You can select individual attack or configuration items to send to the
SysLog server, so that only the items of interest will be monitored.
Note
: The SysLog server must be on the same network as the Private LAN behind the Configuration Manager
(typically
192.168.0.x
).
To store remote Firewall logs:
1.
Click the
Firewall-Remote Log
menu link or click the Firewall menu button on the SBG6700-AC
Main Menu and then select
Remote Log
.

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top