Black Box WRT750A, Руководство пользователя

Страница: 77 / 120

Page 77
877-877-2269 | blackbox.com
Chapter 5: Configuring the Router
- IPSec Passthrough—Internet Protocol security (IPSec) is a suite of protocols for ensuring private, secure communications over
Internet Protocol (IP) networks, through the use of cryptographic security services. To allow IPSec tunnels to pass through the
router, click Enable.
• ALG—We recommend that you enable Application Layer Gateway (ALG) because ALG allows customized Network Address
Translation (NAT) traversal filters to be plugged into the gateway to support address and port translation for certain application
layer “control/data” protocols such as FTP, TFTP, H323, etc.
- FTP ALG—To allow FTP clients and servers to transfer data across NAT, click Enable.
- TFTP ALG—To allow TFTP clients and servers to transfer data across NAT, click Enable.
- H323 ALG—To allow Microsoft NetMeeting clients to communicate across NAT, click Enable.
- SIP ALG—To allow SIP clients and servers to communicate across NAT, click Enable.
- RTSP ALG—To allow some media player clients to communicate with some streaming media servers across NAT, click Enable.
Click the Save button to save your settings.
5.13.2 Advanced Security
Choose “Security ― Advanced Security,” then you can protect the router from being attacked by TCP-SYN Flood, UDP Flood, and
ICMP-Flood.
Figure 5-73. Advanced Security.
• DoS Protection—Denial of Service protection. Check the Enable or Disable button to enable or disable the DoS protection
function. Only when it is enabled will the flood filters be enabled.
NOTE: DoS Protection will take effect only when the Traffic Statistics in “System Tool → Statistics” is enabled.
• Enable ICMP-FLOOD Attack Filtering—Enable or Disable the ICMP-FLOOD Attack Filtering.
• ICMP-FLOOD Packets Threshold (5–3600):—The default value is 50. Enter a value between 5–3600. When the current ICMP-
FLOOD Packets number is beyond the set value, the router will startup the blocking function immediately.
• Enable UDP-FLOOD Filtering—Enable or Disable the UDP-FLOOD Filtering.
• UDP-FLOOD Packets Threshold (5–3600)—The default value is 500. Enter a value between 5–3600. When the current UPD-
FLOOD Packets number is beyond the set value, the router will start up the blocking function immediately.
• Enable TCP-SYN-FLOOD Attack Filtering—Enable or Disable the TCP-SYN-FLOOD Attack Filtering.