30

Chapter 5: Configuring the Wireless-N ADSL2+ Gateway

The Security Tab

Wireless-N ADSL2+ Gateway

The VPN Passthrough Tab

Virtual Private Networking (VPN) is a security measure that basically creates a secure connection between two

remote locations. Configure these settings so the Gateway will permit VPN tunnels to pass through.

VPN Passthrough

•

IPSec Passthrough. Internet Protocol Security (IPSec) is a suite of protocols used to implement secure

exchange of packets at the IP layer. To allow IPSec Passthrough, click the

Enable

button. To disable IPSec

Passthrough, click the

Disable

button.

•

PPTP Passthrough. Point-to-Point Tunneling Protocol Passthrough is the method used to enable VPN sessions

to a Windows NT 4.0 or 2000 server. To allow PPTP Passthrough, click the

Enable

button. To disable PPTP

Passthrough, click the

Disable

button.

•

L2TP Passthrough. Layering 2 Tunneling Protocol Passthrough is an extension of the Point-to-Point Tunneling

Protocol (PPTP) used to enable the operation of a VPN over the Internet.To allow L2TP Passthrough, click the

Enable

button. To disable L2TP Passthrough, click the

Disable

button.

When finished making your changes on this tab, click the

Save Settings

button to save these changes, or click

the

Cancel Changes

button to undo your changes. Click

Help

for more information.

Figure 5-24: VPN Passthrough

31

Chapter 5: Configuring the Wireless-N ADSL2+ Gateway

The Access Restrictions Tab

Wireless-N ADSL2+ Gateway

The Access Restrictions Tab

The Internet Access Policy Tab

The

Internet Access Policy

screen allows you to block or allow specific kinds of Internet usage. You can set up

Internet access policies for specific computers and block websites by URL address or keyword.

Internet Access Policy

Internet Access Policy. Access can be managed by a policy. Use the settings on this screen to establish an access

policy (after the

Save Settings

button is clicked). Selecting a policy from the drop-down menu will display that

policy’s settings. To delete a policy, select that policy’s number and click the

Delete

button. To view all the

policies, click the

Summary

button. (Policies can be deleted from the

Summary

screen by selecting the policy or

policies and clicking the

Delete

button. To return to the Internet Access screen, click the

Close

button.)

Status. Policies are disabled by default. To enable a policy, select the policy number from the drop-down menu,

and click the radio button beside

Enable

.

To create an Internet Access policy:

1.

Select a number from the

Internet Access Policy

drop-down menu.

2.

To enable this policy, click the radio button beside

Enable

.

3.

Enter a Policy Name in the field provided.

Figure 5-25: Internet Access Policy

Figure 5-26: Internet Policy Summary

32

Chapter 5: Configuring the Wireless-N ADSL2+ Gateway

The Access Restrictions Tab

Wireless-N ADSL2+ Gateway

4.

Click the

Edit List of PCs

button to select which PCs will be affected by the policy. The

List of PCs

screen will

appear. You can select a PC by MAC Address or IP Address. You can also enter a range of IP Addresses if you

want this policy to affect a group of PCs. After making your changes, click the

Save Settings

button to apply

your changes or

Cancel Changes

to cancel your changes. Then click the

Close

button to exit this screen.

5.

Click the appropriate option,

Deny

or

Allow

, depending on whether you want to block or allow Internet access

for the PCs you listed on the

List of PCs

screen.

6.

Decide which days and what times you want this policy to be enforced. Select the individual days during

which the policy will be in effect, or select

Everyday

. Then enter a range of hours and minutes during which

the policy will be in effect, or select

24 Hours

.

7.

If you want to block websites with specific URL addresses, enter each URL in a separate field next to

Website

Blocking by URL Address

.

8.

If you want to block websites using specific keywords, enter each keyword in a separate field next to

Website

Blocking by Keyword

.

9.

You can filter access to various services accessed over the Internet, such as FTP or telnet, by selecting

services from the drop-down menus next to

Blocked Services

. The port numbers and protocol for the selected

service will be automatically displayed.

If the service you want is not listed, select

User-Defined

. Enter its port numbers in the fields provided. Then

select its protocol,

ICMP

,

TCP

,

UDP

, or

TCP & UDP

from the drop-down menu.

10. Click the

Save Settings

button to save the policy’s settings. To undo the policy’s settings, click the

Cancel

Changes

button. Click

Help

for more information.

Figure 5-27: List of PCs

33

Chapter 5: Configuring the Wireless-N ADSL2+ Gateway

The Applications and Gaming Tab

Wireless-N ADSL2+ Gateway

The Applications and Gaming Tab

The Single Port Range Forwarding Tab

Use the

Single Port Range Forwarding

screen when you want to open a specific port so users on the Internet can

see the servers behind the Gateway (such servers may include FTP or e-mail servers). When users send this type

of request to your network via the Internet, the Gateway will forward those requests to the appropriate computer.

Any computer whose port is being forwarded should have its DHCP client function disabled and should have a

new static IP address assigned to it because its IP address may change when using the DHCP function.

Single Port Forwarding

•

Application. Enter the name of the application in the field provided.

•

External Port and Internal Port. Enter the External and Internal Port numbers.

•

Protocol. Select the protocol you wish to use for each application:

TCP

or

UDP

.

•

IP Address. Enter the IP Address of the appropriate computer.

•

Enabled. Click

Enabled

to enable forwarding for the chosen application.

When finished making your changes on this tab, click the

Save Settings

button to save these changes, or click

the

Cancel Changes

button to undo your changes. Click

Help

for more information.

Figure 5-28: Single Port Forwarding

34

Chapter 5: Configuring the Wireless-N ADSL2+ Gateway

The Applications and Gaming Tab

Wireless-N ADSL2+ Gateway

The Port Range Forwarding Tab

The

Port Range Forwarding

screen sets up public services on your network, such as web servers, ftp servers, e-

mail servers, or other specialized Internet applications. (Specialized Internet applications are any applications

that use Internet access to perform functions such as videoconferencing or online gaming. Some Internet

applications may not require any forwarding.)

When users send this type of request to your network via the Internet, the Gateway will forward those requests to

the appropriate computer. Any computer whose port is being forwarded should have its DHCP client function

disabled and should have a new static IP address assigned to it because its IP address may change when using

the DHCP function.

Port Range Forwarding

•

Application. Enter the name of the application in the field provided.

•

Start and End. Enter the starting and ending numbers of the port range you wish to forward.

•

Protocol. Select the protocol you wish to use for each application:

TCP

,

UDP

, or

Both

.

•

IP Address. Enter the IP Address of the appropriate computer.

•

Enable. Click the

Enable

checkbox to enable forwarding for the chosen application.

When finished making your changes on this tab, click the

Save Settings

button to save these changes, or click

the

Cancel Changes

button to undo your changes. Click

Help

for more information.

Figure 5-29: Port Range Forwarding