LTE TDD B2268H

User Guide

9 Dynamic DNS

Issue 01 (2014-01-15)

Copyright © Huawei Technologies Co., Ltd.

74

9

Dynamic DNS

9.1 Overview

This chapter discusses how to configure your LTE Device to use Dynamic DNS. Dynamic DNS

allows you to update your current dynamic IP address with one or many dynamic DNS services

so that anyone can contact you (in applications such as NetMeeting and CU-SeeMe). You can

also access your FTP server or Web site on your own computer using a domain name (for

instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead

of using an IP address that changes each time you reconnect. Your friends or relatives will

always be able to call you even if they don't know your IP address.

First of all, you need to have registered a dynamic DNS accou

nt with www.dyndns.org

. This is

for people with a dynamic IP from their ISP or DHCP server that would still like to have a

domain name. The Dynamic DNS service provider will give you a password or key.

9.1.1 What You Need To Know

DYNDNS Wildcard

Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the

same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for

example,

www.yourhost.dyndns.org

and still reach your hostname.

If you have a private WAN IP address, then you cannot use Dynamic DNS.

9.2 The Dynamic DNS Screen

Use the

Dynamic DNS

screen to enable DDNS and configure the DDNS settings on the LTE

Device. To change your LTE Device's DDNS, click

Network Setting > Dynamic DNS

. The

screen appears as shown.

LTE TDD B2268H

User Guide

9 Dynamic DNS

Issue 01 (2014-01-15)

Copyright © Huawei Technologies Co., Ltd.

75

Figure 9-1

Network Setting > Dynamic DNS

The following table describes the fields in this screen.

Table 9-1

Network Setting > DNS

LABEL

DESCRIPTION

Dynamic DNS Configuration

Active Dynamic

DNS

Select this check box to use dynamic DNS.

Service Provider

Select the name of your Dynamic DNS service provider.

Dynamic DNS

Type

Select the type of service that you are registered for from your Dynamic

DNS service provider.

Host Name

Type the domain name assigned to your LTE Device by your Dynamic

DNS provider.

You can specify up to two host names in the field separated by a

comma (",").

User Name

Type your user name.

Password

Type the password assigned to you.

Apply

Click

Apply

to save your changes.

Cancel

Click

Cancel

to restore your previously saved settings.

LTE TDD B2268H

User Guide

10 Firewall

Issue 01 (2014-01-15)

Copyright © Huawei Technologies Co., Ltd.

76

10

Firewall

10.1 Overview

Use the LTE Device firewall screens to enable and configure the firewall that protects your LTE

Device and network from attacks by hackers on the Internet and control access to it. By default

the firewall:



Allows traffic that originates from your LAN and WLAN computers to go to all other

networks.



Blocks traffic that originates on other networks from going to the LAN and WLAN.

The following figure illustrates the default firewall action. User

A

can initiate an IM (Instant

Messaging) session from the LAN to the WAN (

1

). Return traffic for this session is also allowed

(

2

). However other traffic initiated from the WAN is blocked (

3

and

4

).

Figure 10-1

Default Firewall Action

10.1.1 What You Need to Know

DoS

Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the

Internet. Their goal is not to steal information, but to disable a device or network so users no

LTE TDD B2268H

User Guide

10 Firewall

Issue 01 (2014-01-15)

Copyright © Huawei Technologies Co., Ltd.

77

longer have access to network resources. The LTE Device is pre-configured to automatically

detect and thwart all known DoS attacks.

Firewall

The LTE Device's firewall feature physically separates the LAN/WLAN and the WAN and acts

as a secure gateway for all data passing between the networks.

It is designed to protect against Denial of Service (DoS) attacks when activated. The LTE

Device's purpose is to allow a private Local Area Network (LAN) to be securely connected to

the Internet. The LTE Device can be used to prevent theft, destruction and modification of data,

as well as log events, which may be important to the security of your network.

The LTE Device is installed between the LAN/WLAN and a broadband modem connecting to

the Internet. This allows it to act as a secure gateway for all data passing between the Internet

and the LAN.

The LTE Device has one Ethernet WAN port and four Ethernet LAN ports, which are used to

physically separate the network into two areas. The WAN (Wide Area Network) port attaches to

the broadband (cable or DSL) modem to the Internet.

The LAN (Local Area Network) port attaches to a network of computers, which needs security

from the outside world. These computers will have access to Internet services such as e-mail,

FTP and the World Wide Web. However, "inbound access" is not allowed (by default) unless

the remote host is authorized to use a specific service.

Enabling the firewall may impact the system performance.

ICMP

Internet Control Message Protocol (ICMP) is a message control and error-reporting protocol

between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams,

but the messages are processed by the TCP/IP software and directly apparent to the application

user.

Finding Out More

See Section 11.6 for advanced technical information on firewall.

10.2 The General Screen

Use this screen to enable or disable the LTE Device's firewall. Click

Security > Firewall

to

open the

General

screen.

LTE TDD B2268H

User Guide

10 Firewall

Issue 01 (2014-01-15)

Copyright © Huawei Technologies Co., Ltd.

78

Figure 10-2

Security > Firewall > General

The following table describes the labels in this screen.

Table 10-1

Security > Firewall > General

LABEL

DESCRIPTION

Firewall

Select

Enable

to activate the firewall. The LTE Device performs

access control and protects against Denial of Service (DoS) attacks

when the firewall is activated.

Easy, Medium,

High

Select

Easy

to have the firewall allow both LAN-to-WAN and

WAN-to- LAN traffic to flow through the LTE Device.

Select

Medium

to have the firewall only allow traffic sent from the

LAN

to the WAN. All traffic sent or access from the WAN will be blocked.

Select

High

to have the firewall only allow Telnet, FTP, HTTP,

HTTPS, DNS, POP3, and SMTP traffic sent from the LAN to the

WAN. Other traffic will be blocked.

Apply

Click

Apply

to save your changes.

Cancel

Click

Cancel

to restore your previously saved settings.

10.3 The Services Screen

Use this screen to view the configured service list. To access this screen, click

Security >

Firewall > Services

. You have to configure at least one service in this screen before

configuring the

Security > Firewall > Access Control > Add New ACL Rule/Edit

screen.