Draytek Vigor2850 Series, Руководство пользователя

Страница: 125 / 387

Vigor2850 Series User’s Guide
115
Triggering Port
Type the port or port range for such trigger profile.
Incoming Protocol
When the triggering packets received, it is expected the
incoming packets will use the selected protocol. Select the
protocol (TCP, UDP or TCP/UDP) for the incoming data of
such triggering profile.
Incoming Port
Type the port or port range for the incoming packets.
3 3 . . 4 4 F F i i r r e e w w a a l l l l
3
3
.
.
4
4
.
.
1
1
B
B
a
a
s
s
i
i
c
c
s
s
f
f
o
o
r
r
F
F
i
i
r
r
e
e
w
w
a
a
l
l
l
l
While the broadband users demand more bandwidth for multimedia, interactive applications,
or distance learning, security has been always the most concerned. The firewall of the Vigor
router helps to protect your local network against attack from unauthorized outsiders. It also
restricts users in the local network from accessing the Internet. Furthermore, it can filter out
specific packets that trigger the router to build an unwanted outgoing connection.
F
F
i
i
r
r
e
e
w
w
a
a
l
l
l
l
F
F
a
a
c
c
i
i
l
l
i
i
t
t
i
i
e
e
s
s
The users on the LAN are provided with secured protection by the following firewall facilities:
z User-configurable IP filter (Call Filter/ Data Filter).
z Stateful Packet Inspection (SPI): tracks packets and denies unsolicited incoming data
z Selectable Denial of Service (DoS) /Distributed DoS (DDoS) attacks protection
I I P P F F i i l l t t e e r r s s
Depending on whether there is an existing Internet connection, or in other words “the WAN
link status is up or down”, the IP filter architecture categorizes traffic into two:
Call Filter
and
Data Filter
.
z
Call Filter -
When there is no existing Internet connection,
Call Filter
is applied to all
traffic, all of which should be outgoing. It will check packets according to the filter rules.
If legal, the packet will pass. Then the router shall
“initiate a call”
to build the Internet
connection and send the packet to Internet.
z
Data Filter
- When there is an existing Internet connection,
Data Filter
is applied to
incoming and outgoing traffic. It will check packets according to the filter rules. If legal,
the packet will pass the router.
The following illustrations are flow charts explaining how router will treat incoming traffic
and outgoing traffic respectively.