Control Internet Access

41

Dual Band Wireless VDSL2 + Ethernet Gateway

5.

Click the

Add a Custom Service

button.

6.

In the

Name

field, type the name of the service.

7.

In the

Type

list, select

TCP

,

UDP

or

TCP/UDP

.

If you are not sure, select

TCP/UDP

.

8.

Specify the range of ports in the

Start Port

and

Finish Port

fields.

9.

Click the

Apply

button.

The service is added.

Add Outbound Firewall Rules

By default, the gateway allows all communication from your network out to the Internet. You

can add rules to restrict outbound Internet traffic.

Note:

This feature is for advanced administrators only. Incorrect

configuration causes serious problems.



To add firewall rules for an outbound service:

1.

Launch a web browser from a computer or wireless device that is connected to the

network.

2.

Type

http://routerlogin.net

or

www.routerlogin.com

.

A login screen displays.

3.

Enter the gateway user name and password.

The user name is

admin

. The default password is

password

. The user name and

password are case-sensitive.

The BASIC Home screen displays.

Control Internet Access

42

Dual Band Wireless VDSL2 + Ethernet Gateway

4.

Select

Advanced > Security > Firewall Rules

.

If you did not define any outbound rules, only the default rule is listed in the Outbound

Firewall Rules table. The default rule allows all outgoing traffic.

5.

Click the

Add

button.

6.

In the

Services

list, select the service.

If the service is not in the list, select

User Defined

. If you select

User Defined

, you must

select the protocol and enter the name and the range of port numbers used by the

service. For services on the list, these fields are filled in automatically.

7.

In the

Action

list, select a block or allow setting.

8.

To block specific LAN users, in the

LAN Users

list, select

Single Address

or

Address

Range

and type the IP address or addresses.

9.

To block specific WAN servers, in the

WAN Services

list, select

Single Address

or

Address Range

and type the IP address or addresses.

10.

To log instances of when this rule is used, in the

Log

list, select

Always

.

11.

Click the

Apply

button.

Your settings are saved. The Firewall Rules screen displays the new rule.

Control Internet Access

43

Dual Band Wireless VDSL2 + Ethernet Gateway

Edit an Outbound Firewall Rule

This feature is for advanced administrators only. Incorrect configuration causes serious

problems.



To edit an outbound rule:

1.

Launch a web browser from a computer or wireless device that is connected to the

network.

2.

Type

http://routerlogin.net

or

www.routerlogin.com

.

A login screen displays.

3.

Enter the gateway user name and password.

The user name is

admin

. The default password is

password

. The user name and

password are case-sensitive.

The BASIC Home screen displays.

4.

Select

Advanced > Security > Firewall Rules

.

The Firewall Rules screen displays.

The table under Outbound Services lists all existing rules for outbound traffic. If you have

not defined any rules, only the default rule is listed. The default rule allows all outgoing

traffic.

5.

Select the radio button for the rule.

6.

Click the

Edit

button.

7.

Change the settings.

8.

Click the

Apply

button.

Your settings are saved.

Delete an Outbound Firewall Rule



To delete an outbound rule:

1.

Launch a web browser from a computer or wireless device that is connected to the

network.

2.

Type

http://routerlogin.net

or

www.routerlogin.com

.

A login screen displays.

3.

Enter the gateway user name and password.

The user name is

admin

. The default password is

password

. The user name and

password are case-sensitive.

The BASIC Home screen displays.

4.

Select

Advanced > Security > Firewall Rules

.

The Firewall Rules screen displays.

Control Internet Access

44

Dual Band Wireless VDSL2 + Ethernet Gateway

The table under Outbound Services lists all existing rules for outbound traffic. If you did

not define any rules, only the default rule is listed. The default rule allows all outgoing

traffic.

5.

Select the radio button for the rule.

6.

Click the

Delete

button.

The rule is deleted.

Set Up Port Forwarding to a Local Server

If your home network includes a server, you can allow certain types of incoming traffic to

reach the server. For example, you might want to make a local web server, FTP server, or

game server visible and available to the Internet.

The gateway can forward incoming traffic with specific protocols to computers on your local

network. You can specify the servers for applications and you can also specify a default DMZ

server to which the gateway forwards all other incoming protocols.



To forward specific incoming protocols:

1.

Decide which type of service, application, or game you want to provide.

2.

Find the local IP address of the computer on your network that will provide the service.

The server computer must always have the same IP address. Assign a reserved IP

address to the server computer. See

Reserved LAN IP Addresses

on page

73.

3.

Launch a web browser from a computer or wireless device that is connected to the network.

4.

Type

http://routerlogin.net

or

www.routerlogin.com

.

A login screen displays.

5.

Enter the gateway user name and password.

The user name is

admin

. The default password is

password

. The user name and

password are case-sensitive.

The BASIC Home screen displays.

Control Internet Access

45

Dual Band Wireless VDSL2 + Ethernet Gateway

6.

Select

Advanced > Advanced Setup > Port Forwarding/Port Triggering

.

7.

Leave the

Port Forwarding

radio button selected as the service type.

8.

In the

Service Name

list, select the service name.

If the service that you want to add is not in the list, create a custom service. See

Add a

Custom Port Forwarding Service

on page

45.

9.

Click the

Add

button.

The service displays in the list.

Add a Custom Port Forwarding Service



To add a custom service:

1.

Find out which port number or range of numbers the application uses.

You can usually find this information by contacting the publisher of the application or user

groups or news groups.

2.

Launch a web browser from a computer or wireless device that is connected to the network.

3.

Type

http://routerlogin.net

or

www.routerlogin.com

.

A login screen displays.

4.

Enter the gateway user name and password.

The user name is

admin

. The default password is

password

. The user name and

password are case-sensitive.

The BASIC Home screen displays.

5.

Select

Advanced > Advanced Setup > Port Forwarding/Port Triggering

.

The Port Forwarding/Port Triggering screen displays.

6.

Leave the

Port Forwarding

radio button selected as the service type.