Page 46 / 122
Scroll up to view Page 41 - 45
TD-W8960N
300Mbps Wireless N ADSL2+ Modem Router User Guide
Figure 4-28
2.
Select the application from the drop-down list. If the list does not have the application that
you want, select the
Custom application
radio button, and type the name of the custom
application in the text box.
3.
Enter the
Trigger Port Start
,
Trigger Port End
,
Open Port Start
and
Open Port End
in the
table, and then select the
Trigger protocol
and
Open protocol
,
TCP
,
UDP
or
All
.
4.
Click
Save/Apply
to enable the settings and then you will see you settings as shown in Figure
4-27.
)
Note:
If you select the application from the drop-down list, the External Port Start, External Port End,
Internal Port Start, Internal Port End and the Protocol will be added in the table automatically.
4.4.5.3 DMZ Host
Choose “
Advanced Setup
”
Æ
“
NAT
”
Æ
“
DMZ Host
”, you can set up DMZ Host on the screen
(shown in Figure 4-29).
The DMZ host feature can make a local host be exposed to the Internet for a special-purpose
service, such as online gaming or video conferencing.
39
Page 47 / 122
TD-W8960N
300Mbps Wireless N ADSL2+ Modem Router User Guide
Figure 4-29
To add a new DMZ Host:
You can enter the computer's IP address and then click
Save/Apply
to activate the DMZ host you
set on this page.
)
Note:
DMZ host forwards all the ports at the same time. Any PC whose port is being forwarded must
have its DHCP client function disabled and should have a new static IP Address assigned to it
because its IP Address may change while using the DHCP function.
4.4.6 Security
Choose “
Advanced Setup
”
Æ
“
Security
”, and you will see the security screen including
IP
Filtering
and
MAC Filtering
(only effective in Bridging mode)
submenus.
Figure 4-30
4.4.6.1 IP Filtering
The IP address filtering feature makes it possible for administrators to control user's access to the
Internet, which is based on user's IP. The IP address filtering includes
Outgoing
and
Incoming
,
the detailed descriptions are provided below.
IP Filtering - Outgoing
Choose “
Advanced Setup
”
Æ
“
Security
”
Æ
“
IP Filtering
”
Æ
“
Outgoing
”, you can configure
Outgoing Filtering rules on the screen (shown in Figure 4-31).
40
Page 48 / 122
TD-W8960N
300Mbps Wireless N ADSL2+ Modem Router User Guide
The Outgoing IP Filtering feature allows you to control some IP traffic from LAN to access to some
specifically addresses. By default, all outgoing IP traffic from LAN is allowed, but some IP traffic
can be
BLOCKED
by setting up filters.
Figure 4-31
Set up an Outgoing IP Filtering rule:
1.
Click the
Add
button in Figure 4-31, and you will see the next screen as shown in Figure 4-32.
Figure 4-32
2.
Enter the
Filter name
for the rule, it is exclusive and must be filled.
3.
Select the
protocol: TCP/UDP
,
TCP
,
UDP
or
ICMP
in the drop-down list for the connection
between the Source IP address
and Destination IP address.
4.
Enter a
Source IP Address
in dotted-decimal notation format and then type the
Source
Subnet Mask
and
Source Port
(port or port
:
port) in the text boxes separately.
5.
Enter a
Destination IP Address
in dotted-decimal notation format and then type the
Destination Subnet Mask
and
Destination Port
(port or port
:
port) in the text boxes
separately.
6.
Click
Save/Apply
to save this entry.
41
Page 49 / 122
TD-W8960N
300Mbps Wireless N ADSL2+ Modem Router User Guide
)
Note:
When you add an
Outgoing IP Filtering entry, you must configure at least one condition on the
preceding screen except the Filter name. If you leave the Protocol blank, it means that the rule is
effective to all protocols, if you leave the Source IP Address and/or Destination IP Address blank,
it suggests that all Source IP Addresses and/or Destination IP Addresses are controlled by the
rule, if you leave the Source Port and/or Destination Port blank, it suggests that all Source Ports
and/or Destination Ports are controlled by the rule.
IP Filtering - Incoming
Choose “
Advanced Setup
”
Æ
“
Security
”
Æ
“
IP Filtering
”
Æ
“
Incoming
”, you can configure
Incoming Filtering rules on the screen as shown in Figure 4-33.
The Incoming IP Filtering feature allows some IP traffic from WAN to access some local addresses.
By default, all incoming IP traffic from the WAN is blocked when the firewall is enabled. However,
some IP traffic can be
ACCEPTED
by setting up filters.
Figure 4-33
Set up an Incoming IP Filtering rule:
1.
Click the
Add
button in Figure 4-33, and then you will see Figure 4-34.
42
Page 50 / 122
TD-W8960N
300Mbps Wireless N ADSL2+ Modem Router User Guide
Figure 4-34
2.
Enter the
Filter name
for the rule, it is exclusive and must be filled in.
3.
Select
Protocol
in the drop-down list, enter
Source IP address
,
Source Subnet Mask
,
Source Port
,
Destination IP address
,
Destination Subnet Mask
, and
Destination Port
for
the rule.
4.
Select at least one WAN interfaces displayed below to apply this rule.
5.
Click
Save/Apply
to save this entry.
)
Note:
When you add an
Incoming IP Filtering entry, you must configure at least one condition on the
preceding screen except the Filter name. If you leave
Protocol
blank, it means that the rule is
effective to all protocols, if you leave the Source IP address and/or Destination IP address blank,
it suggests that all Source IP addresses and/or Destination IP addresses are controlled by the
rule, if you leave the Source Port and/or Destination Port blank, it suggests that all Source Ports
and/or Destination Ports are controlled by the rule.
4.4.6.2 MAC Filtering
Choose “
Advanced Setup
”
Æ
“
Security
”
Æ
“
MAC Filtering
”, you can configure MAC Filtering rules
on the screen as shown in Figure 4-35. The section allows you to control access to the Internet by
users on your local network based on their MAC Address.
)
Note:
MAC Filtering is only effective on ATM PVC(s) configured in Bridging mode.
43
19216811.live