Page 41 / 64
Scroll up to view Page 36 - 40
Advanced > Virtual Server
To view the following window, click on the
Advanced
tab at the top of the window and
then click the
Virtual Server
button to the left. The
Virtual Server
will allow remote
users access to various services outside of their LAN through a public IP address, such
as FTP (File Transfer Protocol) or HTTPS (Secure Web). After configuring the Router
for these features, the Router will redirect these external services to an appropriate
server on the user’s LAN.
These external services may be modified by clicking its corresponding edit icon, or they
may be deleted by clicking the corresponding delete icon. Though there are seven fields
available to configure the Virtual Server, in most cases, only the IP address of the
Virtual Server will be needed for implementation. To enable an already existing Virtual
Server, click its corresponding edit button, configure the appropriate fields listed below
40
Page 42 / 64
41
and set the
Status
fields to
Enabled
by clicking the radio button. To configure other
virtual servers for the Router, configure the following fields and click
Apply
.
Index
This is an index number used to identify the Virtual Server
entry.
Private IP
Enter the IP address of the Virtual Server.
Protocol Type
The protocol type used for the Virtual Server. The user may
select
TCP
,
UDP
or
Both
, depending on the type of Virtual
Server implemented.
Start/End Global Port
Enter a range of ports on the device on the WAN side of the
network that will be accessing the Virtual Server currently being
configured. Commonly, this range of ports is identical to the
local range of ports. Existing Virtual Servers may already have
their well-known port ranges listed but this may need to be
changed in certain circumstances.
Start/End Local Port
Enter the range of ports of the Virtual Server’s computer.
Existing Virtual Servers may already have their well-known port
ranges listed but this may need to be changed in certain
circumstances.
Page 43 / 64
Advanced > Filters
Packet filtering is a basic security measure that should be used on any network that is
exposed to a security risk. A packet filter system examines data packets and scrutinizes
them in order to control network access. Filtering rules determine whether packets are
42
Page 44 / 64
passed through the Router from either side of the gateway. The rules are created and
controlled by the network administrator and can be precisely defined. These rules are
used to block access to the LAN from outside the network and/or to deny access to the
WAN from within the network. The Router uses filtering rules to examine data packet
headers for specific information. Packets passing through the Router that do not meet
the criteria specified by the rule set are dropped.
Effective implementation of packet filtering requires detailed knowledge of network
services and communication protocols. An overly complicated filtering scheme can
adversely affect the Router’s performance, while an inadequate set of rules may
needlessly compromise security.
This Router has two fields to configure for filtering which are
IP Filters
and
MAC Filters.
Advanced > Filters > IP Filters
This window will aid the
use in configuring filters
for IP addresses. This will
deny specified LAN IP
addresses or specific
ports associated with
these LAN IP address
from accessing the
Internet. Well known ports
have already been
previously set in the
IP
Filters List
and can be
modified by clicking their
corresponding edit icon,
and simple adding an IP
address to the
configuration.
To access this screen, click the
Advanced
tab along the top of the configuration window
43
Page 45 / 64
and then the
Filters
tab to the left hand side.
Protocol
The protocol associated with this IP filter. The user may choose
between
TCP
,
UDP
or
Both
.
IP Address
An IP address or range of IP addresses that will be denied
access to the Internet.
Subnet Mask
The subnet mask that corresponds to the IP address above.
Start Port/End Port
A port or range of ports that will be denied access to the
Internet. If no port is entered, all ports in this IP range will be
denied access to the Internet.
Advanced > Filters > MAC Filters
All computers are
uniquely identified by
their MAC (Media
Access Control)
address. The following
window will allow users
to deny computers
access to the Internet or
only allow certain
computers access to the
Internet, based on their
MAC address. To
access this screen, click
the
Advanced
tab along
the top of the
configuration window,
then the
Filters
tab to
the left hand side and
finally click the
corresponding radio
button for
MAC Filters
.
Index
A number used to identify this MAC address filter setting.
MAC Address
Enter the MAC address to be filtered.
State
This field allows you to enable or disable this MAC address
filter setting.
44
19216811.live