Pepwave BR1 ENT, Руководство пользователя

Страница: 124 / 206

Action
This setting specifies the action to be taken by the router upon encountering traffic that
matches the both of the following:
● Source IP & port
● Destination IP & port
With the value of ​ Allow ​ for the ​ Action ​ setting, the matching traffic passes through the
router (to be routed to the destination). If the value of the ​ Action ​ setting is set to ​ Deny ​ , the
matching traffic does not pass through the router (and is discarded).
Event Logging
This setting specifies whether or not to log matched firewall events. The logged messages
are shown on the page
​ Status>Event Log ​ . A sample message is as follows:
Aug 13 23:47:44 Denied CONN=Ethernet WAN SRC=20.3.2.1
DST=192.168.1.20 LEN=48 PROTO=TCP SPT=2260 DPT=80
● CONN: ​ The connection where the log entry refers to
● SRC: ​ Source IP address
● DST: ​ Destination IP address
● LEN:
​
Packet length
● PROTO: ​ Protocol
● SPT: ​ Source port
● DPT: ​ Destination port
Click
​
Save
​
to store your changes. To create an additional firewall rule, click
​
Add Rule
​
and
repeat the above steps.
To change a rule’s priority, simply drag and drop the rule:
● Hold the left mouse button on the rule.
● Move it to the desired position.
● Drop it by releasing the mouse button.
Tip
If the default inbound rule is set to ​ Allow ​ for NAT-enabled WANs, no inbound Allow firewall rules will be required
for inbound port forwarding and inbound NAT mapping rules. However, if the default inbound rule is set as
​
Deny
​
,
a corresponding Allow firewall rule will be required.
19.1.2 Apply Firewall Rules to PepVpn Traffic
When this option is enabled, Outbound Firewall Rules will be applied to PepVPN traffic. ​ ​ To
http://www.peplink.com 124 Copyright @ 2017 Pepwave