ProSoft Technology RLXIC-SG, Руководство пользователя, Страница: 63 / 136

Data Communication and Host Modes RLXIC-SG ♦ Intelligent Cellular
User Manual RadioLinx Intelligent Cellular Serial Modem for Global GPRS/GSM
ProSoft Technology, Inc.
Page 63 of 136
May 29, 2009
In AceManager, enter the fields in the Port Forwarding group.
ƒ
Number of PF Entries: Set value to number of used Port forward rules for
performance gain. Each forwarding entry has four parameters:
o
Public Port: Port number of the Modem/Gateway.
o
Host/IF: Physical connection type to the modem. (USB, Ethernet, Serial).
o
Host IP: IP address of the connected device/computer.
o
Private Port: Port number on the connected device.
You can set a default in the PPP/Ethernet group, if you do not need:
ƒ
To forward to specific ports on your connected device, but you want all data
to be directly used by ALEOS, or otherwise forwarded.
ƒ
To pass to only one connected device.
Note: The default settings are independent of the number of Port Forward entries, and can be
used with port forwarding to pass anything not forwarded to specific ports.
o
Default Interface: Choose the Default Interface desired (that is, Ethernet
or USB or Serial).
o
Default IP: Enter this option only when you want to forward ports not
specified, to the default IP.
Firewall Functions
The RLXIC-SG can provide a basic firewall between the public and private
networks. There are two types of firewall rules supported by the RLXIC-SG, IP
filtering and port filtering.
ƒ
IP Filtering : When enabled, only packets with source IP addresses matching
those in a list or range of trusted hosts will be allowed through.
o
Friends List IP: Each entry can be configured to allow a single IP address,
for example 64.100.100.2, or the IP addresses from a complete subnet,
such as 64.100.10.255 allowing all IP addresses from 64.100.10.0 to
64.100.10.255.
o
Non-Friends Port Forwarding: Non-Friends port forwarding is like an allow
rule for any of the forwarded ports. If it is enabled, the port forwarding
rules apply to all incoming packets. If it is disabled, only Friends List IPs
get through.
o
Start and End Range: Specify the IP address range that is allowed
access, for example 64.100.10.2 to start and 64.100.10.15 to end would
allow 64.100.10.5 but would not allow 64.100.10.16.