TD-W8960N

300Mbps Wireless N ADSL2+ Modem Router User Guide

Figure 4-28

2.

Select the application from the drop-down list. If the list does not have the application that

you want, select the

Custom application

radio button, and type the name of the custom

application in the text box.

3.

Enter the

Trigger Port Start

,

Trigger Port End

,

Open Port Start

and

Open Port End

in the

table, and then select the

Trigger protocol

and

Open protocol

,

TCP

,

UDP

or

All

.

4.

Click

Save/Apply

to enable the settings and then you will see you settings as shown in Figure

4-27.

)

Note:

If you select the application from the drop-down list, the External Port Start, External Port End,

Internal Port Start, Internal Port End and the Protocol will be added in the table automatically.

4.4.5.3 DMZ Host

Choose “

Advanced Setup

”

Æ

“

NAT

”

Æ

“

DMZ Host

”, you can set up DMZ Host on the screen

(shown in Figure 4-29).

The DMZ host feature can make a local host be exposed to the Internet for a special-purpose

service, such as online gaming or video conferencing.

39

TD-W8960N

300Mbps Wireless N ADSL2+ Modem Router User Guide

Figure 4-29

To add a new DMZ Host:

You can enter the computer's IP address and then click

Save/Apply

to activate the DMZ host you

set on this page.

)

Note:

DMZ host forwards all the ports at the same time. Any PC whose port is being forwarded must

have its DHCP client function disabled and should have a new static IP Address assigned to it

because its IP Address may change while using the DHCP function.

4.4.6 Security

Choose “

Advanced Setup

”

Æ

“

Security

”, and you will see the security screen including

IP

Filtering

and

MAC Filtering

(only effective in Bridging mode)

submenus.

Figure 4-30

4.4.6.1 IP Filtering

The IP address filtering feature makes it possible for administrators to control user's access to the

Internet, which is based on user's IP. The IP address filtering includes

Outgoing

and

Incoming

,

the detailed descriptions are provided below.

IP Filtering - Outgoing

Choose “

Advanced Setup

”

Æ

“

Security

”

Æ

“

IP Filtering

”

Æ

“

Outgoing

”, you can configure

Outgoing Filtering rules on the screen (shown in Figure 4-31).

40

TD-W8960N

300Mbps Wireless N ADSL2+ Modem Router User Guide

The Outgoing IP Filtering feature allows you to control some IP traffic from LAN to access to some

specifically addresses. By default, all outgoing IP traffic from LAN is allowed, but some IP traffic

can be

BLOCKED

by setting up filters.

Figure 4-31

Set up an Outgoing IP Filtering rule:

1.

Click the

Add

button in Figure 4-31, and you will see the next screen as shown in Figure 4-32.

Figure 4-32

2.

Enter the

Filter name

for the rule, it is exclusive and must be filled.

3.

Select the

protocol: TCP/UDP

,

TCP

,

UDP

or

ICMP

in the drop-down list for the connection

between the Source IP address

and Destination IP address.

4.

Enter a

Source IP Address

in dotted-decimal notation format and then type the

Source

Subnet Mask

and

Source Port

(port or port

:

port) in the text boxes separately.

5.

Enter a

Destination IP Address

in dotted-decimal notation format and then type the

Destination Subnet Mask

and

Destination Port

(port or port

:

port) in the text boxes

separately.

6.

Click

Save/Apply

to save this entry.

41

TD-W8960N

300Mbps Wireless N ADSL2+ Modem Router User Guide

)

Note:

When you add an

Outgoing IP Filtering entry, you must configure at least one condition on the

preceding screen except the Filter name. If you leave the Protocol blank, it means that the rule is

effective to all protocols, if you leave the Source IP Address and/or Destination IP Address blank,

it suggests that all Source IP Addresses and/or Destination IP Addresses are controlled by the

rule, if you leave the Source Port and/or Destination Port blank, it suggests that all Source Ports

and/or Destination Ports are controlled by the rule.

IP Filtering - Incoming

Choose “

Advanced Setup

”

Æ

“

Security

”

Æ

“

IP Filtering

”

Æ

“

Incoming

”, you can configure

Incoming Filtering rules on the screen as shown in Figure 4-33.

The Incoming IP Filtering feature allows some IP traffic from WAN to access some local addresses.

By default, all incoming IP traffic from the WAN is blocked when the firewall is enabled. However,

some IP traffic can be

ACCEPTED

by setting up filters.

Figure 4-33

Set up an Incoming IP Filtering rule:

1.

Click the

Add

button in Figure 4-33, and then you will see Figure 4-34.

42

TD-W8960N

300Mbps Wireless N ADSL2+ Modem Router User Guide

Figure 4-34

2.

Enter the

Filter name

for the rule, it is exclusive and must be filled in.

3.

Select

Protocol

in the drop-down list, enter

Source IP address

,

Source Subnet Mask

,

Source Port

,

Destination IP address

,

Destination Subnet Mask

, and

Destination Port

for

the rule.

4.

Select at least one WAN interfaces displayed below to apply this rule.

5.

Click

Save/Apply

to save this entry.

)

Note:

When you add an

Incoming IP Filtering entry, you must configure at least one condition on the

preceding screen except the Filter name. If you leave

Protocol

blank, it means that the rule is

effective to all protocols, if you leave the Source IP address and/or Destination IP address blank,

it suggests that all Source IP addresses and/or Destination IP addresses are controlled by the

rule, if you leave the Source Port and/or Destination Port blank, it suggests that all Source Ports

and/or Destination Ports are controlled by the rule.

4.4.6.2 MAC Filtering

Choose “

Advanced Setup

”

Æ

“

Security

”

Æ

“

MAC Filtering

”, you can configure MAC Filtering rules

on the screen as shown in Figure 4-35. The section allows you to control access to the Internet by

users on your local network based on their MAC Address.

)

Note:

MAC Filtering is only effective on ATM PVC(s) configured in Bridging mode.

43