background image

Prestige 660W/HW Series Compact Guide 

32

 

6.6 Firewall Overview 

The Prestige firewall is a stateful inspection firewall and is designed to protect against 
Denial of Service attacks when activated. The Prestige’s purpose is to allow a private 
Local Area Network (LAN) to be securely connected to the Internet. The Prestige can be 
used to prevent theft, destruction and modification of data, as well as log events, which 
may be important to the security of your network. The Prestige also has packet-filtering 
capabilities.   

When activated, the firewall allows all traffic to the Internet that originates from the 
LAN, and blocks all traffic to the LAN that originates from the Internet. In other words 
the Prestige will: 
 
  

Allow all sessions originating from the LAN to the WAN

 

       

Deny all sessions originating from the WAN to the LAN

 

 

LAN-to-WAN

 rules are local network to Internet firewall rules. The default is to 

forward all traffic from your local network to the Internet. 

The following figure illustrates a Prestige firewall application.  

 

 

Figure 19 Prestige Firewall Application 

Denial of Service Attacks 

Содержание Prestige 660W Series

Страница 1: ...Prestige 660W HW Series ADSL 2 2 Gateway with 802 11g Wireless Compact Guide Version 3 40 May 2004...

Страница 2: ...ows 2000 NT XP 14 4 3 Checking Updating Your Computer s IP Address 15 4 4 Testing the Connection to the Prestige 15 5 Configuring Your Prestige 17 5 1 Accessing Your Prestige Via Web Configurator 17 5...

Страница 3: ...s Compact Guide 3 6 5 Configuring SUA Server 30 6 6 Firewall Overview 32 6 7 Enabling the Firewall 33 6 8 Procedure for Configuring Firewall Rules 33 6 9 Configuring Source and Destination Addresses 3...

Страница 4: ...MATION Your device s WAN IP Address if given __________________ DNS Server IP Address if given Primary __________________ Secondary _________________ Virtual Path Identifier VPI ____________ Virtual C...

Страница 5: ...Connect to a computer external hub using an Ethernet cable POWER Connect to a power source using the power adaptor for your region see your User s Guide After you ve made the connections connect the...

Страница 6: ...ults password is 1234 LAN IP address 192 168 1 1 etc see your User s Guide for details 2 2 The Front Panel LEDs Figure 2 P660HW Front Panel Refer to the following table for more detailed LED descripti...

Страница 7: ...a LAN 1 to LAN 4 Off The LAN is not connected On The Prestige is ready but is not sending receiving data through the wireless LAN Blinking The Prestige is sending receiving data through the wireless L...

Страница 8: ...ION Green On The Prestige is receiving power PWR Off The Prestige is not receiving power On The Prestige is functioning properly Green Blinking The Prestige is rebooting Red On Power to the Prestige i...

Страница 9: ...s ready but is not sending receiving data On The Prestige is ready but is not sending receiving data through the wireless LAN Blinking The Prestige is sending receiving data through the wireless LAN W...

Страница 10: ...Prestige automatically detects and configures your Internet connection This may take about two minutes Step 3 If you have a PPPoE or PPPoA connection type a screen displays prompting you to enter you...

Страница 11: ...o 192 168 1 254 range with a subnet mask of 255 255 255 0 This is necessary to ensure that your computer can communicate with your Prestige Your computer must have an Ethernet card and TCP IP installe...

Страница 12: ...t your network adapter s TCP IP entry and click Properties 4 Click the IP Address tab If your IP address is dynamic select Obtain an IP address automatically If you have a static IP address select Spe...

Страница 13: ...information select Enable DNS and type the information in the fields below you may not need to fill them all in 6 Click the Gateway tab If you do not know your gateway s IP address remove previously i...

Страница 14: ...anel 2 In Windows XP click Network Connections In Windows 2000 NT click Network and Dial up Connections 3 Right click Local Area Connection and then click Properties 4 Select Internet Protocol TCP IP...

Страница 15: ...r Computer s IP Address 1 In the computer click Start All Programs Accessories and then Command Prompt 2 In the Command Prompt window type ipconfig and then press ENTER to verify that your computer s...

Страница 16: ...of data Reply from 192 168 1 1 bytes 32 time 10ms TTL 254 Reply from 192 168 1 1 bytes 32 time 10ms TTL 254 Reply from 192 168 1 1 bytes 32 time 10ms TTL 254 Reply from 192 168 1 1 bytes 32 time 10ms...

