Page 61 / 232 Scroll up to view Page 56 - 60
DoS Configuration
1.
Click the
Security
tab and then choose
DoS Configuration
from the navigation tree. In
the pane on the right, determine whether to enable the DoS attack-preventive configuration,
as shown in
Figure 3-20
.
Figure 3-20
DoS Configuration
2.
Click
Apply
.
Denial of service (DoS) attack is a network-based attack that denies users from accessing the
Internet. The DoS attack initiates a large number of network connections, making the server or
the program running on the server break down or server resources exhaust or denying users to
access the Internet service. As a result, the network service fails.
ONT Access Control Configuration
1.
Click the
Security
tab and then choose
ONT Access Control Configuration
from the
navigation tree. In the pane on the right, configure the rule of ONT access control, as shown
in
Figure 3-21
.
Figure 3-21
ONT Access Control Configuration
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
3 Configuration Guide
Issue 02 (2011-01-26)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3-23
Page 62 / 232
2.
Click
Apply
.
3.3.6 Route
This topic describes how to configure the default route and static route through the Web page.
Default Route Configuration
1.
Click the
Route
tab and then choose
Default Route Configuration
from the navigation
tree. In the pane on the right, select or deselect the
Default Route
option button to enable
or disable the default route of the system, as shown in
Figure 3-22
.
Figure 3-22
Default Route Configuration
NOTE
If an ONT fails to find a matching routing entry after receiving a packet, the WAN interface specified
by the default route configuration sends the packet to a network device. Before the default route of
the system is enabled, the WAN interface must obtain the IP address. Therefore, the parameters of
the WAN interface must be correctly set. For details, see
WAN Configuration
.
2.
Click
Apply
.
Static Route Configuration
1.
Click the
Route
tab and then choose
Static Route Configuration
from the navigation tree.
In the pane on the right, click
New
. In the dialog box that is displayed, set the parameters
related to the static route, as shown in
Figure 3-23
.
Figure 3-23
Static Route Configuration
3 Configuration Guide
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
3-24
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 02 (2011-01-26)
Page 63 / 232
2.
Click
Apply
.
Table 3-8
describes the parameters related to the static route.
Table 3-8
Parameters related to the static route
Parameter
Description
Destination Network
Address
Indicates the destination IP address of the static route.
Subnet Mask
Indicates the subnet mask of the static route.
Gateway IP Address
Indicates the gateway IP address of the static route.
Interface
Indicates the WAN interface that the route travels through.
3.3.7 Forward Rules
This topic describes how to configure the DMZ, port mapping, and port trigger through the Web
page.
DMZ Configuration
1.
Click the
Forward Rules
tab and then choose
DMZ Configuration
from the navigation
tree. In the pane on the right, click
New
. In the dialog box that is displayed, set the
parameters related to the DMZ, as shown in
Figure 3-24
.
Figure 3-24
DMZ Configuration
2.
Click
Apply
.
The demilitarized zone (DMZ) is a technology that enables the ONT to forward all received
packets through a specified internal server. The technology enables a computer in the LAN to
be completely exposed to all users on the Internet or enables the mutual communication without
restrictions between a host with a specified IP address and other users or other servers on the
Internet. In this way, many applications can run on the host with the specified IP address. The
host with the specified IP address receives all connections and files that can be identified.
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
3 Configuration Guide
Issue 02 (2011-01-26)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3-25
Page 64 / 232
CAUTION
If the LAN-side device does not provide website service or other network services, do not set
the device to a DMZ host because all ports of a DMZ host are opened to the Internet.
Table 3-9
describes the parameters related to the DMZ.
Table 3-9
Parameters related to the DMZ
Parameter
Description
Interface Name
Indicates the name of the WAN interface. If the WAN interface
is not in the port mapping table, the application requests from
the WAN connection are directly forwarded to the host in the
DMZ.
Host Address
Indicates the IP address of the DMZ host.
Enable DMZ
Indicates whether to enable the DMZ.
Port Mapping Configuration
1.
Click the
Forward Rules
tab and then choose
Port Mapping Configuration
from the
navigation tree. In the pane on the right, click
New
. In the dialog box that is displayed, set
the parameters related to port mapping, as shown in
Figure 3-25
.
Figure 3-25
Port Mapping Configuration
2.
Click
Apply
.
Port mapping indicates that the Intranet server is allowed to be open to the Extranet (for example,
the Intranet provides the Extranet with a WWW server or FTP server). Port mapping is to map
the Intranet host IP address and port ID to Extranet IP address and corresponding port ID so that
3 Configuration Guide
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
3-26
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 02 (2011-01-26)
Page 65 / 232
users from Extranets can access the Intranet server. With port mapping, the users cannot see the
Intranet IP address and they see the Extranet IP address.
Table 3-10
describes the parameters related to port mapping.
Table 3-10
Parameters related to port mapping
Parameter
Description
Interface
Indicates the name of the WAN interface where port mapping is
enabled.
Protocol
Indicates the protocol type of port mapping packet, which may
be TCP, UDP, or TCP/UDP.
External Start Port
Indicates the destination start port of the external data packet.
External End Port
Indicates the destination end port of the external data packet.
Internal Start Port
Indicates the internal destination start port of the port mapping
packet.
Internal End Port
Indicates the internal destination end port of the port mapping
packet.
External Source Start Port
Indicates the source start port of the external data packet.
External Source End Port
Indicates the source end port of the external data packet.
Internal Host
Indicates the IP address of the host to which the port is mapped.
External Source IP
Address
Indicates the source IP address of the external data packet.
Mapping Name
Indicates the name of the port mapping rule.
Enable PortMapping
Indicates whether to enable port mapping.
Port Trigger Configuration
1.
Click the
Forward Rules
tab and then choose
Port Trigger Configuration
from the
navigation tree. In the pane on the right, click
New
. In the dialog box that is displayed, set
the parameters related to the port trigger, as shown in
Figure 3-26
.
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
3 Configuration Guide
Issue 02 (2011-01-26)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3-27

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top