Advanced > Virtual Server

To view the following window, click on the

Advanced

tab at the top of the window and

then click the

Virtual Server

button to the left. The

Virtual Server

will allow remote

users access to various services outside of their LAN through a public IP address, such

as FTP (File Transfer Protocol) or HTTPS (Secure Web). After configuring the Router

for these features, the Router will redirect these external services to an appropriate

server on the user’s LAN.

These external services may be modified by clicking its corresponding edit icon, or they

may be deleted by clicking the corresponding delete icon. Though there are seven fields

available to configure the Virtual Server, in most cases, only the IP address of the

Virtual Server will be needed for implementation. To enable an already existing Virtual

Server, click its corresponding edit button, configure the appropriate fields listed below

40

41

and set the

Status

fields to

Enabled

by clicking the radio button. To configure other

virtual servers for the Router, configure the following fields and click

Apply

.

Index

This is an index number used to identify the Virtual Server

entry.

Private IP

Enter the IP address of the Virtual Server.

Protocol Type

The protocol type used for the Virtual Server. The user may

select

TCP

,

UDP

or

Both

, depending on the type of Virtual

Server implemented.

Start/End Global Port

Enter a range of ports on the device on the WAN side of the

network that will be accessing the Virtual Server currently being

configured. Commonly, this range of ports is identical to the

local range of ports. Existing Virtual Servers may already have

their well-known port ranges listed but this may need to be

changed in certain circumstances.

Start/End Local Port

Enter the range of ports of the Virtual Server’s computer.

Existing Virtual Servers may already have their well-known port

ranges listed but this may need to be changed in certain

circumstances.

Advanced > Filters

Packet filtering is a basic security measure that should be used on any network that is

exposed to a security risk. A packet filter system examines data packets and scrutinizes

them in order to control network access. Filtering rules determine whether packets are

42

passed through the Router from either side of the gateway. The rules are created and

controlled by the network administrator and can be precisely defined. These rules are

used to block access to the LAN from outside the network and/or to deny access to the

WAN from within the network. The Router uses filtering rules to examine data packet

headers for specific information. Packets passing through the Router that do not meet

the criteria specified by the rule set are dropped.

Effective implementation of packet filtering requires detailed knowledge of network

services and communication protocols. An overly complicated filtering scheme can

adversely affect the Router’s performance, while an inadequate set of rules may

needlessly compromise security.

This Router has two fields to configure for filtering which are

IP Filters

and

MAC Filters.

Advanced > Filters > IP Filters

This window will aid the

use in configuring filters

for IP addresses. This will

deny specified LAN IP

addresses or specific

ports associated with

these LAN IP address

from accessing the

Internet. Well known ports

have already been

previously set in the

IP

Filters List

and can be

modified by clicking their

corresponding edit icon,

and simple adding an IP

address to the

configuration.

To access this screen, click the

Advanced

tab along the top of the configuration window

43

and then the

Filters

tab to the left hand side.

Protocol

The protocol associated with this IP filter. The user may choose

between

TCP

,

UDP

or

Both

.

IP Address

An IP address or range of IP addresses that will be denied

access to the Internet.

Subnet Mask

The subnet mask that corresponds to the IP address above.

Start Port/End Port

A port or range of ports that will be denied access to the

Internet. If no port is entered, all ports in this IP range will be

denied access to the Internet.

Advanced > Filters > MAC Filters

All computers are

uniquely identified by

their MAC (Media

Access Control)

address. The following

window will allow users

to deny computers

access to the Internet or

only allow certain

computers access to the

Internet, based on their

MAC address. To

access this screen, click

the

Advanced

tab along

the top of the

configuration window,

then the

Filters

tab to

the left hand side and

finally click the

corresponding radio

button for

MAC Filters

.

Index

A number used to identify this MAC address filter setting.

MAC Address

Enter the MAC address to be filtered.

State

This field allows you to enable or disable this MAC address

filter setting.

44