54

4.3.4.1 Packet Filter

Packet filtering enables you to configure your router to block specified internal/external

users (

IP address

) from Internet access, or you can disable specific service requests (

Port

number

) to /from Internet. This configuration program allows you to set up to 6 different filter

rules for different users based on their IP addresses or their network Port number. The

relationship among all filters is

“or”

operation, which means that the router checks these

different filter rules one by one, starting from the first rule. As long as one of the rules is

satisfied, the specified action is taken.

Add:

Click this button to add a new packet filter rule and the next figure appears.

Edit:

Check the Rule No. you wish to edit, and then click “Edit”.

Delete:

Check the Rule No. you wish to delete, and then click “Delete”.

~

Outgoing

~

Incoming:

Determine whether the rule is for outgoing packets or for

incoming packets.

55

Active:

Choose “Yes” to enable the rule, or choose “No” to disable the rule.

Packet Type:

Specify the packet type (TCP, UDP, ICMP or any) that the rule applies to.

Select

TCP

if you wish to search for the connection-based application service on the remote

server using the port number. Or select

UDP

if you want to search for the connectionless

application service on the remote server using the port number.

Log:

Choose “Yes” if you wish to generate logs when the filer rule is applied to a packet.

Action When Matched:

If a packet matches this filter rule,

Forward

or

Drop

this packet.

Source IP Address:

Enter the incoming or outgoing packet’s source IP address(es).

Source Port:

Check the TCP or UDP packet’s source port number(s).

Destination IP Address:

Enter the incoming or outgoing packet’s destination IP

address(es).

Destination Port:

Check the TCP or UDP packet’s destination port number(s).

Schedule time:

User can setup the time to use the packet filter.

4.3.4.2 Ethernet MAC Filter

A Ethernet MAC (Media Access Control) address is the unique network hardware identifier

for each PC on your network’s interface (i.e. its Network Interface Card or Ethernet card).

Using your router’s MAC Address Filter function, you can configure the switch to only accept

traffic from specified machines, or else to block specific machines from accessing your LAN.

There are no pre-defined MAC address filter rules; you can add the filter rules to meet your

requirements.

If the DHCP server option is enabled, you must be very careful in assigning IP

addresses of a filtered private IP range to avoid conflicts because you do not

know which PC in the LAN is assigned which IP address. The easiest and

safest way is that the filtered IP address is assigned to a specific PC that is not

allowed to access an outside resource such as the Internet. You configure the

filtered IP address manually for this PC, but it stays in the same subnet with the

router.

Attention

56

Active:

Select

Yes

from the drop down list box to enable MAC address filtering.

Action When Matched:

Select “Drop” or “Forward”.

Log:

Choose “Yes” if you wish to generate logs when the filer rule is applied to a packet.

MAC Address:

Enter the MAC addresses you wish to manage.

Candidates:

it automatically detects devices connected to the router through the

Ethernet.

57

4.3.4.3 Wireless MAC Filter

The MAC Address supports up to 30 wireless network machines and helps you to manage

your network control to accept traffic from specific authorized machines or to restrict

unwanted machine(s) to access your LAN.

There are no pre-define MAC Address filter rules; you can add the filter rules to meet your

requirements

58

Active:

Select

Yes

from the drop down list box to enable MAC address filtering.

Action When Matched:

Select “Drop” or “Forward”.

Log:

Choose “Yes” if you wish to generate logs when the filer rule is applied to a packet.

MAC Address:

Enter the MAC addresses you wish to manage.

Candidates:

it automatically detects devices connected to the router through the

Ethernet.

4.3.4.4 Intrusion Detection

Check “Enable” if you wish to detect intruders accessing your computer without permission.

The router automatically detects and blocks a DoS (Denial of Service) attack if a user

enables this function. This kind of attack is not to access confidential data on the network;

instead, it aims to disrupt specific equipment or the entire network. If this happens, users are

not able to access network resources.