User Manual
Aolynk DR811/DR814 ADSL2+Broadband Router
4 Web-based Management
30
Where item0 is the virtual interface added at the last step.
l
Then, enter the
Port Filters
page of external-dmz (refer to 4.9 Security Policy),
configure to ensure that users under the external interface can access the Internet
services the DMZ zone specifies such as http, ftp, telnet, and so on. Meanwhile,
configure port filtering policies for external-internal to disable users under the
external interface from accessing host services under the internal interface.
l
Finally, configure to allow DMZ hosts to access DMZ zone. Make sure the IP
address of the DMZ host is in the same segment as that of the above configured
virtual interface (for example, configure the IP address as 172.16.1.100, the mask
as 255.255.0.0), enable the corresponding Internet service, and then connect the
host to the LAN port of the router, and configure the corresponding virtual server.
As such, DMZ is completely and securely configured.
4.9 Security Policy
A policy is the collective term for the rules that apply to incoming and outgoing traffic
between two interface types. Firewall must be enabled before you can create policies.
Click
Security
in the Main menu and choose the
Policy
tab in the Main Frame to open
the
Security Policy Configuration
page.
Figure 4-20
Security policy configuration
This page allows you to:
l
Edit a security policy present in the
Current Security Policies
list.
To edit an existing security policy, click the
label to open the web page
Port
Filter
to configure the port filter rules, and/or click the
label to open the
web page
Host Validators
to configure the host validator rules.
