User manual COMTREND CT-5071T

[. . . ] CT-5071T ADSL2+ Ethernet Router User's Manual Version A3. 1, May 15, 2007 261063-010 Warning Before servicing or disassembling this equipment, always disconnect all power and telephone lines from the device. Specification of the power supply is clearly stated in Appendix C Specifications. Preface This manual provides information to network administrators. It covers the installation, operation and applications of the ADSL2+ Ethernet router. The reader reading this manual is presumed to have a basic understanding of telecommunications. For product update, new product release, manual revision, software upgrade, technical support, etc. , visit Comtrend Corporation at http://www. comtrend. com This document is subject to change without notice. Recycling For The Environment Never throw your electronic equipment out with household waste. [. . . ] The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the 'Open Ports'. A maximum 32 entries can be configured. To add a Trigger Port, simply click the Add button. The following will be displayed. 53 Select an Application or Custom Application Trigger Port Start User should select the application from the list. Enter the starting trigger port number (when you select custom application). When an application is selected the port ranges are automatically configured. Trigger Port End Enter the ending trigger port number (when you select custom application). When an application is selected the port ranges are automatically configured. Trigger Protocol Open Port Start User can select from: TCP, TCP/UDP or UDP. Enter the starting open port number (when you select custom application). When an application is selected the port ranges are automatically configured. Open Port End Enter the ending open port number (when you select custom application). When an application is selected the port ranges are automatically configured. Open Protocol User can select from: TCP, TCP/UDP or UDP. 54 6. 3. 3 DMZ Host The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer. Enter the computer's IP address and click "Apply" to activate the DMZ host. Clear the IP address field and click "Apply" to deactivate the DMZ host. 55 6. 3. 4 ALG SIP ALG is Application layer gateway. If the user has an IP phone(SIP) or VoIP gateway(SIP) behind the ADSL router, the SIP ALG can help VoIP packet passthrough the router (NAT enabled). Note: SIP (Session Initiation Protocol, RFC3261) is the protocol of choice for most VoIP (Voice over IP) phones to initiate communication. This ALG is only valid for SIP protocol running on UDP port 5060. 56 6. 4 Setup. Security To display the Security function, you need to enable the firewall feature in the WAN 6. 4. 1 IP Filtering IP filtering allows you to create a filter rule to identify outgoing/incoming IP traffic by specifying a new filter name and at least one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Outgoing Note: The default setting for all Outgoing traffic is Accepted. To add a filtering rule, simply click the Add button. The following screen will be displayed. 57 Filter Name Protocol Source IP address Source Subnet Mask Source Port (port or port:port) Destination IP address Destination Subnet Mask Destination port (port or port:port) Type a name for the filter rule. Enter destination port number. 58 Incoming Note: The default setting for all Incoming traffic is Blocked. To add a filtering rule, simply click the Add button. The following screen will be displayed. To configure the parameters, please reference Outgoing table above. 59 6. 4. 2 Parental Control Parental control: allows parents, schools, and libraries to set access times for Internet use. To add a parental control, simply click the Add button. The following screen will be displayed. Username: MAC: Mon, Tue, Wed, Thu, Fri, Sat, Sun: Start, Stop: Input Internet access user name Set the MAC address to access the Internet Set which days that will have block restrictions to Internet access Set Internet block start and stop time 60 6. 4. 3 MAC Filtering Mac Filtering is only available when Bridging PVC is configured. The MAC Filtering Setup screen allows setting up the MAC filtering policy and the MAC filtering rules. MAC Filtering is only effective on ATM PVCs configured in Bridge mode. The policy FORWARDED means that all MAC layer frames will be FORWARDED except those matching with any of the specified rules in the following table. BLOCKED means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the following table. [. . . ] Port : In_Filter2 : UDP : 210. 168. 219. 45 : 255. 255. 0. 0 : 5060:6060 :192. 168. 1. 45 : 255. 255. 255. 0 : 6060:7070 This rule will ACCEPT all UDP packets coming from WAN interface mer_0_35/nas_0_35 with IP Address/Sub. Mask 210. 168. 219. 45/16 and a source port in the range of 5060 to 6060, destined to 192. 168. 1. 45/24 and a destination port in the range of 6060 to 7070. All other incoming packets on this interface are DROPPED. MAC Layer Filtering: These rules help in the filtering of traffic at the Layer 2. MAC Filtering is only effective on ATM PVCs configured in Bridge mode. After a Bridge mode PVC is created, navigate to Advanced Setup -> Security -> MAC Filtering web page. Global Policy: When set to Forwarded the default filter behavior is to Forward all MAC layer frames except those explicitly stated in the rules. [. . . ]