ZyXEL Communications MAX-306, User Manual, Page: 205 / 405

Chapter 16 The Firewall Screens
User’s Guide
205
LAN-to-LAN/WiMAX Device means the LAN to the WiMAX Device LAN interface.
This is always allowed, as this is how you manage the WiMAX Device from your
local computer.
WAN-to-LAN rules are Internet to your local network firewall rules. The default is
to block all traffic from the Internet to your local network.
How can you forward certain WAN to LAN traffic? You may allow traffic originating
from the WAN to be forwarded to the LAN by:
• Configuring NAT port forwarding rules.
• Configuring WAN or LAN & WAN access for services in the Remote MGMT
screens or SMT menus. When you allow remote management from the WAN,
you are actually configuring WAN-to-WAN/WiMAX Device firewall rules. WAN-to-
WAN/WiMAX Device firewall rules are Internet to the WiMAX Device WAN
interface firewall rules. The default is to block all such traffic. When you decide
what WAN-to-LAN packets to log, you are in fact deciding what WAN-to-LAN
and WAN-to-WAN/WiMAX Device packets to log.
Forwarded WAN-to-LAN packets are not considered alerts.
16.2.2 Triangle Route
When the firewall is on, your WiMAX Device acts as a secure gateway between
your LAN and the Internet. In an ideal network topology, all incoming and
outgoing network traffic passes through the WiMAX Device to protect your LAN
against attacks.
Figure 93 Ideal Firewall Setup