19
Chapter 6: Security Tab
EdgeRouter
™
Lite User Guide
Ubiquiti Networks, Inc.
Chapter 6: Security Tab
The
Security
tab displays status information about firewall
policies, firewall groups, (Network Address Translation)
rules, and PPTP VPN options. You can also configure these
policies, groups, rules, and options. Any setting marked
with a blue asterisk
*
is required.
You have four sub-tabs:
Firewall Policies
Each firewall policy is a set of rules
applied in the order you specify.
Firewall Groups
Create groups defined by IP address,
network address, or port number.
NAT
View and create NAT rules.
VPN
Configure the EdgeRouter as a PPTP VPN server.
Firewall Policies
A firewall policy is a set of rules with a default action.
Firewall policies are applied before SNAT (Source Network
Address Translation) and after DNAT (Destination Network
Address Translation).
To create a firewall policy:
1. Click the
Firewall Groups
tab, and create the
applicable firewall groups. See
“Firewall Groups” on
page 23
for more information.
2. Click the
Firewall Policies
tab, and then click
Add
Policy
. Configure the basic parameters. See the
Add Policy
description in the next column for more
information.
3. Configure the details of the firewall policy. See
“Configure the Firewall Policy” on page 20
for
more information.
All/Drop/Reject/Accept
Add Policy
To create a new policy, click
Add Policy
.
The
Create New Ruleset
screen appears.
Complete the following:
•
Name
Enter a name for this policy.
•
Description
Enter keywords to describe this policy.
•
Default action
All policies have a default action if the
packets do not match any rule. Select the appropriate
default action:
-
Drop
Packets are blocked with no message.
-
Reject
Packets are blocked, and an ICMP (Internet
Control Message Protocol) message is sent saying the
destination is unreachable.
-
Accept
Packets are allowed through the firewall.
Summary of Contents for ERLite-3
Page 1: ...3 Port Router...
