DSL-G604T 54Mbps Wireless ADSL2/2+ Modem/Router Manual

Virtual Server

To view the following window, click on the

Advanced

tab at the top of the window and then click the

Virtual Server

button to the left. The

Virtual Server

will allow remote users access to various

services outside of their LAN through a public IP address, such as FTP (File Transfer Protocol) or

HTTPS (Secure Web). Select a connection type and enter an IP address for the virtual server. After

configuring the Router for these features, the Router will redirect these external services to an

appropriate server on the users’ LAN. To choose a particular service click a radio button from the

category list and highlight the service from the Available Rules list.

Click

Add,

and then reboot to

apply the rule.

Figure 5- 2. Virtual Server window

LAN Clients

The LAN Clients menu is used when establishing Port Forwarding, Access Control and Advanced

Security rules for IP addresses on the LAN. This menu can be accessed directly by clicking on the

LAN Clients

button or hyperlink in the

Advanced

setup menu. You can also click on the New IP

button located in the Port Forwarding, Access Control and Advanced Security menus to access this

menu. In order to use these advanced features it is necessary to have IP addresses available for

configuration. If there are no IP addresses listed in the LAN Clients menu, it will not be possible to

configure Port Forwarding, Access Control and Advanced Security. Use the LAN Clients menus to

add or delete static IP addresses for the advanced functions mentioned above, or to Reserve a

Dynamically assigned IP address for an advanced function. Dynamically assigned IP addresses will

only be listed if DHCP is enabled on the Router.

46

DSL-G604T 54Mbps Wireless ADSL2/2+ Modem/Router Manual

Figure 5- 3. LAN Clients Window

To add a static IP address to the list of available IP addresses, type an IP address that falls within the

range a available IP addresses and click on the

Add

button. In the example above, available addresses

range from 10.0.0.1 to 10.255.255.254. Any addresses added will appear in the list of

Static

Addresses

available for advanced configuration.

These addresses can then be used in the other Port

Forwarding, Access Control and Advanced Security menus. To delete an IP address from the list of

Static Addresses, click the

Delete

box for the address or addresses you want to eliminate and click on

the

Apply

button.

Dynamically assigned IP addresses may be reserved so that the LAN IP address for the device does

not expire. This will create a permanent entry for the device in the ARP table and in effect, it becomes

a static IP address. Click to check the

Reserve

box for the address or addresses you want to reserve

and click the

Apply

button.

These reserved addresses will no longer be available for DHCP

assignment and will be listed in the Static IP Addresses table.

SNMP

This menu can be accessed directly by clicking on the

SNMP

button or hyperlink in the

Advanced

setup menu. Simple Network Management Protocol (SNMP) is an OSI Layer 7 Application designed

specifically for managing and monitoring network devices. SNMP enables network management

stations to read and modify the settings of gateways, routers, switches, and other network devices.

Use SNMP to configure system features for proper operation, performance monitoring, and detection

of potential problems in the Router or network.

47

DSL-G604T 54Mbps Wireless ADSL2/2+ Modem/Router Manual

Figure 5- 4. SNMP window

Under

SNMP Management

, enable or disable

SNMP Agent

or

SNMP Traps

by using the check

boxes. An SNMP Agent is software that runs locally on the device. A defined set of variables

(managed objects) is maintained by the SNMP agent and used to manage the device. Traps are

messages that alert network personnel of events that occur on the Switch. The events can be as serious

as a reboot (someone accidentally turned OFF the Switch), or less serious like a port status change.

The Router generates traps and sends them to the trap recipient (or network manager). Typical traps

include trap messages for Authentication Failure, Topology Change and Broadcast/Multicast Storms.

