CRADLEPOINT

MBR1200 | USER MANUAL Firmware ver. 1.6.12

© 2010

CRADLEPOINT, INC.

PLEASE VISIT

HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/

FOR MORE HELP AND RESOURCES

PAGE 59

5.10.2

Add Traffic Shaping Rule

A Traffic Shaping Rule identifies a specific message flow and

assigns a priority to that flow. For most applications, automatic

classification will be adequate, and specific Traffic Shaping Rules

will not be required.

Traffic Shaping supports overlaps between rules, where more than

one rule can match for a specific message flow. If more than one

rule is found to match the rule with the highest priority will be used.

Enable.

Specifies whether the entry will be active or inactive.

Name.

Create a name for the rule that is meaningful to you.

Priority.

The priority of the message flow is entered here--1

receives the highest priority (most urgent) and 255 receives the

lowest priority (least urgent).

Protocol.

The protocol used by the messages.

Local IP Range.

The rule applies to a flow of messages whose LAN-side IP address falls within the range set here.

Local Port Range.

The rule applies to a flow of messages whose LAN-side port number is within the range set here.

Remote IP Range.

The rule applies to a flow of messages whose WAN-side IP address falls within the range set here.

Remote Port Range.

The rule applies to a flow of messages whose WAN-side port number is within the range set here.

Save/Update.

Record the changes you have made.

Clear.

Re-initialize this area of the screen, discarding any changes you have made.

When you are done editing the settings, you must click the

Save Settings

button at the top of the page to make the changes effective and

permanent.

(continued)

CRADLEPOINT

MBR1200 | USER MANUAL Firmware ver. 1.6.12

© 2010

CRADLEPOINT, INC.

PLEASE VISIT

HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/

FOR MORE HELP AND RESOURCES

PAGE 60

5.10.3

Traffic Shaping Rules List

This section lists all the defined Traffic Shaping Rules. Click the

Enable

check box at the left to directly activate or de-activate the

entry. An entry can be changed by clicking the

Edit

icon or can

be deleted by clicking the

Delete

icon. When you click the

Edit

icon, the item is highlighted, and the

Traffic Shaping Rules List

section is activated for editing

After you‟ve completed all modifications or deletions, you must click the

Save Settings

button at the top of the page to save your changes. The

router must reboot before new settings will take effect. You will be prompted to

Reboot the Device

or

Continue

. If you need to make additional

settings changes, click

Continue

. If you are finished with all configuration settings, click the

Reboot the Device

button.

CRADLEPOINT

MBR1200 | USER MANUAL Firmware ver. 1.6.12

© 2010

CRADLEPOINT, INC.

PLEASE VISIT

HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/

FOR MORE HELP AND RESOURCES

PAGE 61

5.11 Virtual Server

The Virtual Server option gives Internet users access to services on a LAN. This

feature is useful for hosting online services such as

FTP

,

Web

, or

Game

Servers

. For each Virtual Server, the user defines a public port on the router for

redirection to an internal LAN IP Address and LAN port.

5.11.1

Add Virtual Server Rule

Enable.

Click the check box to enable (default = No Virtual Server rules).

Name.

Name of the virtual server, such as

Web Server

. Several well-known

types of virtual server are available from the "Application Name" drop-down list.

Selecting one of these entries fills some of the remaining parameters with

standard values for that type of server.

IP Address.

The IP address of the system on your internal network that will

provide the virtual service, such as

192.168.0.50

. You can select a computer

from the list of DHCP clients in the "Computer Name" drop-down menu, or you

can manually enter the IP address of the server computer.

Protocol.

Select the protocol used by the service,

TCP

,

UDP

or

Both

. To

specify any other protocol, select "Other" from the list, then enter the

corresponding protocol number (as assigned by the IANA) in the

Protocol

box.

Public Port.

The port that will be accessed from the Internet.

Private Port.

The port that will be used on your internal network.

Schedule.

Select a schedule for when this rule is in effect. If you do not see the schedule you need in the list of schedules, go to the

Tools

→

Schedules

sub-menu and create a new schedule.

Inbound Filter.

Select a filter that controls access as needed for this virtual server. If you do not see the filter you need in the list of filters, go to

the

Advanced

→

Inbound Filter

sub-menu and create a new filter.

Save/Update.

Record the changes you have made.

Clear.

Re-initialize this area of the screen, discarding any changes you have made.

