TD-W8950ND

150Mbps Wireless Lite N ADSL2+ Modem Router User Guide

Figure 4-35

2.

Select the application from the drop-down list. If the list does not have the application that

you want, select the Custom application radio button, and type the name of the custom

application in the text box.

3.

Enter the Trigger Port Start, Trigger Port End, Open Port Start and Open Port End in the table,

and then select the Trigger protocol and Open protocol, TCP, UDP or All.

4.

Click Save/Apply to enable the settings and then you will see you settings as shown in Figure

4-34.

)

Note:

If you select the application from the drop-down list, the External Port Start, External Port End,

Internal Port Start, Internal Port End and the Protocol will be added in the table automatically.

4.5.4.3 DMZ Host

Choose “Advanced Setup

→

NAT

→

DMZ Host”, you can set up DMZ Host on the screen (shown in

Figure 4-36).

The DMZ host feature can make a local host be exposed to the Internet for a special-purpose

service, such as online gaming or video conferencing.

Figure 4-36

To add a new DMZ Host:

39

TD-W8950ND

150Mbps Wireless Lite N ADSL2+ Modem Router User Guide

You can enter the computer's IP address and then click Save/Apply to activate the DMZ host you

set on this page.

)

Note:

DMZ host forwards all the ports at the same time. Any PC whose port is being forwarded must

have its DHCP client function disabled and should have a new static IP Address assigned to it

because its IP Address may change while using the DHCP function.

4.5.5 Security

Choose “Advanced Setup

→

Security” menu, you can do some security configurations for your

Router. There are two submenus under the Security menu as shown in Figure 4-37.

Figure 4-37

When you select the connection type PPPoE, PPPoA or IPoA for WAN configuration, you will see

the more submenus in the Web-based Utility shown as Figure 4-38.

Figure 4-38

4.5.5.1 MAC Filtering

Choose “Security

→

MAC Filtering” menu, you can configure the MAC filtering rule in the next

screen similar to Figure 4-39. The MAC Address Filtering feature allows you to control the access

of users on your local network basing on their MAC addresses.

Figure 4-39

MAC Filtering Global Policy - The default setting is FORWARDED.

40

TD-W8950ND

150Mbps Wireless Lite N ADSL2+ Modem Router User Guide

•

FORWARDED means that all MAC layer frames will be forwarded except those matching with

any of the specified rules in the following table.

•

BLOCKED means that all MAC layer frames will be blocked except those matching with any

of the specified rules in the following table.

You can change the policy by clicking the Change Policy button to go to the Change MAC Filtering

Global Policy page as shown in Figure 4-40.

Figure 4-40

To add a new entry, follow the steps below.

1.

Click the Add button in Figure 4-39 to go to the Add MAC Filter page as shown in Figure 4-41.

2.

Select the protocol type.

3.

Enter the destination MAC address.

4.

Enter the source MAC address.

5.

Select the frame direction.

6.

Select the WAN interfaces.

7.

Click Save/Apply to save your settings.

Figure 4-41

To remove an existing entry, follow the steps below.

1.

Check the Remove box as shown in Figure 4-39 in the entry you want to remove.

2.

Click the Remove button.

4.5.5.2 IP Filtering

There are two submenus under IP Filtering.

41

TD-W8950ND

150Mbps Wireless Lite N ADSL2+ Modem Router User Guide

Figure 4-42

The IP address filtering feature makes it possible for administrators to control user's access to the

Internet, which is based on user's IP. The IP address filtering includes Outgoing and Incoming, the

detailed descriptions are provided below.

IP Filtering - Outgoing

Choose “Advanced Setup

→

Security

→

IP Filtering

→

Outgoing”, you can configure Outgoing

Filtering rules on the screen (shown in Figure 4-43).

The Outgoing IP Filtering feature allows you to control some IP traffic from LAN to access to some

specifically addresses. By default, all outgoing IP traffic from LAN is allowed, but some IP traffic

can be BLOCKED by setting up filters.

Figure 4-43

Setup an Outgoing IP Filtering rule:

1.

Click the Add button in Figure 4-43, and you will see the next screen as shown in Figure 4-44.

Figure 4-44

2.

Enter the Filter name for the rule, it is exclusive and must be filled.

3.

Select the protocol: TCP/UDP, TCP, UDP or ICMP in the drop-down list for the connection

between the Source IP address and Destination IP address.

42

TD-W8950ND

150Mbps Wireless Lite N ADSL2+ Modem Router User Guide

4.

Enter a Source IP Address in dotted-decimal notation format and then type the Source

Subnet Mask and Source Port (port or port: port) in the text boxes separately.

5.

Enter a Destination IP Address in dotted-decimal notation format and then type the

Destination Subnet Mask and Destination Port (port or port: port) in the text boxes separately.

6.

Click Save/Apply to save this entry.

)

Note:

When you add an Outgoing IP Filtering entry, you must configure at least one condition on the

preceding screen except the Filter name. If you leave the Protocol blank, it means that the rule is

effective to all protocols, if you leave the Source IP Address and/or Destination IP Address blank,

it suggests that all Source IP Addresses and/or Destination IP Addresses are controlled by the

rule, if you leave the Source Port and/or Destination Port blank, it suggests that all Source Ports

and/or Destination Ports are controlled by the rule.

IP Filtering - Incoming

Choose “Advanced Setup

→

Security

→

IP Filtering

→

Incoming”, you can configure Incoming

Filtering rules on the screen as shown in Figure 4-45.

The Incoming IP Filtering feature allows some IP traffic from WAN to access some local addresses.

By default, all incoming IP traffic from the WAN is blocked when the firewall is enabled. However,

some IP traffic can be ACCEPTED by setting up filters.

Figure 4-45

Setup an Incoming IP Filtering rule:

1.

Click the Add button in Figure 4-45, and then you will see Figure 4-46.

43