beautypg.com

Bridge mode firewall configuration settings – Compex Systems 802.11N User Manual

Page 71

background image

Bridge mode Firewall Configuration Settings

Firewall functionality on any router interface can be enabled using the "Enable Firewall" option.

Router Firewall rules can be configured, enabled or disabled while using Firewall

configuration window which is opened with the "Configure" button.

Firewall entries can be specified by using the following criteria:

Interface the interface (WLAN, LAN or PPP) where filtering of the incoming/passing-through

packets

is

processed;

IP Type sets which particular L3 protocol type (ICMP, TCP, UDP, P2P) should be filtered;

Source IP/mask is the source IP of the packet (specified within the packet header), usually it is

the IP of the host system which sends the packets;

Source Port is the source port of the TCP/UDP packet (specified within the packet header),

usually it is the port of the host system application which sends the packets;

Destination IP/mask is the destination IP of the packet (specified within the packet header),

usually it is the IP of the system which the packet is addressed to;

Destination Port is the destination port of the TCP/UDP packet (specified within the packet

header), usually it is the port of the host system application which the packet

is addressed to.

Comments is the informal field for the comment of the particular firewall entry. Few words

about

the

particular

firewall

entry purpose are saved there usually.

On flag enables or disables the effect of the particular firewall entry. All the added firewall

entries are saved in system configuration file, however only the enabled firewall entries

will be active during device operation.

New entries in Firewall can be saved by activating Apply Setting and Save Changes button or

discarded by activating Cancel button in the Firewall configuration window.

All the active firewall entries are stored in the FIREWALL chain of the iptables filter table, while

the device is operating in Router mode.

PPPoE: Point-to-Point Protocol over Ethernet (PPPoE) is a virtual private and secure connection

between two systems which enables encapsulated data transport. It is commonly used as the

medium for subscribers to connect to Internet Service Providers.

Select the IP Address option PPPoE to configure a PPPoE tunnel in order to connect to an ISP.

Only the external network interface can be configured as PPPoE client as all the traffic will

be sent via this tunnel. The IP address, Default gateway IP and DNS server IP address will be

obtained from the PPPoE server after PPPoE connection is established. Broadcast address is

used for the PPPoE server discovery and tunnel establishment.

Valid

authorization credentials are required for the PPPoE connection:

PPPoE Username – username to connect to the server (must match the configured on the

PPPoE

server);

Password – password to connect to the server (must match the configured on the PPPoE

server);

PPPoE MTU/MRU – the size (in bytes) of the Maximum Transmission Unit (MTU)

and

Maximum

Receive

Unit

(MRU) used for the data encapsulation

while

transferring

it

through

the

PPP

tunnel;