Cambium Networks PTP 450 Series, Руководство по настройке

Страница: 145 / 649

Chapter 1: Configuration Configuring security
Page
1-117
Attribute Meaning
Packet Filter Types For any box selected, the Protocol and Port Filtering feature blocks the
associated protocol type.
To filter packets in any of the user-defined ports, must do all of the
following:
Check the box for User Defined Port
n
(See Below) in the Packet Filter
Types section of this tab.
In the User Defined Port Filtering Configuration section of this tab:
• provide a port number at Port #
n
.
• enable TCP and/or UDP by clicking the associated radio button
Filter Direction Operators may choose to filter upstream (uplink) RF packets or downstream
(downlink) RF packets.
User Defined Port
Filtering
Configuration You can specify ports for which to block subscriber access, regardless of
whether NAT is enabled.
RF Telnet Access RF Telnet Access restricts Telnet access to the AP/BHM from a device
situated below a network SM/BHS (downstream from the AP/BHM). This is a
security enhancement to restrict RF-interface sourced AP access specifically
to the LAN1 IP address and LAN2 IP address (Radio Private Address,
typically 192.168.101.[LUID]). This restriction disallows unauthorized users
from running Telnet commands on the AP/BHM that can change AP/BHM
configuration or modifying network-critical components such as routing and
ARP tables.
PPPoE PADI Downlink
Forwarding Enabled: the AP/BHM allows downstream and upstream transmission of
PPPoE PADI packets. By default, PPPoE PADI Downlink Forwarding is set to
“Enabled”.
Disabled: the AP/BHM disallows PPPoE PADI packets from entering the
Ethernet interface and exiting the RF interface (downstream to the
SM/BHS). PPPoE PADI packets are still allowed to enter the AP’s RF
interface and exit the AP’s /BHM’s Ethernet interface (upstream).