NEC ZA-SA3500G, Руководство по эксплуатации функций

Страница: 249 / 359

| Setting/Setting Confirmation 249
[For Router Mode]
■ Firewall （ FW ） tab
1. Open the [Firewall (FW)] screen from [TOP]-[Security].
2. Enable/disable the firewall function. Function is initially enabled. When disabled, the SPI setting cannot be set.
3. Set NAPT Enable Interface according to the security policy. If unchecked, the NAPT function of the corresponding
interface will be disabled.
4. Set the DoS protection function according to the security policy.
5. Set the NAPT session timer according to the network use condition.
6. Click the "Apply" button.
7. Click the "Save" button to save the setting.
Setting Item Description Initial Value
Firewall Configuration
Enable Firewall Enable/disable the firewall function. When disabled, the SPI setting
is grayed out and cannot be set.
When PPPoE is set, the firewall function is always enabled and
cannot be disabled. Enabled
NAPT Enable Interface Check the interface that enables NAPT function.
*This setting item is displayed only when in router mode
IPoE Check to enable NAPT in IPoE. Enabled
PPPoE NAPT is always enabled in PPPoE Enabled
SPI Configuration SPI setting items
TCP Set the session timer of TCP establishment.
Range is 30~86,400 seconds. 600
UDP Set the UDP session timer.
Range is 30~86,400 seconds. 300
ICMP Set the ICMP session timer.
Range is 30~86,400 seconds.
30