Using the Advanced Gateway Setup Options

Ubee Interactive

42

Ubee DVW3201B Advanced Wireless Voice Gateway Subscriber User Guide

•

July 2012

Label

Description

WAN Blocking

Blocks connection requests initialized from Internet users

when enabled. WAN Blocking must be disabled to be able to

PING the WAN gateway IP.

Ipsec PassThrough

Forces the router to redirect the IPSec request to the local

host when enabled. NAT fails this attempt if Internet users

initialize an IPSec VPN request to a host located behind the

router.

PPTP PassThrough

Forces the router to redirect the PPTP request to the local host

when enabled. Nat fails this attempt if Internet users initialize a

PPTP VPN request to a host located behind the router.

Multicast Enable

Optimizes the bandwidth utilization compared with unicast

(especially video streaming applications).

UPnP Enable

Activates Universal Plug and Play (UPnP) when enabled. A

UPnP device can dynamically join a network, obtain an IP

address, convey its capabilities, and learn about other devices

on the network. In turn, a device can leave a network smoothly

and automatically when it is no longer in use. Gaming

consoles and Web cameras are examples of devices that can

use UPnP.

Ubee Interactive

Using the Advanced Gateway Setup Options

Ubee DVW3201B Advanced Wireless Voice Gateway Subscriber User Guide

•

July 2012

43

DNS Relay

Allows the cable modem to act as the “relay” device. Each PC

that wants to access a URL does not have to send a DNS

request to a DNS server on the Internet. DNS is used to

resolve a URL (Web site name) to an IP address. DNS Relay

is typically used for commercial applications where each

device/PC connected to the cable modem uses the DNS Relay

address rather than going to a public DNS server hosted by an

ISP to look-up a URL.

NAT ALG Status

– Filters to allow (enable) or disallow (disable) protocols to pass through the

DVW3201B to connected devices (computers, game consoles, and so on).

RSVP

Enables or disables resource reservation protocol (RSVP).

RSVP defines how applications reserve resources and how

they free the reserved resources once they are no longer

needed.

FTP

Enables or disables the file transfer protocol (FTP) used to

transfer files from one host to another.

TFTP

Enables or disables the trivial file transfer protocol (TFTP) – a

simpler protocol generally used for automated file transfers.

Kerb88

Enables or disables the Kerberos network authentication

protocol which allow nodes to communicate over a non-secure

network using “tickets” on port 88 to prove their identity to one

another.

NetBios

Enables or disables the network basic input/output system

(NetBIOS) services related to the OSI session layer. NetBIOS

allows applications on separate computers to communicate

over a LAN.

IKE

Enables or disables the network key exchange (IKE) protocol

used to set up a security association (SA) in the IPsec protocol

suite.

RTSP

Enables or disables the real time streaming protocol (RTSP)

network control protocol used to establish and control media

sessions between end points.

Kerb1293

Enables or disables the Kerberos network authentication

protocol which allow nodes to communicate over a non-secure

network using “tickets” on port 1293.

H225

Enables or disables the H.225 protocol used to define

messages and procedures for call signalling, media

packetization, and registration, admission, and status (RAS)

functions.

PPTP

Enables or disables the point-to-point tunneling protocol

(PPTP) used to implement a virtual private network.

MSN

Enables or disables the Microsoft network protocol used for

instant messaging.

Label

Description

Using the Advanced Gateway Setup MAC Filtering Option

Ubee Interactive

44

Ubee DVW3201B Advanced Wireless Voice Gateway Subscriber User Guide

•

July 2012

5.7

Using the Advanced Gateway Setup MAC Filtering Option

The

MAC Filtering

option allows you to filter MAC addresses to block Internet traffic from

specific network devices on the LAN. MAC filtering establishes a list and any host on this

list is not able to access the network through the DVW3201B.

Steps

To filter MAC addresses:

1.

