Telewell EA-310v3 Router Manual PDF (Setup & Configuration Guide)

Page 26 / 44 Scroll up to view Page 21 - 25

26

4.4 Security Settings

Security Settings > Packet filters

Packet Filter enables you to control what packets are allowed to pass

the router. Outbound filter applies on all outbound packets. However,

inbound filter applies on packets that destined to Virtual Servers or DMZ

host only. You can select one of the two filtering policies:

1.

Allow all to pass except those match the specified rules

2.

Deny all to pass except those match the specified rules

Page 27 / 44

27

You can specify 8 rules for each direction: inbound or outbound. For

each rule, you can define the following:

•

Source IP address

•

Source port

•

Destination IP address

•

Destination port

•

Protocol: TCP or UDP or both.

•

Use Rule#

For source or destination IP address, you can define a single IP address

(4.3.2.1) or a range of IP addresses (4.3.2.1-4.3.2.254). An empty

implies all IP addresses.

For source or destination port, you can define a single port (80) or a

range of ports (1000-1999). Add prefix "T" or "U" to specify TCP or UDP

protocol. For example, T80, U53, U2000-2999, No prefix indicates both

TCP and UDP are defined. An empty implies all port addresses. Packet

Filter can work with Scheduling Rules, and give user more flexibility on

Access control. For Detail, please refer to Scheduling Rule. Each rule

can be enabled or disabled individually.

-> Save

Inbound Filter:

To enable Inbound Packet Filter click the check box next to Enable in

the Inbound Packet Filter field

-> Save

Page 28 / 44

28

Security Settings > Domain Filters

•

Domain Filter: let you prevent users under this device from accessing specific

URLs.

•

Domain Filter Enable: Check if you want to enable Domain Filter.

•

Log DNS Query: Check if you want to log the action when someone accesses the

specific

URLs.

•

Privilege IP Address Range: Setting a group of hosts and privilege these hosts to

access network without restriction.

•

Domain Suffix: A suffix of URL to be restricted; For example, ".com",

"xxx.com". Action: When someone is accessing the URL met the domain-suffix,

what kind of action you want.

Check drop to block the access. Check log to log these access.

•

Enable: Check to enable each rule.

-> Save

Page 29 / 44

29

Security Settings > URL Blocking

URL Blocking will block LAN computers to connect to pre-defined Websites.

The major difference between “Domain filter” and “URL Blocking” is Domain

filter require user to input suffix (like .com or .org, etc), while URL Blocking

require user to input a keyword only. In other words, Domain filter can block

specific website, while URL Blocking can block hundreds of websites by simply a

keyword.

•

URL Blocking Enable: Check if you want to enable URL Blocking.

•

URL: If any part of the Website's URL matches the pre-defined word, the

connection will be blocked.

For example, you can use pre-defined word "sex" to block all websites if their

URLs contain pre-defined word "sex".

•

Enable: Check to enable each rule.

-> Save

Page 30 / 44

30

Security Settings > MAC Control

MAC Address Control allows you to assign different access right for

different users and to assign a specific IP address to a certain MAC

address.

•

MAC Address Control:

Check “Enable” to enable the “MAC Address

Control”. All of the settings in this page will take effect only when

“Enable” is checked.

•

Connection control:

Check "Connection control" to enable the

controlling of which wired and wireless clients can connect to this

device. If a client is denied to connect to this device, it means the

client can't access to the Internet either. Choose "allow" or "deny" to

allow or deny the clients, whose MAC addresses are not in the "Control

table" (please see below), to connect to this device.

•

Association control:

Check "Association control" to enable the

controlling of which wireless client can associate to the wireless LAN. If

a client is denied to associate to the wireless LAN, it means the client

can't send or receive any data via this device. Choose "allow" or "deny"

to allow or deny the clients, whose MAC addresses are not in the

"Control table", to associate to the wireless LAN

-> Save

Rate

Popular Telewell Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share