4 Ports ADSL2/2+ Router
105
Access Control (Section 4.4.14 : ADVANCED – Access Control)
Open the access from the Internet (WAN) or LAN to the router's management ports (web, telnet,
ssh, ftp, tftp, snmp). There are security risks associated with this action. For this reason remote
management is restricted to computers on the network specified in the IP Access Control List that
can hold up to 16 IP addresses. The Access Control List provides a global enable/disable that will
enable or disable the ACL. If the ACL is disabled, the default behavior (i.e. DENY on the WAN,
Accept on the LAN is enabled for all IP addresses) is enforced. If no IP addresses are specified
within the ACL, the ACL will be will act as if it is disabled until the first IP address is added.
DMZ (Section 4.4.5 : ADVANCED - Port Forwarding)
Setting a computer on your local network as DMZ forwards any network traffic that is not
redirected to another computer via the port forwarding feature to the computer's IP address. This
opens the access to the DMZ computer from the Internet.
PING (Section 4.5.5 : TOOLS - Ping Test)
Enabling incoming ping (ICMP) requests on the Port Forwarding page allows the router to respond
to a ping from the Internet. Blocking outgoing ping (ICMP) (IP Filters page) generated from a
particular LAN IP can be used if your PC has a virus that attempts a Ping-of-Death Denial of
Service attack.
2.
Bridge Filters (Section 4.4.9 : ADVANCED - Bridge Filters):
Help section for Bridge Filters.
The bridge filtering mechanism provides a way for the users to define rules to allow/deny frames
through the bridge based on source MAC address, destination MAC address and/or frame type. When
bridge filtering is enabled, each frame is examined against the each defined filter rules sequentially,
and when a matched is determined, the appropriate filtering action (determined by the access type
selected ... i.e allow or deny) is performed. The user should note that the bridge filter will only examined
frames from interfaces which is part of the bridge itself. Twenty filter rules are supported with bridge
filtering.
The User Interface for Bridge Filter allows the user to add/edit/delete, as well as, enable the filter rules.
To add a rules, simply define the source MAC address, destination MAC address and frame type with
desired filtering type (i.e. allow/deny), and press the
Add
button. The MAC address must be in a
xx-xx-xx-xx-xx-xx format, with 00-00-00-00-00-00 as
don't care
. Blanks can be used in the MAC
address space, and would be considered also as
don't care
.
To edit/modify an existing filter rule, select the desired rule created previously from
"Add"
in the
"Edit"
select box. The selected filter rule will appear on top section, as with the
"Add"
filter rule. Make the
desired change to the MAC address, frame type and/or access type, and press
"Apply"
.
To delete filter rule(s), select the filter rule entry to delete in the
"Delete"
selection box. Note that
multiple deletion is possible. Once all the desired filter rule(s) is/are selected for deletion, press the
