ZyXEL Communications MAX-306M1, Руководство пользователя

Страница: 191 / 376

Chapter 16 The Firewall Screens
User’s Guide
191
LAN-to-LAN/WiMAX Modem means the LAN to the WiMAX Modem LAN interface.
This is always allowed, as this is how you manage the WiMAX Modem from your
local computer.
WAN-to-LAN rules are Internet to your local network firewall rules. The default is
to block all traffic from the Internet to your local network.
How can you forward certain WAN to LAN traffic? You may allow traffic originating
from the WAN to be forwarded to the LAN by:
• Configuring NAT port forwarding rules.
• Configuring WAN or LAN & WAN access for services in the Remote MGMT
screens or SMT menus. When you allow remote management from the WAN,
you are actually configuring WAN-to-WAN/WiMAX Modem firewall rules. WAN-
to-WAN/WiMAX Modem firewall rules are Internet to the WiMAX Modem WAN
interface firewall rules. The default is to block all such traffic. When you decide
what WAN-to-LAN packets to log, you are in fact deciding what WAN-to-LAN
and WAN-to-WAN/WiMAX Modem packets to log.
Forwarded WAN-to-LAN packets are not considered alerts.
16.2.2 Triangle Route
When the firewall is on, your WiMAX Modem acts as a secure gateway between
your LAN and the Internet. In an ideal network topology, all incoming and
outgoing network traffic passes through the WiMAX Modem to protect your LAN
against attacks.
Figure 80 Ideal Firewall Setup