Cisco RV260 series, Руководство администратора

Страница: 85 / 124

C H A P T E R
9
Firewall
A firewall is a function designed to prevent unauthorized access by analyzing the incoming and outgoing
network traffic. The firewall examines traffic and filters the transmissions that do not meet the specified
security criteria, The firewall decides the type of packets that should be allowed or denied into or out of a
network. This section describes the device's firewall and contains the following topics:
• Basic Settings, on page 77
• Access Rules, on page 79
• Network Address Translation, on page 80
• Static NAT, on page 80
• Port Forwarding, on page 81
• Port Triggering, on page 82
• Policy NAT, on page 83
• Session Timeout, on page 86
• DMZ Host, on page 87
Basic Settings
On the Basic Settings page, you can enable and configure the basic settings. You can also add trusted domains
to this list. To configure the basic settings, follow these steps:
Step 1
Click Firewall > Basic Settings , and enter the following information:
Check Enable to enable the firewall settings; uncheck Enable to disable. Firewall
Check Enable to enable DoS. DoS blocks attacks such as Ping of Death, SYN Flood
Detect Rate [max/sec], IP Spoofing, Echo Storm, ICMP Flood, UDP Flood, and TCP
Flood attacks.
The traffic rate for SYN Flood, Echo Storm, ICMP Flood are configurable.
The default values are: 128,15, and 100 respectively. Note
DoS (Denial-of-service)
Check Enable to block the ICMP echo requests to WAN. Block WAN Request
RESTCONF standardizes the use of REST techniques to manipulate the data described
in YANG data models. YANG is a modeling language written to support netconf based
devices. Check
Enable and LAN and/ or WAN to enable RESTCONF.
RESTCONF
RV260x Administration Guide
77