25

applications, or distance learning, security has been always the most concerned. The

firewall of this router helps to protect you local network against attack from unauthorized

outsiders. It also restricts users in the local network from accessing the Internet.

Furthermore, it can filter out specific packets that trigger the router to build an unwanted

outgoing connection.

5.4.1 Access Control

First, you can choose to enable or disable this function according to your needs.

Name:

Enter the name of the router.

Action:

you could choose to allow or deny the following addresses entered by you.

Source:

select the interface of the address, and enter the starting IP address that you want

to deny or allow.

Destination:

select the interface of the address, and enter the ending IP address that you

want to deny or allow. About the Port Range, choose the protocol and enter IP range.

Schedule:

this router has a built-in real time clock which can update itself manually or

automatically by means of Network Time Protocol (NTP). As a result, you can not only

schedule the router to dialup to the Internet at a specified time, but also restrict Internet

access to certain hours so that users can connect to the Internet only during certain hours,

say, business hours. The schedule is also applicable to other functions. You have to set

your time before set schedule.

26

5.4.2 IP/Port Filtering

Depending on whether there is an existing Internet connection, or in other words “the WAN

link status is up or down”. You can restrict certain types of data packets from your local

network to Internet through the Gateway on this page.

You can select to enable or disable IP/Port Filtering function. By default, it is disabled.

IP Address:

the IP address range that you want to filter.

Port:

the Port address that you want to filter.

Protocol Type:

choose which particular protocol type should be filtered. Here you can

choose UDP/TCP.

Schedule:

you can choose to always enable this filter function or create a schedule.

IP Filter List:

this table will list the detailed information about the IP addresses that you

want to filter.

5.4.3 MAC Filtering

On this page, you can add some MAC addresses to be filtered to isolate users’ access from

wired LAN.

27

This router allows you to disable

MAC Filtering function or allow/deny MAC address listed.

MAC Name:

the name of the computer with the MAC you entered.

MAC Address:

you can enter the MAC addresses that you want to deny or allow.

DHCP Client:

display the information about one DHCP client.

MAC Filter List:

this table will list the detailed information about the MAC addresses that

will be filtered.

5.4.4 URL Filtering

This page is used to deny LAN users from accessing the internet. Block those URLs which

contain keywords listed.

You can choose to enable or disable URL filtering function.

28

URL string:

type in the s

tring contained in URLs that you don’t allow LAN users to access.

Enter the URLs that you don’t allow LAN users to access. And you can also click

Delete

button to delete the URLs you entered.

5.4.5 Port Trigger

This page allows you to trigger port for the traffic of special applications. Ensure that you

keep the application involved up-to-date to avoid falling victim to any security exploits.

Enable/Disable:

you can choose to enable or disable this function.

Comment:

please enter the reason for this port trigger action.

Trigger Port:

type in the starting & ending ports number of the service.

Trigger type:

Specify the transport layer protocol. It could be TCP, UDP or both.

Public Port:

type in the public port number.

Public Type:

choose one transport layer protocol.

Port Trigger List:

this table will list the detailed information about the ports that you set

before.

29

5.4.6 Port Forwarding

You could choose to enable or disable this function according to your requirement.

Comment:

please enter the reason for this port forwarding action.

LAN IP:

the IP of the host that is connected to the internal network and needs to be

accessible form external network.

Protocol:

the L3 protocol type of the IP Address.

External Port:

range of the public port number.

Internal Port:

internal port number. It is the TCP/UDP port of the application running on the

host that is connected to the internal network.

Port Forwarding List:

the port forwarding list will show you the detailed information about

the forwarded port.

5.4.7 DMZ

DMZ means Demilitarized Zone. It can be enabled and used as a place where services can

be placed such as Web Servers, Proxy Servers and E-mail Servers such that these

services can still serve the local network and are at the same time isolated from it for

additional security. DMZ is commonly used with the NAT functionality as an alternative for

the Port Forwarding while makes all the ports of the host network device be visible form the

external network side.