UCM630X Series User Manual
Version 1.0.11.10
For typical firewall settings, users could configure the following options on the UCM630X.
Table 16: Typical Firewall Settings
If enabled, ICMP response will not be allowed for Ping requests. The default
setting is disabled. To enable or disable it, click on the check box for the LAN or
WAN (UCM630X) interface.
Allows the UCM630X to handle excessive amounts of SYN packets from one
source and keep the web portal accessible. There are two options available and
only one of these options may be enabled at one time.
• eth(0)LAN defends against attacks directed to the LAN IP address of the
UCM630X.
• eth(1)WAN defends against attacks directed to the WAN IP address of the
UCM630X.
SYN Flood Defense will limit the amount of SYN packets accepted by the UCM
from one source to 10 packets per second. Any excess packets from that source
will be discarded.
Ping-of-Death
Defense Enable
Enable to prevent Ping-of-Death attack to the device. The default setting is
disabled. To enable or disable it, click on the check box for the LAN or WAN
(UCM630X) interface.
Under "Custom Firewall Settings", users could create new rules to accept, reject or drop certain traffic going
through the UCM630X. To create a new rule, click on the "Create New Rule" button and a new window will pop
up for users to specify rule options.