Страница 17: ...er 192 168 1 1 as the web site address Figure 4 Entering Prestige LAN IP Address in Internet Explorer Step 2 An Enter Network Password window displays Enter the user name admin is the default password...

Страница 18: ...urator Site Map Screen The Prestige automatically times out after five minutes of inactivity Simply log back into the Prestige if this happens to you 5 2 Common Screen Command Buttons The following ta...

Страница 19: ...ult if your ISP allows multiple computers to share an Internet account Otherwise select Bridge Select the encapsulation type your ISP uses from the Encapsulation drop down list box Choices vary depend...

Страница 20: ...connection up all the time and specify an idle time out period in seconds in the Max Idle Timeout field Select Nailed Up Connection when you want your connection up all the time The Prestige will try...

Страница 21: ...he ENET ENCAP Gateway field enter the gateway IP address given by your ISP Refer to Figure 8 for other field descriptions Figure 11 Internet Connection with PPPoA Refer to Figure 8 for field descripti...

Страница 22: ...the LAN information on the Prestige click Change LAN Configurations Otherwise click Save Settings to save the configuration and skip the following step Figure 12 Wizard Screen 3 Step 5 If you want to...

Страница 23: ...default gateway and DNS servers to computer systems that support the DHCP client Select Off to disable DHCP server When DHCP server is used set the following items Specify the first of the contiguous...

Страница 24: ...ser and navigate to www zyxel com Internet access is just the beginning Refer to the User s Guide for more detailed information on the complete range of Prestige features If you cannot access the Inte...

Страница 25: ...ss various services the Internet email printer services etc on the wired network without additional expensive network cabling infrastructure In effect a wireless LAN environment provides you the freed...

Страница 26: ...e ESSID through passive scanning Channel ID The radio frequency used by IEEE 802 11b wireless devices is called a channel Select a channel from the drop down list box RTS CTS Threshold Select this opt...

Страница 27: ...bit WEP then enter 29 ASCII characters or 58 hexadecimal characters 0 9 A F You must configure all four keys but only one key can be activated at any one time The default key is key 1 The wireless cl...

Страница 28: ...lter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering Action Define the filter action for the list of MAC addresses in the MAC Address table Select Deny...

Страница 29: ...nerated and distributed by the authentication server It includes a per packet key mixing function a Message Integrity Check MIC named Michael an extended initialization vector IV with sequencing rules...

Страница 30: ...resses 5 Server This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world 6 5 Configuring SUA Server An SUA server set is a list of insi...

Страница 31: ...End Port field To forward a series of ports type the start port number here and the end port number in the End Port field End Port No Type a port number in this field To forward only one port type th...

Страница 32: ...y of your network The Prestige also has packet filtering capabilities When activated the firewall allows all traffic to the Internet that originates from the LAN and blocks all traffic to the LAN that...

Страница 33: ...en Enable or activate the firewall by selecting the Enable Firewall check box as seen in the following screen Figure 20 Enabling the Firewall 6 8 Procedure for Configuring Firewall Rules From the main...

Страница 34: ...ON The default action for packets not matching following rules Should packets that do not match the following rules be blocked or forwarded Make your choice from the drop down list box Note that block...

Страница 35: ...t a blank source or destination address is equivalent to Any Service This drop down list box displays the services to which this firewall rule applies Please note that a blank service type is equivale...

Страница 36: ...prehensive list of port numbers and services visit the IANA Internet Assigned Number Authority web site Step 3 Configure the Source Address and Destination Address for the rule Figure 22 Creating Edit...

Страница 37: ...ed Services box on the right then click Edit Available Service Click this button to go to the list of available services Action for Matched Packets Should packets that match this rule be blocked or fo...

Страница 38: ...TION Address Type Do you want your rule to apply to packets with a particular single IP address a range of IP addresses e g 192 168 1 10 to 192 169 1 50 a subnet or any IP address Select an option fro...

Страница 39: ...Prestige and your LAN computers Verify that the IP address subnet mask of the Prestige and the LAN computers are in the same IP address range Cannot ping any computer on the WLAN Make sure the WLAN L...

Страница 40: ...Prestige 660W HW Series Compact Guide 40...

Отзывы: