ZyXEL Communications PMG5318-B20A, Руководство пользователя

Страница: 130 / 168

Chapter 15 Firewall
PMG5318-B20A User’s Guide
130
15.2 The General Screen
Use this screen to enable firewall and set the default action that the firewall takes on packets
depending on packet direction. Click Security > Firewall to display the following screen.
Note: When configuring the firewall, WAN refers to traffic passing through the WAN
interface set as the default gateway. To check which interface this is click Network
> WAN > Default Gateway.
Figure 67
Security > Firewall
The following table describes the labels in this screen.
Table 48
Security > Firewall
LABEL DESCRIPTION
Active Firewall Select this to enable the firewall feature.
Reject to response the
request for
unauthorized services If you select this, the GPON Device will not send an ICMP response packet when
unsupported services are requested. Therefore, an outside user will not be able to
determine the ONT exists.
Packet Direction This is the direction of travel of packets (LAN to WAN, WAN to LAN).
Firewall rules are grouped based on the direction of travel of packets to which they
apply. For example, LAN to WAN means packets traveling from a computer/subnet
on the LAN to the WAN.
Default Action Use the drop-down list boxes to select the default action that the firewall is to take
on packets that are traveling in the selected direction and do not match any of the
firewall rules.
Select Drop to silently discard the packets without sending a TCP reset packet or an
ICMP destination-unreachable message to the sender.
Select Reject to deny the packets and send a TCP reset packet (for a TCP packet) or
an ICMP destination-unreachable message (for a UDP packet) to the sender.
Select Permit to allow the passage of the packets.
Apply Click this to save your changes.
Cancel Click this to restore your previously saved settings.