Page 326 / 358 Scroll up to view Page 321 - 325
Figure 5-16
Wi-Fi Advanced Configuration
2.
Click
Apply
to apply the configuration.
Table 5-5
describes the advanced Wi-Fi parameters.
Table 5-5
Advanced Wi-Fi parameters
Parameter
Description
Transmitting Power
Indicates the transmit power of the wireless signals. It can be set
to 25%, 50%, 75%, or 100%. The greater the value is, the better
is the coverage of the wireless signals.
Regulatory Domain
Indicates the country code of the wireless network.
Channel
Indicates the channel of the wireless network. It varies with
Regulatory Domain
.
Channel Width
Indicates the wireless channel width. Options are auto 20/40 and
20 MHz.
Mode
Indicates the working mode of the Wi-Fi terminal NIC. The NIC
can negotiate among the 802.11b, 802.11g, 802.11n and
802.11b/g modes.
Advanced Configuration
Indicates whether to enable the advanced Wi-Fi configuration.
The following parameters can be set only when the advanced
Wi-Fi configuration is enabled.
DTIM Period
Indicates the delivery period of the delivery traffic indication
map (DTIM). It ranges from 1 to 125, and the default value is 1.
Beacon Period
Indicates the delivery period of the beacon. The beacon is used
to contact other access point devices or network control devices.
It ranges from 20 ms to 1000 ms, and the default value is 100
ms.
5 Web Page Reference
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
5-18
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 04 (2011-01-12)
Page 327 / 358
Parameter
Description
RTS Threshold
Indicates the request to send (RTS) threshold. It is used to
prevent the conflict in data transmission in the wireless LAN.
The smaller the RTS threshold, the larger the frequency of RTS
packet transmission, and the faster of the system recovery from
the interruption or conflict. However, more bandwidth is used,
which affects the throughput of other network data packets.
It ranges from 1 byte to 2346 bytes, and the default value is 2346
bytes.
Frag Threshold
Indicates the fragment threshold. When the size of a packet is
greater than this threshold, the packet will be fragmented. If the
transmission of fragments is interrupted, only the parts that are
not successfully transmitted need to be retransmitted.
It ranges from 256 bytes to 2346 bytes, and the default value is
2346 bytes.
5.5 Security
This topic describes how to configure the IP address filter, MAC address filter, DoS, and ONT
access control through the Web page.
5.5.1 IP Filter Configuration
5.5.2 MAC Filter Configuration
5.5.3 DoS Configuration
5.5.4 ONT Access Control Configuration
5.5.1 IP Filter Configuration
1.
In the navigation tree on the left, choose
Security
>
IP Filter Configuration
. In the pane
on the right, enable the IP address filter function. After selecting the filter mode, click
New
. Then, in the dialog box that is displayed, configure the rule for filtering IP addresses
from the WAN interface to the LAN port, as shown in
Figure 5-17
.
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
5 Web Page Reference
Issue 04 (2011-01-12)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5-19
Page 328 / 358
Figure 5-17
IP Filter Configuration
2.
Click
Apply
to apply the configuration.
The IP address filter function is a security mechanism configured on the residential gateway. It
enables or disables all or partial ports in an Intranet IP address segment to communicate with
all or partial ports in an Extranet IP address segment. The IP address filter configuration is used
to limit communication between an Intranet device and an Extranet device.
Table 5-6
describes the parameters related to the IP address filter.
Table 5-6
Parameters related to the IP address filter
Parameter
Description
IP address filter function
Indicates whether to enable the IP address filter function by
clicking
OPEN
or
CLOSE
.
Filter Mode
Indicates the IP address filter rule of the blacklist or whitelist.
l
Blacklist: indicates that the data meeting the rule in the filter
rule list is not allowed to pass.
l
Whitelist: indicates that the data meeting the rule in the filter
rule list is allowed to pass.
The filter mode is global config mode. Thus, the blacklist and
whitelist mode cannot be used at the same time.
Protocol
Indicates the type of the protocol, which may be TCP/UDP,
TCP, UDP, ICMP, or ALL.
LAN-side IP Address
Indicates the IP address on the LAN side.
5 Web Page Reference
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
5-20
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 04 (2011-01-12)
Page 329 / 358
Parameter
Description
LAN-side Port
Indicates the port ID on the LAN side. This parameter can be
configured when
Protocol
is set to
TCP/UDP
,
TCP
or
UDP
.
WAN-side IP Address
Indicates the IP address on the WAN side.
WAN-side Port
Indicates the ID of the WAN side port. This parameter can be
configured when
Protocol
is set to
TCP/UDP
,
TCP
or
UDP
.
5.5.2 MAC Filter Configuration
1.
In the navigation tree on the left, choose
Security
>
MAC Filter Configuration
. In the
pane on the right, after enabling MAC filter and selecting the filter mode, click
New
. On
the dialog box that is displayed, configure the MAC filter rule for the PC to access the
Internet, as shown in
Figure 5-18
.
Figure 5-18
MAC Filter Configuration
2.
Click
Apply
to apply the configuration.
The MAC address lists of PCs in the network are saved on the ONT. Configuring MAC filter
rules enables the PCs that conform to the rules to access the Internet service or disables the PCs
that do not conform to the rules to access the Internet service. A PC may have more than one IP
addresses but a unique MAC address. Therefore, configuring MAC filter rules effectively
controls the Internet service access rights of PCs in a LAN.
Table 5-7
describes the parameters related to the MAC filter.
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
5 Web Page Reference
Issue 04 (2011-01-12)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5-21
Page 330 / 358
Table 5-7
Parameters related to the MAC address filter
Parameter
Description
MAC address filter function
Indicates whether to enable the MAC address
filter function by clicking
OPEN
or
CLOSE
.
Filter Mode
Indicates the MAC address filter rule of the
blacklist or whitelist.
l
Blacklist: indicates that the data meeting
the rule in the filter rule list is not allowed
to pass.
l
Whitelist: indicates that the data meeting
the rule in the filter rule list is allowed to
pass.
The filter mode is global config mode. Thus,
the blacklist and whitelist mode cannot be
used at the same time.
Source MAC Address
Indicates the source MAC address in the
MAC address filter rule.
5.5.3 DoS Configuration
1.
In the navigation tree on the left, choose
Security
>
DoS Configuration
. In the pane on
the right, determine whether to enable the DoS attack-preventive configuration, as shown
in
Figure 5-19
.
Figure 5-19
DoS Configuration
2.
Click
Apply
to apply the configuration.
Denial of service (DoS) attack is a network-based attack that denies users from accessing the
Internet. The DoS attack initiates a large number of network connections, making the server or
the program running on the server break down or server resources exhaust or denying users to
access the Internet service. As a result, the network service fails.
Table 5-8
describes the parameters related to the DoS.
5 Web Page Reference
EchoLife HG8240/HG8245/HG8247 GPON Terminal
Service Manual
5-22
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 04 (2011-01-12)

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top