Page 126 / 275
Scroll up to view Page 121 - 125
Vigor2110 Series User’s Guide
119
Block Unknown
Protocol
Check the box to activate the Block Unknown Protocol function.
Individual IP packet has a protocol field in the datagram header to
indicate the protocol type running over the upper layer. However,
the protocol types greater than 100 are reserved and undefined at
this time. Therefore, the router should have ability to detect and
reject this kind of packets.
Warning Messages
We provide Syslog function for user to retrieve message from Vigor
router. The user, as a Syslog Server, shall receive the report sending
from Vigor router which is a Syslog Client.
All the warning messages related to
DoS Defense
will be sent to user
and user can review it through Syslog daemon. Look for the keyword
DoS
in the message, followed by a name to indicate what kind of
attacks is detected.
Page 127 / 275
Vigor2110 Series User’s Guide
120
4.6 Objects Settings
For IPs in a range and service ports in a limited range usually will be applied in configuring
router’s settings, therefore we can define them with
objects
and bind them with
groups
for
using conveniently. Later, we can select that object/group that can apply it. For example, all
the IPs in the same department can be defined with an IP object (a range of IP address).
4.6.1 IP Object
You can set up to 192 sets of IP Objects with different conditions.
Set to Factory Default
Clear all profiles.
Click the number under Index column for settings in detail.
Page 128 / 275
Vigor2110 Series User’s Guide
121
Name
Type a name for this profile. Maximum 15 characters are
allowed.
Interface
Choose a proper interface (WAN, LAN or Any).
For example, the
Direction
setting in
Edit Filter Rule
will ask
you specify IP or IP range for WAN or LAN or any IP address.
If you choose LAN as the
Interface
here, and choose LAN as
the direction setting in
Edit Filter Rule
, then all the IP
addresses specified with LAN interface will be opened for you
to choose in
Edit Filter Rule
page.
Address Type
Determine the address type for the IP address.
Select
Single Address
if this object contains one IP address
only.
Select
Range Address
if this object contains several IPs within
a range.
Select
Subnet Address
if this object contains one subnet for IP
address.
Select
Any Address
if this object contains any IP address.
Start IP Address
Type the start IP address for Single Address type.
End IP Address
Type the end IP address if the Range Address type is selected.
Subnet Mask
Type the subnet mask if the Subnet Address type is selected.
Invert Selection
If it is checked, all the IP addresses except the ones listed above
will be applied later while it is chosen.
Below is an example of IP objects settings.
Page 129 / 275
Vigor2110 Series User’s Guide
122
4.5.2 IP Group
This page allows you to bind several IP objects into one IP group.
Set to Factory Default
Clear all profiles.
Click the number under Index column for settings in detail.
Page 130 / 275
Vigor2110 Series User’s Guide
123
Name
Type a name for this profile. Maximum 15 characters are
allowed.
Interface
Choose WAN, LAN or Any to display all the available IP
objects with the specified interface.
Available IP Objects
All the available IP objects with the specified interface chosen
above will be shown in this box.
Selected IP Objects
Click
>>
button to add the selected IP objects in this box.
19216811.live