FS PBX-C301, Руководство пользователя, Страница: 99 / 113

IP PBXs USER MANUAL
www.fs.com
95
with the outside world. Except web UI still works in local network, other services will all be terminated.
 Geo IP is a security policy which can be used to grant access of IP addresses from certain countries/regions, all IP addresses from
other countries/regions which are not specified will all be blocked. By default, web UI will still be accessible. Enabling Geo IP
requires Drop All to be enabled too.
To implement Geo IP please follow the steps below.
Step 1
: Enable Geo IP and Drop All
Step 2
: Select trusted countries/regions
Besides selecting the trusted IP addresses from certain countries/regions, you’ll still need to add a common rule in the Common
Rules section to grant access or the local network hosts/devices.
Step 3 : Add a common rule to grant access of your local LAN.
 The Action of this rule needs to be set as Accept .
 Protocol should be set as TCP/UDP .
 IP should be the local network address instead of a single IP address.
 Netmask should be the subnet mask of the network address.

The
Port
range determines which kind of services to be granted. In this case you may leave it blank to grant local network all
access to the IPPBX system.
 Mac Address determines the action to be taken according to the Mac address of a device instead of its IP address, it only
works with devices within the same local network because Mac addresses are not routable. In this case you are going to
grant access of all the local network hosts/devices, so you may leave it blank.
By now, Geo IP security policy should work. The private IP addresses from your local network and the public IP addresses from the
countries/regions you’ve selected should be able to access your IPPBX system. Other IP addresses will all be blocked.