Atel IWE1200A-G, Руководство пользователя

Страница: 11 / 87

(Point-to-Point Protocol over Ethernet) or DHCP and static IP address assignment.
Multiple DSL/Cable connections support.
Supporting up to 4 DSL/cable-based
Internet connections. All outgoing traffic load from the internal network is shared among
the multiple Internet connections, so that total outgoing throughput is increased.
Load balancing control.
Specific LAN-to-WAN traffic can be forced to go out to
the Internet through a specific Internet connection. LAN-to-WAN traffic can be clas-
sified
by port range or by IP address range .
Bandwidth control. Network bandwidth consumed by each client can be limited.
Clients are identified by MAC address range or IP address range .
Zero client reconfiguration.
The access gateway can be configured to ignore IP, DNS,
and/or SMTP (Simple Mail Transfer Protocol) settings of client computers. As a result, the
configuration of a client computer need not be changed to access the Internet through the
access gateway.
Network Security
Packet address and port filtering. Filtering outgoing packets based on IP address and
port number. (Incoming packet filtering is performed by NAT.)
URL filtering. Preventing client users from accessing unwelcome Web sites. The HTTP
(HeperText Transfer Protocol) traffic to the specified Web sites identified by URLs (Uni-
versal Resource Locators) is blocked.
WAN ICMP requests blocking. Some DoS (Denial of Service) attacks are based on
ICMP requests with large payloads. Such kind of attacks can be blocked.
Stateful Packet Inspection (SPI). Analyzing incoming and outgoing packets based on
a set of criteria for abnormal content. Therefore, SPI can detect hacker attacks, and can
summarily reject an attack if the packet fits a suspicious profile.
Wireless-to-Ethernet-LAN traffic blocking. Traffic between the wireless interface
and the Ethernet LAN interface can be blocked.
Changeable MAC Address of the Ethernet WAN Interface. Some ADSL modems work
only with Ethernet cards provided by the ISP. If a WLAN hotspot access gateway is used in such
an environment, the MAC address of the WAN interface of the gateway has to be changed to the
MAC address of the ISP-provided Ethernet network card.
SNTP. Support for absolute system time by SNTP (Simple Network Time Protocol).
Daylight saving time. Support for Daylight Saving Time .
Dynamic DNS. Support for dynamic DNS services provided by dyndns.org and no-ip.com , so
that the access gateway can be associated with a domain name even if it obtains an IP address
dynamically by PPP, PPPoE or DHCP.
LAN Device Management. Since the access gateway acts as an NAT server, to remotely
manage network devices (such as access points) on the private network needs special handling,
so that management packets from the Internet can be passed through the NAT server. The access
gateway supports two mechanisms for this purpose.
4