ZyXEL Communications LTE7410 - Page 72

Chapter 10 Firewall
LTE7410 User’s Guide
72
The following table describes the labels in this screen.
Table 25 Security > Firewall > Rules > Add
LABEL DESCRIPTION
Edit Rule
Active Select this option to enable this firewall rule.
Action for Matched
Packets
Use the drop-down list box to select whether to discard (Drop), deny and send an
ICMP destination-unreachable message to the sender of (Reject) or allow the
passage of (Permit) packets that match this rule.
Rate Limit Set a maximum number of packets per second, minute, or hour to limit the
throughput of traffic that matches this rule.
Maximum Burst
Number
Set the maximum number of packets that can be sent at the peak rate.
Log This field determines if a log for packets that match the rule is created or not.
Rules/Source Address
Address Type Do you want your rule to apply to packets with a particular (single) IP, a range of IP
addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or any IP address?
Select an option from the drop-down list box that includes: Single Address, Range
Address, Subnet Address and Any
Address.
Start IP Address Enter the single IP address or the starting IP address in a range here.
End IP Address Enter the ending IP address in a range here.
Subnet Mask Enter the subnet mask here, if applicable.
Source Mac Address Specify a source MAC address of traffic to which to apply this firewall rule applies.
Please note that a blank source MAC address is equivalent to any.
Source Interface Specify a source interface (Blank, LteWAN1, LteWAN2, or LteWAN3) to which
the firewall rule applies. This is the interface through which the traffic entered the
Device. Please note that a blank source interface is equivalent to any.
Note: To show this option, go to Network Setting > Broadband to activate LteWAN2
and LteWAN3 first. Then go to Security > Firewall > Rules and configure
Packet Direction as WAN to LAN or WAN to Router.
Destination Address
Address Type Do you want your rule to apply to packets with a particular (single) IP, a range of IP
addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or any IP address?
Select an option from the drop-down list box that includes: Single Address, Range
Address, Subnet Address and Any
Address.
Start IP Address Enter the single IP address or the starting IP address in a range here.
End IP Address Enter the ending IP address in a range here.
Subnet Mask Enter the subnet mask here, if applicable.
Destination Interface Specify a destination interface (Blank, LteWAN1, LteWAN2, or LteWAN3) to
which the firewall rule applies. This is the interface through which the traffic is
destined to leave the Device. Please note that a blank destination interface is
equivalent to any.
Note: To show this option, go to Network Setting > Broadband to activate LteWAN2
and LteWAN3 first. Then go to Security > Firewall > Rules and configure
Packet Direction as LAN to WAN.
Service
Available Services Select a service from the Available Services box.
Edit Customized
Services
Click the Edit Customized Service button to bring up the screen that you use to
configure a new custom service that is not in the predefined list of services.