ZyXEL Communications LTE3202-M430, User Manual, Page: 67 / 117

Chapter 9 Firewall
LTE3202-M430 User’s Guide
67
9.3 The ICMP Protection Screen
If an outside user attempts to probe an unsupported port on your LTE3202-M430, an ICMP response
packet is automatically returned. This allows the outside user to know the LTE3202-M430 exists. Use this
screen to prevent the ICMP response packet from being sent. This keeps outsiders from discovering your
LTE3202-M430 when unsupported ports are probed.
Internet Control Message Protocol (ICMP) is a message control and error-reporting protocol between a
host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages
are processed by the TCP/IP software and directly apparent to the application user.
Click Configuration > Firewall > ICMP Protection to open the following screen.
Figure 44 Configuration > Firewall > ICMP Protection
The following table describes the labels on this screen.
9.4 The ARP Protection Screen
Use this screen to enable (Address Resolution Protocol) ARP protection. This protects your LTE3202-M430
against ARP spoofing, by inspecting the ARP requests and replies comparing them against the
information gathered through DHCP snooping to validate ARP packet and protect against ARP
spoofing. Click
Configuration > Firewall > ARP Protection to open the following screen.
Table 27 Configuration > Firewall > ICMP Protection
LABEL DESCRIPTION
ICMP Protection
Enable WAN Ping The LTE3202-M430 will not respond to any incoming WAN Ping requests when this
checkbox is not selected. Select
Enable WAN Ping to reply to incoming WAN Ping
requests.
Enable LAN Ping The LTE3202-M430 will not respond to any incoming LAN Ping requests when this
checkbox is not selected. Select
Enable LAN Ping to reply to incoming LAN Ping
requests.
Apply Click Apply to save your changes back to the LTE3202-M430.
Cancel Click Cancel to reload the previous configuration for this screen.