6381-A4 Router Users Guide

66

DMZ Settings

1.

On the

Port Forwarding

page, click the DMZ link.

2.

Check the

Enable DMZ

box.

DMZ Fields:

Enable DMZ

Enables/disables the Demilitarized Zone feature. This field is unchecked

(disabled) by default.

Select your WAN

Connection

Select the WAN connection on which the DMZ feature will be applied.

Select LAN Group

Select the LAN Group on which the DMZ feature is applied.

Select a LAN IP

Address

Select the LAN IP address you are going to use as the DMZ host. This host

is exposed to the Internet. Be aware that this feature may expose your

local network to security risks.

LAN Clients

This link takes you to the LAN Clients page. More information on LAN

Clients can be found See LAN Clients on page 72.

3.

Select the

WAN Connection

,

LAN Group

, and

LAN IP Address.

DMZ is configurable per LAN segment.

4.

Click

Apply

The

Apply

button will temporarily save this connection. To make the change permanent,

click

Tools

(at the top of the page) and select

System Commands

. On the

System

Commands

page, click

Save All

.

6381-A4 Router Users Guide

67

Custom Port Forwarding

The Custom Port Forwarding page allows you to create up to 15 custom port forwarding entries to

support specific services or applications, such as concurrent NAT/NAPT operations.

1.

On the

Port Forwarding

page, click the

Custom Port Forwardin

g link.

2.

Select the connection to which the

Custom Port Forwarding

rule will be applied.

3.

Set the appropriate

Protocol

,

Source IP Address

,

Source Netmask

,

Destination IP

Address

,

Destination Netmask

,

Destination Port Start

,

Destination Port End

and

Destination Port Map

as described below/

Custom Port Forwarding Fields:

Connection

Select the WAN connection on which the Custom Port Forwarding rule

is to be applied.

Enable

The

Enable

button is checked by default, meaning this rule is

automatically applied when you click the

Apply

button.

Application

Name of the application for which your ports will be opened.

Protocol

There are three options available: TCP, UDP, and TCP and UDP.

Source IP Address

You can define the source IP address from which the incoming traffic

is allowed. Enter 0.0.0.0 for all.

Source Netmask

Netmask of the source IP address. Enter

255.255.255.255

for all.

Destination IP Address

The LAN-side destination IP address for incoming traffic.

Destination Netmask

The LAN-side destination netmask for incoming traffic. The default

value of this field is 255.255.255.255.

Destination Port Start

The starting port number that is to be opened for this application.

Destination Port End

The ending port number that is to be opened for this application.

Destination Port Map

Destination port mapped on the LAN (destination) side to which

packets are forwarded. There are two types of port mapping:

•

One-to-one (one port mapped to one)

6381-A4 Router Users Guide

68

•

Multiple-to-one (multiple ports mapped to one port)

NOTE:

Wildcard (*) entries are allowed for IP Address/Netmask and Port range fields.

4.

Click

Apply

The

Apply

button will temporarily save this connection. To make the change permanent,

click

Tools

(at the top of the page) and select

System Commands

. On the

System

Commands

page, click

Save All

.

6381-A4 Router Users Guide

69

IP Filters

The IP filtering feature allows you to block specific applications/services based on the IP address

of a LAN device. You can use the

IP Filters

page to block specific traffic (for example block web

access) or any traffic from a computer on your local network.

A database of predefined IP filters allows you to apply one or more filtering rules to one or more

members of a defined LAN group. You can view the rules associated with a predefined filter and

add the available rules for a given category. You can also create, edit, or delete your own IP filter

rules.

IP Filters fields:

Select LAN Group

Select the LAN group to which the IP filters feature will be applied.

LAN IP

Select the IP address in the given LAN group to which the IP Filters feature will

be applied.

Block All Traffic

When checked, complete network access is blocked for the specific IP address.

Block Outgoing Ping

Blocking outgoing ping (ICMP) generated from a particular LAN IP can be used

if your host has a virus that attempts a Ping-of-Death Denial of Service attack.

Custom IP Filters

This link takes you to the

Custom IP Filters

page. See Custom IP Filters on 71.

Available Rules

Predefined and user-defined IP filtering rules for each category.

Applied Rules

Lists the IP filtering rules you elect to apply for each given category.

To configure an IP Filter rule:

1.

From the navigation bar at the top of the screen click

Advanced

2.

From the left hand navigation pane select

IP Filters

.

3.

From the

Select LAN Group

drop down, select the LAN group to which the changes will be

applied.

6381-A4 Router Users Guide

70

4.

From the

LAN IP

drop down select the IP address.

If the desired LAN IP is not available in the LAN IP drop-down menu, you can add it using

the LAN Client page, which is accessed by clicking

New IP

. See IP Filters on page 69.

5.

From the

Available Rules

pane select the appropriate rules, and then click

Add

to move the

rule to the

Applied Rules

pane. To create a custom IP filter rule, click

Custom IP Filters

.

6.

If a rule is not in the list, you can create your own rule in the

User

category. Select

User

, and

then click

New

.

The

New

,

View

, and

Delete

buttons become available only when the

User

category is

selected. All the custom rules you create fall under the

User

Category

.

The Rule Management page populates for you to create new rules. Enter

Rule Name

,

Protocol

,

Port Start

,

Port End

, and

Port Map

fields, and then click

Apply

.

The rules you create will appear in the

Available Rules

box in the User category. You can

view or delete the rules you create.

7.

Continue to add rules as they apply from each category using the

Add

button.

8.

Click

Apply

The

Apply

button will temporarily save this connection. To make the change permanent,

click

Tools

(at the top of the page) and select

System Commands

. On the

System

Commands

page, click

Save All

.