In the

Name

,

Location

and

Contact

fields, enter the appropriate information of the Network

Administrator. Under

Community,

enter the name of an SNMP community string that defines the

relationship between the SNMP manager and an agent. The community string acts like a password to

permit or deny access to an agent on the Router. The defining characteristic associated with the

community string is the

Access Right

. The agent’s access right can be set as either read/write or read-

only. Under

Traps

enter the

Destination IP address

and

Trap Community Name

so that the agent

sends traps to the management server. The

Trap Version

can also be set to either

SNMP V1

(to

specify that SNMP version 1 will be used) or

SNMPv2c

, which supports both centralized and

distributed network management strategies.

SNMP V2c

includes improvements in the Structure of

Management Information (SMI) and adds some security features.

48

DSL-G604T 54Mbps Wireless ADSL2/2+ Modem/Router Manual

Filters

The following window will aid the router’s administrator in configuring filters for IP addresses. There

are two types of filters that the administrator can configure.

Outbound Filters

are for administrators

who wish to deny clients on their LAN from accessing certain virtual ports or IP addresses on the

Internet.

Inbound Filters

are for administrators who wish to deny IP addresses or virtual ports from

outside the router (on the Internet) from accessing the Internal LAN of the router. Click the

corresponding radio button to configure Outbound or Inbound Filters. Both screens are identical in

configuration.

Figure 5- 5. Filters window

To configure filters for the router, configure the folowing fields and click

Apply

.

Source IP

Enter an IP address or range of addresses from which to block or allow packets. This

field may also be used to block a set of subnet masks by using the corresponding pull

down menu.

Destination IP

Enter an IP address or range of addresses to which to block or allow packets from being

sent. This field may also be used to block a set of subnet masks by using the

corresponding pull down menu.

Source Port

Enter a port or range of ports from which to block or allow packets. This field can only

be configured if TCP or UDP is selected in the Protocol field. The Safe Range option in

the pull down menu is for ports that have a higher value than 1024.

Destination Port

Enter a port or range of ports to which to block or allow packets from being sent. This

field can only be configured if TCP or UDP is selected in the Protocol field. The Safe

Range option in the pull down menu is for ports that have a higher value than 1024.

Protocol

Use the pull down menu to select the protocol type to be used for this filter. The user

may choose between

TCP

,

UDP

or

TCP UDP.

49

DSL-G604T 54Mbps Wireless ADSL2/2+ Modem/Router Manual

Action

This field states allows the user to choose the course of action for this filter to take. The

user may choose

Allow

to allow packets to be forwarded to end nodes configured in the

previous fields. The user may choose

Deny

to block packets from being forwarded to

end nodes configured in the previous fields.

Properly configured filters for the router will appear in the table in the bottom half of the filters

window. Click

Apply

to set the filters configured for this router.

Bridge Filters

Bridge filters are used to block or allow various types of packets through the WAN interface. This

may be done for security or to improve network efficiency. The rules are configured for individual

devices based on MAC address. Filter rules can be set up for source, destination or both. You can set

up filter rules and disable the entire set of rules without loosing the rules that have been configured.

Figure 5- 6. Bridge Filters window

To add a bridge filter rule, check

Enable Bridge Filters

, type in a Source MAC, a Destination MAC

or both in the entry fields. Select

Any

to apply the rule to any protocol that the router receives. The

user may also specify a protocol to be filtered by using the pull-down menu, and then choose either

Allow,

to allow the specified protocol to pass through the router, or

Deny

to filter the protocol from the

router. The protocols that may be specifically allowed or denied to pass through the WAN interface

are

IPv4, IPv6, RARP, PPPoE Discovery

and

PPPoE Session.

Click the

Add

button. The rule will

appear in the entry field below as it is currently configured.

To remove a bridge filter from the table in

the bottom half of the window, click to select the corresponding

Delete

box, and then click

Apply

.

Remember to save the configuration changes.

Routing

Clicking the

Routing

tab will lead you to this window, which is used to manually enter a routing entry

for the Router. Routing entries are used when known gateways and hops on the network are known to

the user. Unless instructed by your ISP or if you have a greater knowledge of networking, this window

should not be necessary to configure as the LAN IP settings should be sufficient for your connection.

50