ZyXEL Communications Prestige 643, User Manual

Page: 115 / 191

Prestige 643 ADSL Router
Filter Configuration 8-21
8.5.1 LAN traffic
LAN traffic filter sets may be useful to block certain packets, reduce traffic and prevent security breaches.
Go to Menu 3.1 (shown next) and enter the number(s) of the filter set(s) that you want to apply as
appropriate You can choose up to four filter sets (from twelve) by entering their numbers separated by
commas, e.g., 3, 4, 6, 11. Input filter sets filter incoming traffic to the Prestige and Output filter sets filter
outgoing traffic from the Prestige. The factory default set, NetBIOS_LAN, can be inserted in the
protocol
filters field under Input Filter Sets in Menu 3.1 to block NetBIOS traffic to the Prestige from the LAN.
Figure 8-17 Filtering LAN Traffic
8.5.2 Remote Node Filters
Go to Menu 11.5 (shown below – note that call filter sets are only present for PPPoE encapsulation) and
enter the number(s) of the filter set(s) as appropriate. You can cascade up to four filter sets by entering
their numbers separated by commas. The factory default filter set, NetBIOS_WAN, can be applied in Menu
11.5 to block local NetBIOS traffic from triggering calls to the ISP (when you are using
PPPoE
encapsulation only). Enter 1 in the protocol filters field under Call Filter Sets when using PPPoE
encapsulation and in the protocol filters field under Output Filter Sets when using Ethernet
encapsulation . Filter set 3, Telnet_WAN, blocks telnet connections from the WAN Port to help prevent
security breaches. Filter set 4, PPPoE, blocks PPP connections from the WAN Port. Apply them as shown
in the following figure.
Menu 3.1 – General Ethernet Setup
Input Filter Sets:
protocol filters= 2
device filters=
Output Filter Sets:
protocol filters=
device filters=
Press ENTER to Confirm or ESC to Cancel:
Apply
default filter
2 here.