Ubiquiti ERLite-3, User Manual

Page: 30 / 58

27
Chapter 6: Security Tab EdgeRouter ™ Lite User Guide
Ubiquiti Networks, Inc.
• Translations Complete the following:
- Address Enter the IP address that will replace the
destination IP address of the incoming packet.
- Port Enter the port number that will replace the
destination port number of the incoming packet.
• Exclude from NAT Check the box to exclude packets
that match this rule from NAT.
• Enable Logging Check this box to log instances when
the rule is matched.
• Protocol
- All protocols Match packets of all protocols.
- Both TCP and UDP Match TCP and UDP packets.
- Choose a protocol by name Select the protocol from
the drop-down list. Match packets of this protocol.
• Match all protocols except for this Match packets
of all protocols except for the selected protocol.
- Enter a protocol number Enter the port number of
the protocol. Match packets of this protocol.
• Match all protocols except for this Match packets
of all protocols except for the selected protocol.
• Src Address Enter the IP address or network address of
the source. You can also enter a range of IP addresses;
one of them will be used.
Note: If you enter a network address, enter the IP
address and subnet mask using slash notation:
<network_IP_address> / <subnet_mask_number>
(example: 192.0.2.0/24 ).
• Src Port Enter the port name or number of the source.
You can also enter a range of port numbers; one of them
will be used.
• Dest. Address Enter the IP address or network address
of the destination. You can also enter a range of IP
addresses; one of them will be used.
Note: If you enter a network address, enter the IP
address and subnet mask using slash notation:
<network_IP_address> / <subnet_mask_number>
(example: 192.0.2.0/24 ).
• Dest. Port Enter the port name or number of the
destination. You can also enter a range of port numbers;
one of them will be used.
Click Save to apply your changes, or click Cancel .
VPN
A common type of VPN uses PPTP (Point-to-Point
Tunneling Protocol). The EdgeRouter can function as a
PPTP VPN server so a remote VPN client can access the
LAN using a PPTP VPN tunnel over the Internet.
PPTP Server
Client IP pool range start The client IP pool is the pool
of IP addresses that remote VPN clients will use. Enter the
starting IP address of the range (this address must in a /24
subnet).
Client IP pool range stop Enter the last IP address of the
range.
Server outside address Enter the IP address that VPN
clients will connect to; this is the outside or external
address of the PPTP server.
RADIUS server IP address The RADIUS (Remote Access
Dial-In User Service) server provides authentication to
help secure VPN tunnels. Enter the IP address of the
RADIUS server.
RADIUS server key Enter the key shared with the RADIUS
server.
MTU Enter the MTU for the PPTP VPN connection.
DNS 1 Enter the IP address of the primary remote access
DNS server that your VPN client will use.
DNS 2 Enter the IP address of the secondary remote
access DNS server.
Click Save to apply your changes, or click Cancel .