36

|

Chapter 3.

Security Settings

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

2.

From the main menu, under

Advanced > Wireless Settings

, and then click

Setup Access

List

to display the Wireless Card Access List screen.

Figure 17.

The Wireless Station Access List screen displays a list of wireless PCs that are allowed to

connect to the N300 wireless modem router based on their MAC addresses. These

wireless PCs must also have the correct SSID and wireless security settings to access

the wireless network.

3.

Select the

Turn Access Control On

check box.

Figure 18.

Note:

If the

Turn Access Control On

check box is selected and the

Trusted Wireless Stations list is blank, then no wireless PCs will be

able to connect to your wireless network.

4.

You can select a wireless station from the Available Wireless Stations list, or you can enter

its MAC address manually:

Downloaded from

www.Manualslib.com

manuals search engine

Chapter 3.

Security Settings

|

37

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

-

If the wireless station is shown in the Available Wireless Stations list, click its radio

button to select it, and then click

Add

.

-

To manually specify the wireless station, in the Add New Station Manually section,

enter the name of the wireless station and its MAC address.The MAC address is 12

hexadecimal digits and can usually be found on the bottom of the wireless device.

Click

Add

.

The wireless station appears in the Trusted Wireless Stations list.

Note:

You can use the

Delete

button to remove access by a wireless

station.

5.

When you are finished, click

Apply

to save your changes. Now, only devices on the Trusted

Devices list will be allowed to wirelessly connect to the N300 wireless modem router.

Blocking Access to Internet Sites

The N300 wireless modem router allows you to restrict access based on Web addresses and

Web address keywords. Up to 255 entries are supported in the Keyword list.

Keyword application examples:

•

If the keyword XXX is specified, the URL www.zzzyyqq.com/xxx.html is blocked.

•

If the keyword .com is specified, only websites with other domain suffixes (such as .edu,

.org, or .gov) can be viewed.

To block access to Internet sites:

1.

Select

Security > Block Sites

in the main menu. The Block Sites screen displays.

Figure 19.

2.

Enable keyword blocking by selecting either

Per Schedule

or

Always

.

Downloaded from

www.Manualslib.com

manuals search engine

38

|

Chapter 3.

Security Settings

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

To block by schedule, be sure to specify a time period in the Schedule screen. For

information about scheduling, see

Scheduling Blocking

on page

45.

Block all access to Internet browsing during a scheduled period by entering a dot (

.

) as

the keyword, and then set a schedule in the Schedule screen.

3.

Add a keyword or domain by entering it in the keyword field and clicking

Add Keyword

. The

keyword or domain name then appears in the Block sites containing these keywords or

domain names list.

Delete a keyword or domain name by selecting it from the list and clicking

Delete

Keyword

.

4.

You can specify one trusted user, which is a computer that is exempt from blocking and

logging. Specify a trusted user by entering that computer’s IP address in the Trusted IP

Address fields.

Since the trusted user is identified by IP address, you should configure that computer with

a fixed IP address.

5.

Click

Apply

to save all your settings in the Block Sites screen.

Firewall Rules

You can use this screen to create firewall rules to block or allow specific traffic.

Note:

The firewall rules feature is for advanced administrators only!

Incorrect configuration will cause serious problems.

The Firewall Rules screen lists all existing rules for outbound traffic and inbound traffic. If you

have not defined any rules, only the default rules are listed. You can add or edit rules. You

can also use the

Move

and

Delete

buttons to move the selected rule to a new position in the

table, or to delete the selected rule.

From the main menu, select

Security > Firewall Rules

to display the following screen:

Downloaded from

www.Manualslib.com

manuals search engine

Chapter 3.

Security Settings

|

39

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

Figure 20.

•

Outbound Services

. This lists all existing rules for outbound traffic. If you have not

defined any rules, only the default rule is listed. The default rule allows all outgoing traffic.

•

Inbound Services

. This lists all existing rules for inbound traffic. If you have not defined

any rules, only the default rule is listed. The default rule blocks all inbound traffic.

•

Ports to enable MSN and AOL Instant Messaging are open by default. To close these

ports, select the

Close IM Ports

radio button, and then click

Apply

so that your changes

take effect. When these ports are closed, Instant Messaging does not function.

To add or edit a rule from the Firewall Rules screen:

1.

To edit a rule, select its radio button. To add a rule, click

Add

(it does not matter which

radio button is selected).

Depending on your selection, either the Outbound Services screen or Inbound Services

screen is displayed.

Downloaded from

www.Manualslib.com

manuals search engine

40

|

Chapter 3.

Security Settings

N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual

Figure 21.

2.

From the

Service

list, select the service that you want to add or edit.

3.

Enter the settings to specify the service as explained in the following table.

Field

Outbound Rules

Inbound Rules

Action

• For outbound rules, ALLOW rules are

useful only if the traffic is already covered

by a BLOCK rule (that is, you want to

allow a subset of traffic that is currently

blocked by another rule).

• To define the schedule used in these

selections, use the Schedule screen (see

Scheduling Blocking

on page

45).

• For inbound rules, BLOCK rules are

useful only if the traffic is already covered

by an ALLOW rule (that is, you want to

block a subset of traffic that is currently

allowed by another rule).

• To define the schedule used in these

selections, use the Schedule screen (see

Scheduling Blocking

on page

45).

LAN users

(outbound

services only)

These settings determine which computers

on your network are affected by this rule,

based on their source (LAN) IP address.

Select the option you want:

•

Any

. All local IP addresses are covered

by this rule.

•

Address range

. If this option is selected,

you must fill in the Start and Finish fields.

•

Single address

. Enter the required

address in the Start fields.

—

Send to LAN

Server (inbound

services only)

—

Enter the IP address of the PC or server on

your LAN that will receive the inbound traffic

covered by this rule.

Downloaded from

www.Manualslib.com

manuals search engine