Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

6-6

Advanced Configuration

202-10090-01, April 2005

•

Incoming (Response) Port Range - enter the range of port numbers used by the remote system

when it responds to the PC's request.

Modifying or Deleting an existing Rule:

•

Select the desired rule by clicking the radio button beside the rule.

•

Click Edit or Delete as desired.

•

Checking Operation and Status

Rules Status

To see which rules are currently being used, click the Status button. The following data will be

displayed:

•

Rule - the name of the Rule.

•

LAN IP Address - The IP address of the PC currently using this rule.

•

Open Ports - the Incoming ports which are associated the this rule. Incoming traffic using one

of these ports will be sent to the IP address above.

•

Time Remaining - The time remaining before this rule is released, and thus available for other

PCs. This timer is restarted whenever incoming or outgoing traffic is received.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

Advanced Configuration

6-7

202-10090-01, April 2005

Configuring WAN Setup Options

The WAN Setup options let you configure a DMZ server, change the MTU size and enable the

wireless router to respond to a Ping on the WAN port. These options are discussed below.

Figure 6-3:

WAN Setup menu.

•

Connect Automatically, as Required

Normally, this option should be enabled. An Internet connection will be made automatically

after each timeout, whenever Internet-bound traffic is detected. This provides connection on

demand and is potentially cost-saving.

If disabled, you must connect manually, using the Connection Status button on the Router

Status screen. This manual connection will stay up all the time without timeouts.

•

Disable SPI Firewall

Normally, this option should be Enabled, so that your local network will be protected by the

Stateful Packet Inspection (SPI) firewall included in the WGT624 v3. However, certain

communications functions like VPN may require turning off the SPI feature.

Note:

When SPI Firewall is disabled, you must use the Passive mode in the PC FTP

client to connect to the FTP server.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

6-8

Advanced Configuration

202-10090-01, April 2005

•

Setting Up a Default DMZ Server

The default DMZ server feature is helpful when using some online games and

videoconferencing applications that are incompatible with NAT. The router is programmed to

recognize some of these applications and to work properly with them, but there are other

applications that may not function well. In some cases, one local PC can run the application

properly if that PC’s IP address is entered as the default DMZ server.

Incoming traffic from the Internet is normally discarded by the router unless the traffic is a

response to one of your local computers or a service that you have configured in the Ports menu.

Instead of discarding this traffic, you can have it forwarded to one computer on your network. This

computer is called the Default DMZ Server.

The WAN Setup menu, shown below lets you configure a Default DMZ Server.

To assign a computer or server to be a Default DMZ server, follow these steps:

1.

Click WAN Setup link on the Advanced section of the main menu.

2.

Type the IP address for that server. To remove the default DMZ server, uncheck the Default

DMZ Server checkbox.

3.

Click Apply.

•

Respond to Ping on Internet WAN Port

If you want the router to respond to a 'ping' from the Internet, click the ‘Respond to Ping on

Internet WAN Port’ check box. This should only be used as a diagnostic tool, since it allows

your router to be discovered. Don't check this box unless you have a specific reason to do so.

•

Setting the MTU Size

The default MTU size is usually fine. The normal MTU (Maximum Transmit Unit) value for

most Ethernet networks is 1500 Bytes. For some ISPs, particularly some using PPPoE, you

may need to reduce the MTU. This should not be done unless you are sure it is necessary for

your ISP.

Any packets sent through the router that are larger than the configured MTU size will be

repackaged into smaller packets to meet the MTU requirement. To change the MTU size:

Note:

DMZ servers pose a security risk. A computer designated as the default DMZ

server loses much of the protection of the firewall, and is exposed to exploits from the

Internet. If compromised, the DMZ server can be used to attack your network.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

Advanced Configuration

6-9

202-10090-01, April 2005

Under MTU Size, enter a new size between 64 and 1500. Then, click Apply to save the new

configuration.

Using a Dynamic DNS Service

If your network has a permanently assigned IP address, you can register a domain name and have

that name linked with your IP address by public Domain Name Servers (DNS). However, if your

Internet account uses a dynamically assigned IP address, you will not know in advance what your

IP address will be, and the address can change frequently. In this case, you can use a commercial

dynamic DNS service which will allow you to register your domain to their IP address, and will

forward traffic directed at your domain to whatever your current IP address happens to be.

The router contains a client that can connect to many popular dynamic DNS services. You can

select one of these services and obtain an account with them. Then, whenever your ISP-assigned

IP address changes, your router will automatically contact your dynamic DNS service provider,

log in to your account, and register your new IP address.

From the Main Menu of the browser interface, under Advanced, click on Dynamic DNS.

Figure 6-4:

Dynamic DNS screen

Note:

If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x),

the dynamic DNS service will not work because private addresses will not be routed on

the Internet.

Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3

6-10

Advanced Configuration

202-10090-01, April 2005

To configure Dynamic DNS:

1.

Register for an account with one of the dynamic DNS service providers whose names appear

in the ‘Select Service Provider’ box. For example, for dyndns.org, go to www.dyndns.org.

2.

Select the Use a Dynamic DNS service check box.

3.

Select the name of your dynamic DNS Service Provider.

4.

Type the Host Name (or domain name) that your dynamic DNS service provider gave you.

5.

Type the User Name for your dynamic DNS account.

6.

Type the Password (or key) for your dynamic DNS account.

7.

If your dynamic DNS provider allows the use of wildcards in resolving your URL, you may

select the Use wildcards check box to activate this feature.

For example, the wildcard feature will cause *.yourhost.dyndns.org to be aliased to the same

IP address as yourhost.dyndns.org

8.

Click Apply to save your configuration.