ICR-1601
176
There are some additional useful firewall options in this page:
Stealth Mode lets router not to respond to port scans from the WAN so that makes it less susceptible
to discovery and attacks on the Internet. ”SPI” enables router to record the packet information like IP
address, port address, ACK, SEQ number and so on while they pass through the router, and the router
checks every incoming packet to detect if this packet is valid.
Discard Ping from WAN makes any host on the WAN side can`t ping this router. And finally, “Remote
Administrator Hosts” enables you to perform administration task from a remote host. If this feature is
enabled, only specified IP address(-es) can perform remote administration.
Enable SPI Scenario
As shown in the diagram, Gateway has the IP
address of 118.18.81.200 for WAN interface
and 192.168.1.253 for LAN interface. It serves
as a NAT gateway. Users in Network-A initiate
to access cloud server through the gateway.
Sometimes, unknown users will simulate the
packets but use different source IP to
masquerade. With the SPI feature been
enabled at the gateway, it will block such
packets from unknown users.
Discard Ping from WAN & Remote Administrator Hosts Scenario
“Discard Ping from WAN” makes any host on the
WAN side can`t ping this gateway reply any ICMP
packets. Enable the Discard Ping from WAN
function to prevent security leak when local
users surf the internet.
Remote administrator knows the gateway’s
global IP, and he can access the Gateway GUI via
TCP port 8080.
To Next Page
Loading...
