Atel IWE1200A-G, Руководство пользователя

Страница: 74 / 87

1. Specify the protocol type, source IP address , source IP mask , destination IP address , desti-
nation IP mask , and destination port for the rule. Then specify in the Action setting how to
deal with a packet that meets the rule.
2. Select the corresponding Enabled check box.
NOTE: Set the rules with great care since incorrect rules would make the gateway inaccessible. The
last resort to restore the gateway to service may be resetting its configuration to factory-default values
by pressing the
Default switch on the housing of the gateway.
3.7.1.2. VLAN
Fig. 98. VALN settings.
VLAN (Virtual Local Area Network) settings are for traffic isolation. When the Block wire-
less-to-Ethernet-LAN traffic check box is selected, the gateway does not forward packets between
the wireless network interface and the Ethernet LAN interface—traffic is allowed only between the
Ethernet WAN interface and the wireless network interface.
3.7.1.3. Firewall
Fig. 99. Packet filters and firewall settings.
SPI analyzes incoming and outgoing packets based on a set of criteria for abnormal content. Therefore,
SPI can detect hacker attacks, and can summarily reject an attack if the packet fits a suspicious profile.
To enable SPI, select the
Enable Stateful Packet Inspection (SPI) check box.
Some DoS (Denial of Service) attacks are based on sending invalid ICMP request packets to hosts.
The gateway can be set to not accept any ICMP requests on the Ethernet WAN interface to defense
against attacks of this kind. Enable this capability by selecting the
Block ICMP PING from Internet
check box.
NOTE: SPI can detect hacker attacks, including IP-Spoofing , Zero IP Length , Land , Smurf , Fraggle ,
Teardrop , Ping of Death , Syn-Flood , and X-Tree .
NOTE: Because some of the gateway’s CPU resources are spent in checking packets for these secu-
rity features, you may feel networking performance degradation if the security functions are enabled.
67