Network And Firewall; Ip/Mac Address Blocking, Port Blocking; Port Forwarding; Setting Dmz (Demilitarized Zone) - STRAIGHT CORE GWP-106VE Betriebshandbuch

2.6

Network and Firewall

Next to the network mode is the basic setting described in chapter 3.3, the following options are shown in
the "Network and Firewall" tab:

2.6.1 IP/MAC Address Blocking, Port Blocking

With regard to the identical direction of the configuration possibilities of "IP address Blocking" and "MAC
address Blocking" tabs, there is only the view for the first one.
"IP address Blocking" table items are used for limitation of the throughput of some packets directed from the
internal network, which reduces the abuse of your internet connection as well as the leakage of information
from some stations in your network.
"Blocking MAC address" table items enable to prevent data sending from your network by definition of the
rights bound with the HW addresses of individual devices.
"Blocking Port" table items allow restricting the range of TCP/IP or UDP ports through the Unit. It enables to
limit the accessibility of certain services provided from an external network.
For easy orientation in the created tables it is possible to create for each entered item a note with a
description of the respective rule.

2.6.2 Port forwarding

Entries in this table control the forwarding of incoming ports to the external gateway interface to any
IP in the internal network. It allows using the chosen computers in the internal network as servers or allows
their remote administration access. The symbol "S" represents a forward change of the origin address which
is necessary for some programmes. The symbol "C" indicates a change of the target port (the second value
is the number of the target port).

2.6.3 Setting DMZ (Demilitarized Zone)

The demilitarized Zone function allows you to configure that one computer in your network is directly
accessible from Internet. All services will be routed to this computer, except the services provided by the
router itself.
2.7

Services

In the Main Menu "Control" tab there are functions linked to the correct unit operation, software equipment
update functions, password changes, etc.

2.7.1 Rate limit

On this page it is possible to define the rate limits valid for whole unit. The upload and download direction is
always considered from the viewpoint of the client.
For advanced users: If the unit is in BRIDGE operation mode, upload means Ethernet interface broadcast
limit and download is the wireless interface broadcast limit. In ROUTER operating mode the tasks of the
individual interfaces are reversed.

2.7.2 DDNS setting

Dynamic DNS is a service, which allows registering a valid domain for changing (dynamic) IP Address. This
unit supports 2 providers of this service, DynDNS and TZO. TZO provides a 30-day free trial version of this
service. Refer to www.tzo.com for more information.
English version
Configuration of the wireless access point LAN
16
18
19
20
21