Page 86 / 126 Scroll up to view Page 81 - 85
85
If you wish to restart the router using the factory default settings (for example, after a
firmware upgrade or if you have saved an incorrect configuration), select
Factory Default
Settings
to reset to factory default settings.
You may also reset your router to factory settings by holding the small Reset pinhole button
more than 6 seconds on the back of your router.
Caution: After pressing the RESET button for more than 6 seconds and release it, the
system will be restarted with the factory setting.
5.3.3.5 User Management
In order to prevent unauthorized access to your router’s configuration interface, it requires
all users to login with a password. You can set up multiple user accounts, each with their
own password.
You are able to
Edit
existing users and
Add
new users who are able to access the device’s
configuration interface. Once you have clicked
Edit
on the account you want to edit
,
the
information of the account will be displayed above. Just go ahead and change the
password.
You can change the user’s
password
, whether their account is active and
Valid
. These
options are the same when creating a user account, with the exception that once created
you cannot change the username. You cannot delete the default admin account; however
you can delete any other created accounts by clicking ticking the box under
Delete
and
then press the
Edit/Delete
button.
You are strongly advised to change the password on the default “
admin
” account when you
receive your router, and any time you reset your configuration to Factory Defaults.
Page 87 / 126
86
When using Virtual Servers (port mapping) your PCs are exposed to the
ports specified opened in your firewall packet filter settings.
5.3.4 Firewall
Firewall and Access Control
Your router includes a full SPI (Stateful Packet Inspection) firewall for controlling Internet
access from your LAN, as well as helping to prevent attacks from hackers. In addition to
this, when using NAT (Network Address Translation) the router acts as a “natural” Internet
firewall, since all PCs on your LAN use private IP addresses that cannot be directly
accessed from the Internet. See the
WAN
configuration section for more details on NAT.
Firewall
: Prevents access from outside your network.
NAT natural firewall
: This masks LAN users’ IP addresses, which are invisible to outside
users on the Internet, making it much more difficult for a hacker to target a machine on your
network. This natural firewall is on when the NAT function is enabled.
Firewall Security and Policy (General Settings)
: Inbound direction of Packet Filter rules
Page 88 / 126
87
prevent unauthorized computers or applications accessing your local network from the
Internet.
Intrusion Detection
: Enable Intrusion Detection to detect, prevent, and log malicious
attacks.
MAC Filter rules
: Prevents unauthorized computers accessing the Internet.
URL Filter
: Blocks PCs on your local network from unwanted websites.
A detailed explanation of each of the following five items appears in the
Firewall
section
below:
Packet Filter
,
MAC Address Filter, Intrusion detection, Block WAN PING
and
URL Filter.
5.3.4.1 Packet Filter
Packet filtering enables you to configure your router to block specified internal/external
users (
IP address
) from Internet access, or you can disable specific service requests (
Port
number
) to /from Internet. This configuration program allows you to set up to 6 different
filter rules for different users based on their IP addresses or their network Port number. The
relationship among all filters is
“or”
operation, which means that the router checks these
different filter rules one by one, starting from the first rule. As long as one of the rules is
satisfied, the specified action will be taken.
Page 89 / 126
88
Rule Name:
Users-define description to identify this entry. The maximum name length
is 32 characters, and then can choose application that they want from listbox.
Internal IP Address / External IP Address:
This is the Address-Filter used to allow or
block traffic to/from particular IP address(es). Input the range you want to filter out. If you
leave empty or 0.0.0.0, it means any IP address.
Protocol:
Specify the packet type (TCP, UDP, ICMP, etc.) that the rule applies to.
Select
TCP
if you wish to search for the connection-based application service on the
remote server using the port number. Or select
UDP
if you want to search for the
connectionless application service on the remote server using the port number.
Action:
If a packet matches this filter rule,
Forward (allows the packets to pass)
or
Drop (disallow the packets to pass)
this packet.
Internal Port:
This Port or Port Range defines the ports allowed to be used by the
Remote/WAN to connect to the application. Default is set from range
0 ~ 65535.
It is
recommended that this option be configured by an advanced user.
External Port:
This is the Port or Port Range that defines the application.
Direction:
Determine whether the rule is for outgoing packets or for incoming packets.
Time Schedule:
It is self-defined time period. You may specify a time schedule for your
prioritization policy. For setup and detail, refer to
Time Schedule
section.
Log:
Choose “log” if you wish to generate logs when the filer rule is applied to a packet.
Add:
Click this button to add a new packet filter rule and the added rule will appear at
the bottom table.
Edit:
Check the Rule No. you wish to edit, and then click “Edit”.
Delete:
Check the Rule No. you wish to delete, and then click “Delete”.
Page 90 / 126
89
5.3.4.2 MAC Filter
A MAC (Media Access Control) address is the unique network hardware identifier for each
PC on your network’s interface (i.e. its Network Interface Card or Ethernet card). Using your
router’s MAC Address Filter function, you can configure to block specific machines from
accessing your LAN.
There are no pre-defined MAC address filter rules; you can add the filter rules to meet your
requirements.
MAC Address:
Enter the MAC addresses you wish to manage.
Time Schedule:
It is self-defined time period. You may specify a time schedule for your
prioritization policy. For setup and detail, refer to
Time Schedule
section.
If the DHCP server option is enabled, you must be very careful in
assigning IP addresses of a filtered private IP range to avoid conflicts
because you do not know which PC in the LAN is assigned which IP
address. The easiest and safest way is that the filtered IP address is
assigned to a specific PC that is not allowed to access an outside resource
such as the Internet. You configure the filtered IP address manually for this
PC, but it stays in the same subnet with the router.
Attention

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top