Solwise SAR715PV, Инструкция по эксплуатации

Страница: 70 / 188

Chapter 5 . The Configuration Screens in More Detail Solwise SAR715PV ADSL Ethernet Router User’s Guide
70
Firewall configuration.
Configuring triggers
A trigger allows an application to open a secondary port in order to
transport packets. The most common applications that require
secondary ports are FTP and NetMeeting
To configure a trigger:
1. Go to the Policies, Triggers and Intrusion Detection section of the
Security Interface Configuration . Click on Firewall Trigger Configuration
The
Firewall Trigger Configuration
page is displayed. There are no
triggers defined at this time. Click on the New Trigger link. The
following page is displayed:
2. Configure the trigger as follows:
a. Transport Type ; select a transport type from the drop-down
list, depending on whether you are adding a trigger for a TCP
or a UDP application.
b.
Port Number Start
; type the start of the trigger port range
that the primary session uses.
c. Port Number End ; type the end of the trigger port range that
the primary session uses.
d. Allow Multiple Hosts ; select allow if you want a secondary
session to be initiated to/from different remote hosts. Select
block if you want a secondary session to be initiated only
to/from the same remote host.
e. Max Activity Interval ; type the maximum interval time (in
milliseconds) between the use of secondary port sessions.
f. Enable Session Chaining ; select Allow or Block depending on
whether you want to allow multi-level TCP session chaining.
g. Enable UDP Session Chaining ; select Allow or Block
depending on whether you want to allow multi-level UDP and
TCP session chaining. You must set
Enable Session Chaining