When you are done editing the settings, you must click the

Save Settings

button at the top of the page to make the changes effective and

permanent.

(continued)

CRADLEPOINT

MBR1200 | USER MANUAL Firmware ver. 1.6.12

© 2010

CRADLEPOINT, INC.

PLEASE VISIT

HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/

FOR MORE HELP AND RESOURCES

PAGE 62

5.11.2

Virtual Server List

This is a list of the defined Virtual Servers. Click the Enable checkbox at the

left to directly activate or de-activate the entry. An entry can be changed by

clicking the Edit icon or can be deleted by clicking the Delete icon. When you

click the Edit icon, the item is highlighted, and the

Edit Virtual Servers

section is activated for editing.

After you‟ve completed all modifications or deletions, you must click the

Save Settings

button at the top of the page to save your changes. The

router must reboot before new settings will take effect. You will be prompted to

Reboot the Device

or

Continue

. If you need to make additional

settings changes, click

Continue

. If you are finished with all configuration settings, click the

Reboot the Device

button.

NOTE: You might have trouble accessing a virtual server using its public identity (WAN-side IP-address of the gateway or its dynamic DNS name)

from a machine on the LAN. Your requests may not be looped back or you may be redirected to the "Forbidden" page.

This will happen if you have an Access Control Rule configured for this LAN machine.

The requests from the LAN machine will not be looped back if Internet access is blocked at the time of access. To work around this problem,

access the LAN machine using its LAN-side identity.

Requests may be redirected to the "Forbidden" page if web access for the LAN machine is restricted by an Access Control Rule. Add the WAN-

side identity (WAN-side IP-address of the router or its dynamic DNS name) on the

Advanced

→

Web Filter

screen to work around this problem.

Example:

You are hosting a Web Server on a Laptop or PC that has Private IP Address of 192.168.0.50 and your ISP is blocking Port 80.

1.

Name the Virtual Server Rule (e.g.,

Web Server

)

2.

Enter in the IP Address of the machine on your LAN

–

192.168.0.50

3.

Enter the Private Port as

[

80

]

4.

Enter the Public Port as

[

8888

]

5.

Select the Protocol -

TCP

6.

Ensure the schedule is set to

Always

7. Check the

Save

box to add the settings

8.

Repeat these steps for each

Virtual Server Rule

you wish to add. After the list is complete, click

Save Settings

at the top of the page.

With this Virtual Server Rule all Internet traffic on Port 8888 will be redirected to an internal web server on port 80 at IP Address 192.168.0.50.

CRADLEPOINT

MBR1200 | USER MANUAL Firmware ver. 1.6.12

© 2010

CRADLEPOINT, INC.

PLEASE VISIT

HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/

FOR MORE HELP AND RESOURCES

PAGE 63

5.12 Web Filter (Website Filter)

Use the Web Filter section to enable OpenDNS and add Websites to be used for Access

Control (

Advanced

→

Access Control

sub-menu). OpenDNS is web-based service that

helps Web sites load faster, while providing antiphishing and Web content filtering.

(www.openDNS.com)

By default, Website Filter is enabled, however no filtering is done until the list is

populated. Also, since Access Control is disabled by default, no filtering is done until

Access Control is also enabled (

Advanced

→

Access Control

sub-menu).

5.12.1

OpenDNS Content Filtering

This feature allows you to filter Web sites through the uses of OpenDNS. Different

selectable qualities are chosen to enable Web filtering for everyone connected to the

device. This does change your router‟s D

NS settings to use the OpenDNS servers.



None. Disables Web filtering that uses OpenDNS, but will enable manual Web

site white listing in the next subsection.



Minimal.

Filters phishing and URL typos.



Good. Filters any Web site containing pornography as well as enable typo and

phishing redirection.



Better. Filters more nudity, sexuality, and tasteless content.



Best. Filters more nudity, sexuality, and tasteless content. Selecting “Best” will

filter all content which is deemed adult content by OpenDNS



Custom.

Uses Custom OpenDNS settings.

Enter OpenDNS account

information. Enter OpenDNS account details to enable the router to dynamically

update the dynamic WAN IP address with OpenDNS. Also ensure your network

is associated to your account at DNS-O-MATIC (an OpenDNS service).

OpenDNS ISP Filter Bypass Algorithm.

Some ISPs filter OpenDNS requests and

redirect them to different DNS servers. Enabling this will attempt to bypass those filters

when using an OpenDNS Content Filtering Level.

(continued)