Page 56 / 148 Scroll up to view Page 51 - 55
Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
6-6
Advanced Configuration
202-10090-01, April 2005
Incoming (Response) Port Range - enter the range of port numbers used by the remote system
when it responds to the PC's request.
Modifying or Deleting an existing Rule:
Select the desired rule by clicking the radio button beside the rule.
Click Edit or Delete as desired.
Checking Operation and Status
Rules Status
To see which rules are currently being used, click the Status button. The following data will be
displayed:
Rule - the name of the Rule.
LAN IP Address - The IP address of the PC currently using this rule.
Open Ports - the Incoming ports which are associated the this rule. Incoming traffic using one
of these ports will be sent to the IP address above.
Time Remaining - The time remaining before this rule is released, and thus available for other
PCs. This timer is restarted whenever incoming or outgoing traffic is received.
Page 57 / 148
Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
Advanced Configuration
6-7
202-10090-01, April 2005
Configuring WAN Setup Options
The WAN Setup options let you configure a DMZ server, change the MTU size and enable the
wireless router to respond to a Ping on the WAN port. These options are discussed below.
Figure 6-3:
WAN Setup menu.
Connect Automatically, as Required
Normally, this option should be enabled. An Internet connection will be made automatically
after each timeout, whenever Internet-bound traffic is detected. This provides connection on
demand and is potentially cost-saving.
If disabled, you must connect manually, using the Connection Status button on the Router
Status screen. This manual connection will stay up all the time without timeouts.
Disable SPI Firewall
Normally, this option should be Enabled, so that your local network will be protected by the
Stateful Packet Inspection (SPI) firewall included in the WGT624 v3. However, certain
communications functions like VPN may require turning off the SPI feature.
Note:
When SPI Firewall is disabled, you must use the Passive mode in the PC FTP
client to connect to the FTP server.
Page 58 / 148
Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
6-8
Advanced Configuration
202-10090-01, April 2005
Setting Up a Default DMZ Server
The default DMZ server feature is helpful when using some online games and
videoconferencing applications that are incompatible with NAT. The router is programmed to
recognize some of these applications and to work properly with them, but there are other
applications that may not function well. In some cases, one local PC can run the application
properly if that PC’s IP address is entered as the default DMZ server.
Incoming traffic from the Internet is normally discarded by the router unless the traffic is a
response to one of your local computers or a service that you have configured in the Ports menu.
Instead of discarding this traffic, you can have it forwarded to one computer on your network. This
computer is called the Default DMZ Server.
The WAN Setup menu, shown below lets you configure a Default DMZ Server.
To assign a computer or server to be a Default DMZ server, follow these steps:
1.
Click WAN Setup link on the Advanced section of the main menu.
2.
Type the IP address for that server. To remove the default DMZ server, uncheck the Default
DMZ Server checkbox.
3.
Click Apply.
Respond to Ping on Internet WAN Port
If you want the router to respond to a 'ping' from the Internet, click the ‘Respond to Ping on
Internet WAN Port’ check box. This should only be used as a diagnostic tool, since it allows
your router to be discovered. Don't check this box unless you have a specific reason to do so.
Setting the MTU Size
The default MTU size is usually fine. The normal MTU (Maximum Transmit Unit) value for
most Ethernet networks is 1500 Bytes. For some ISPs, particularly some using PPPoE, you
may need to reduce the MTU. This should not be done unless you are sure it is necessary for
your ISP.
Any packets sent through the router that are larger than the configured MTU size will be
repackaged into smaller packets to meet the MTU requirement. To change the MTU size:
Note:
DMZ servers pose a security risk. A computer designated as the default DMZ
server loses much of the protection of the firewall, and is exposed to exploits from the
Internet. If compromised, the DMZ server can be used to attack your network.
Page 59 / 148
Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
Advanced Configuration
6-9
202-10090-01, April 2005
Under MTU Size, enter a new size between 64 and 1500. Then, click Apply to save the new
configuration.
Using a Dynamic DNS Service
If your network has a permanently assigned IP address, you can register a domain name and have
that name linked with your IP address by public Domain Name Servers (DNS). However, if your
Internet account uses a dynamically assigned IP address, you will not know in advance what your
IP address will be, and the address can change frequently. In this case, you can use a commercial
dynamic DNS service which will allow you to register your domain to their IP address, and will
forward traffic directed at your domain to whatever your current IP address happens to be.
The router contains a client that can connect to many popular dynamic DNS services. You can
select one of these services and obtain an account with them. Then, whenever your ISP-assigned
IP address changes, your router will automatically contact your dynamic DNS service provider,
log in to your account, and register your new IP address.
From the Main Menu of the browser interface, under Advanced, click on Dynamic DNS.
Figure 6-4:
Dynamic DNS screen
Note:
If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x),
the dynamic DNS service will not work because private addresses will not be routed on
the Internet.
Page 60 / 148
Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
6-10
Advanced Configuration
202-10090-01, April 2005
To configure Dynamic DNS:
1.
Register for an account with one of the dynamic DNS service providers whose names appear
in the ‘Select Service Provider’ box. For example, for dyndns.org, go to www.dyndns.org.
2.
Select the Use a Dynamic DNS service check box.
3.
Select the name of your dynamic DNS Service Provider.
4.
Type the Host Name (or domain name) that your dynamic DNS service provider gave you.
5.
Type the User Name for your dynamic DNS account.
6.
Type the Password (or key) for your dynamic DNS account.
7.
If your dynamic DNS provider allows the use of wildcards in resolving your URL, you may
select the Use wildcards check box to activate this feature.
For example, the wildcard feature will cause *.yourhost.dyndns.org to be aliased to the same
IP address as yourhost.dyndns.org
8.
Click Apply to save your configuration.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top