81

Table 16. RIP Setup Menu Option

Option

Description

RIP Enable

Check this box to enable RIP.

RIP Authentication

Check this box to enable RIP authentication for

routing protocols.

RIP Authentication Key

Enter the set of keys for your interface.

RIP Authentication Key ID

Enter the ID to identify the key used to create the

authentication data.

RIP Reporting Interval

Enter the interval at which to update routing table.

RIP Destination IP Address

Enter the destination IP address for RIP.

RIP Destination IP Subnet Mask

Enter the subnet mask for the destination IP

address.

82

11

Firewall Menu Options

The Firewall Menu lets you:



Configure the level of protection your firewall provides



View the firewall logs

Basic

The Basic page allows you to configure the level of protection your firewall offers and

also what type of attacks it should detect..

To access the

Basic

page:

1

Click

Firewall

in the menu bar.

2

Then click the

Basic

submenu.

Figure 24 shows an example of the menu and Table 15 describes the items you can

select.

Figure 24. Example of Basic Page

83

Table 17. Basic Menu Option

Option

Description

IPv4 Firewall

Protection

By increasing the level from low to medium or high

you can restrict traffic to only certain predefined

ports.

IPv6 Firewall

Protection

Select On to enable IPv6 Firewall protection.

Block Fragmented IP

packets

Prevents all fragmented IP packets from passing

through the firewall.

Port Scan Detection

Detects and blocks port scan activity originating on

both the LAN and WAN.

IP Flood Detection

Detects and blocks packet floods originating on

both the LAN and WAN.

Event Log

The Event Log page allows you to send firewall event log reporting to a standard SysLog

server or via email. Individual attack or configuration items can be selected that will be

sent to the SysLog server or emailed so that only the items of interest can be monitored.

Permitted connections, blocked connections, known Internet attack types, and Cable

Modem/Router configuration events can also be logged. The SysLog server must be on

the same subnet as the Private LAN behind the Cable Modem/Router (typically

192.168.0.x).

To access the

Event Log

page:

1

Click

Firewall

in the menu bar.

2

Then click the

Event Log

submenu.

Figure 23 shows an example of the menu and Table 16 describes the items you can

select.

To enable the automatic email alerts:

1

Configure the email address you want to send alerts to. You also need to configure

the email account you will send from (this may be the same account). This includes

the SMTP (outgoing)/ mail server address, together with username and password.

You may need to contact your service provider to find the information.

84

2

Check the

Enable

box and click the Apply button.

Figure 25. Example of Event Log Page

Table 18. Local Log Menu Option

Option

Description

Permitted

Connections

Enabling this feature causes the Cable Modem/Router to report all

permitted connection attempts.

Blocked

Connections

Enabling this feature causes the Cable Modem/Router to report all

blocked connection attempts.

Known Internet

Attacks

Enabling this feature causes the Cable Modem/Router to report any

known Internet attacks.

Product

Configuration

Events

Enabling this feature causes the Cable Modem/Router to report all

configuration changes.

SysLog server

Enter the address of your local SysLog server, if you have one.

85

at 192.168.0.x

Contact Email

Address

Enter the email address where you want to receive the alert email.

SMTP Server

Name

Enter the SMTP (Outgoing) mail server address of the email

account you will send from.

SMTP

Username

Enter the username of the email account you will send from.

SMTP

Password

Enter the password of the email account you will send from.

E-mail Alerts

Check to enable sending alert email, when an attack is detected.

Below is a complete list of the capable SysLog server attack/notification types and their

format. The generic format of sysLog messages for traffic or administration-related

events is:

MMM DD HH:MM:SS YYYY SYSLOG[0]: [Host HostIP] Protocol SourceIP,SourcePort

--> DestIP,DestPort EventText