ZyXEL Communications 400, Руководство пользователя

Страница: 36 / 68

Gateway 400 User Guide | Configuration
36
5.7.1.5 Zone Configuration
Here you will find an overview of pre-configured zones. A zone can never contain more than one in-
terface. The “policy” of each zone describes how to handle data packets for which no additional
rules exist. NAT (Network Address Translation) allows you replace the IP address of your PC with the
IP address of the Gateway 400.

ICMPv6 Filter
Here you can configure the ICMPv6 Filter settings that allow or deny incoming or outgoing ICMPv6
packets. The following filters can be selected:
destination-unreachable , packet-too-big , parameter-problem , time-exceeded , echo-request and
echo-reply
Edit entry
To edit a zone, click on the pencil icon at the end of the overview. This will open the Edit entry
screen dialog.
The Policy of each zone describes how to handle data packets for which no additional rules exist.
Allowed : This policy allows all packets which are not explicitly denied.
Denied : The policy allows only packets that are explicitly allowed (e.g., by opening specific
ports).
NAT : Network Address Translation replaces the local IP address of the network device
with the public IP address of the Gateway 400. This is required, for example, if the
network device has a private IP and you want to communicate with servers on the
Internet. This feature is only available for IPv4 connections!

ICMPv4
Enable ICMPv4 Filter : ICMP is used to exchange error and information messages. Since this feature
can also be used for malicious attacks in the network, you are given the option to
activate a filter.

ICMPv6
You can allow or deny incoming and outgoing ICMPv6 packets globally. If you want to allow only
specific packets, set the transmit direction to
Filtered . You can then configure the ICMPv6 filter un-
der Zone Configuration to determine which packets are allowed.
5.7.2 Port Forwarding
Port forwarding allows computers within a local network to also be reached from the Internet. This
is important, for example, if you need to exchange data over the Internet or make a web server ac-
cessible from the Internet. Computer games may require configuring port forwarding to communi-
cate with other computers.
Note
Computers that are accessible via port forwarding from the Internet are also vulnerable
to attacks from the Internet. Make sure that your computer is adequately protected
against Internet attacks by installing appropriate security software and using secure
passwords. Change your passwords at regular intervals.