MB Connect Line mbNET.rokey RKH 210, Manual

Page: 167 / 324

N O T I C E
The "Minimum security level" and "Firewall off" variants should only be selected for a short period of
time and for test purposes or at initial start-up, if you want to ensure that a configured rule should not apply.
ATTENTION! Any data traffic from inside to outside and external access are possible! The integrity of
your mbNET and the connected devices is threatened when you select one of these two variants!
Click the Edit icon , to set a security level.
Firewall settings
Designation Description
Interface type Selection field for one of the four security levels
Replace all sender IP ad-
dresses of all outgoing
LAN packets with the own
LAN IP address of the
router (SNAT) Enabling this function (SNAT) allows access from the outside (e.g. via VPN)
to LAN participants, without them having to set the mbNET as a default gate-
way. The actual source IP in an incoming IP packet is thereby replaced by
the IP of the mbNET LAN interface.
This is a significant benefit when integrating the remote maintenance into ex-
isting network structures, because they don't need to be changed.
Replace the senders IP-
address of all outgoing
(WAN) packages with the
WAN-IP address of this
router (SNAT) If this checkbox is activated, incoming traffic from LAN participants is trans-
parently forwarded to the WAN network. This means that all data packets
sent to the WAN receive the sender address as the WAN IP address of the
router.
Clicking on "Save” temporarily saves the current entries/changes.
But the changes are not yet enabled.
Clicking on "Close” discards the current input/changes.
Security settings | Page 167 of 324