Go to

Tools

>>

Client

List

. Your PC and other devices are listed. Note the MAC

address of the devices that you want to deny Internet access. For more information,

refer to

Using the Client List Option on page 83

.

Note:

Be sure all devices to which you potentially deny Internet access are connected

to the DVW3201B network.

2. Click the

Gateway

link from the top of the screen.

3. Click

MAC Filtering

from the left side of the screen. The

MAC Filtering

fields are

explained following this screen example.

SIP

Enables or disables the session initiation protocol application

layer gateway (SIP ALG). SIP ALG

inspects protocol

packets and formats SIP message headers and SDP

body to ensure proper signaling.

Note:

Some hosted VoIP

services prefer this function to be performed by their own

session border controller (SBC) and require the SIP ALG to be

disabled. Some IP-PBXs may require SIP ALG enabled.

ICQ

Enables or disables the ICQ instant messaging program.

IRC666x

Enables or disables the Internet relay chat (IRC) protocol used

for text messaging.

ICQTalk

Enables or disables the ICQTalk instant messaging program.

Net2Phone

Enables or disables Net2Phone SIP VoIP.

IRC7000

Enable or disables the Internet relay chat protocol on TCP port

TCP 7000 used for text messaging and group forums.

IRC8000

Enable or disables the Internet relay chat protocol on UDP port

8000 used for text messaging and group forums.

Apply

Saves all screen changes when clicked.

Label

Description

Ubee Interactive

Using the Advanced Gateway Setup IP Filtering Option

Ubee DVW3201B Advanced Wireless Voice Gateway Subscriber User Guide

•

July 2012

45

5.8

Using the Advanced Gateway Setup IP Filtering Option

The

IP Filtering

option allows you to filter IP addresses to block Internet traffic to specific

network devices on the LAN. Any host on this list is not accessible to Internet traffic.

5.8.1

Using IP Filtering Best Practices

The following are best practices to set up IP filtering.

1.

Make sure a PC is connected to the cable modem and both devices are powered on

and functioning.

2. Log in to the cable modem Web user interface. Refer to

Accessing the Web Interface

on page 17

.

3. Go to

Tools

>>

Client

List

. Your PC and other devices are listed. Note the MAC

address and IP address of the devices to which you want to deny Internet access. For

more information, refer to

Using the Client List Option on page 83

.

4. Go to

Gateway

>>

Static

Lease

. Enter the MAC address and IP address of devices to

Label

Description

Index

Assigns an index number to the rule.

MAC Address

Defines the MAC address to block.

Clear

Deletes the filtering rule when the Apply button is clicked and

the Clear box is checked.

View Additional Rules:

Displays rules 11-20 when selected from the drop-down list, if

they exist. A total of twenty rules are supported.

Apply

Saves all screen changes when clicked.

Using the Advanced Gateway Setup Port Filtering Option

Ubee Interactive

46

Ubee DVW3201B Advanced Wireless Voice Gateway Subscriber User Guide

•

July 2012

which you want to deny Internet access. Click

Apply

. For more information, refer to

Using the DHCP Static Lease Option on page 39

. A static lease ensures that the

device always gets the same IP address. That way, if filtered, it gets filtered

continuously. Otherwise, the IP address would change for the device and the filtering

rule would not work.

Note

You may also filter by the MAC address which does not require setting a static lease.

Refer to

Using the Advanced Gateway Setup MAC Filtering Option on page 44

.

Steps

To filter IP addresses:

1.

Click the

Gateway

link from the top of the screen.

2. Click

IP Filtering

from the left side of the screen. The

IP Filtering

fields are explained

following this screen example.

5.9

Using the Advanced Gateway Setup Port Filtering Option

The

Port Filtering

option allows you to configure port filters to block to all devices on the

LAN Internet services that use specific ports.

Label

Description

Start Address

Defines the starting IP address to filter.

End Address

Defines the ending IP address to filter.

Enabled

Activates the rule when enabled is checked.

Apply

Saves all screen changes when clicked.