Page 46 / 80
Scroll up to view Page 41 - 45
38
5.3.
Advanced Setup
5.3.1.
Firewall
Parameter
Description
Firewall
When you enable the firewall function, it will protect you
from following attacks of WAN side:
z
SYN flooding attack
z
Ping of Death
z
Teardrop
z
Land attack
SPI
If you enable SPI, all traffics initiated from WAN site will
be blocked including DMZ, Virtual Server, etc.
Page 47 / 80
39
5.3.2.
Routing
z
Routing Table List
You can see the current routing table of the router here. If you want to add
another routing rule, please click “ADD ROUTE”.
Parameter
Description
Dest IP
Show the IP Address of the destination LAN.
Mask
Show the Subnet Mask of the destination LAN. If it shows
“8” that means the Subnet Mask is “255.0.0.0”; “16”
means the Subnet Mask is “255.255.0.0”; “24” means the
Subnet Mask is “255.255.255.0”.
Parameter
Description
Gateway IP
The next stop gateway of the path toward the destination
LAN. This is the IP of the neighbor router that this router
should communicate with on the path to the destination
LAN.
Metric
The number of hops (routers) to pass through to reach
the destination LAN. It must be between 1 and 15.
Device
Show the interface that go to the next hop (router), such
as LAN port.
Page 48 / 80
40
Use
The counter for access time.
Edit
Edit the route, this icon is not shown for system default
route.
Drop
Drop the route, this icon is not shown for system default
route.
z
Add Route
If you have another router with a LAN-to-LAN connection, you may need to
create a static routing on the router that is the gateway to Internet.
Parameter
Description
Destination IP Address
Enter the IP Address of the destination LAN.
IP Subnet Mask
Enter the Subnet Mask address of the destination LAN.
Gateway IP Address
This is the gateway IP Address where packets are sent.
Enter the gateway IP Address and select the channel
(PVC) you want to configure.
Metric
The number of hops (routers) to pass through to reach
the destination LAN. It must be between 1 and 15.
Page 49 / 80
41
Announced in RIP
Select “Yes”, this routing path will be propagated to other
hosts through RIP broadcasts. Select “No”, this routing
path will be kept private and it is not included in RIP
broadcasts.
5.3.3.
NAT
5.3.3.1. NAT
Network Address Translation (NAT) allows multiple users at your local site to
access the Internet through a single Public IP Address or multiple Public IP
Addresses. NAT provides Firewall protection from hacker attacks and has the
flexibility to allow you to map Private IP Addresses to Public IP Addresses for key
services such as Websites and FTP.
Parameter
Description
Virtual Circuit
VPI (Virtual Path Identifier) and VCI (Virtual Channel
Identifier define a virtual circuit. Please select the
channel (PVC) you want to configure.
NAT Status
The activated or deactivated status for the NAT function
will be shown here.
Page 50 / 80
42
Number of IPs
Select “Single” if you only have a public IP Address.
Select “Multiple” if you have multiple IP Addresses.
5.3.3.2. DMZ
The DMZ Host is a local computer exposed to the Internet. When setting a
particular internal IP Address as the DMZ Host, all incoming packets will be
checked by the firewall and NAT algorithms then passed to the DMZ Host.
For example, if you have a local client PC that cannot run an Internet application
(e.g. Games) properly from behind the NAT firewall, then you can open the client
up to unrestricted two-way Internet access by defining a DMZ Host.
Parameter
Description
DMZ setting for
Show the DMZ setting is for single or multiple IP
Addresses.
DMZ
Enable or disable the DMZ function.
DMZ Host IP Address
Enter a static IP Address to the DMZ Host. This IP
Address will be exposed to the Internet.
5.3.3.3. Virtual Server
Use the Virtual Server function when you want different servers/clients in your
LAN to handle different service/Internet application type (e.g. Email, FTP, Web