User manual COMTREND CT-5072S

[. . . ] CT-5072S ADSL2+ Router User Manual Version A2. 0, November 10, 2008 261063-017 Preface This manual provides information related to the installation, operation, and application of this device. The individual reading this manual is presumed to have a basic understanding of telecommunications terminology and concepts. If you find the product to be inoperable or malfunctioning, please contact technical support for immediate service by email at INT-support@comtrend. com For product update, new product release, manual revision, or software upgrades, please visit our website at http://www. comtrend. com Important Safety Instructions With reference to unpacking, installation, use, and maintenance of your electronic device, the following basic guidelines are recommended: · Do not use or install this product near water, to avoid fire or shock hazard. For example, near a bathtub, kitchen sink or laundry tub, or near a swimming pool. [. . . ] When a service is selected, the port ranges are automatically configured. Enter the internal port starting number (when you select Custom Server). When a service is selected the port ranges are automatically configured Enter the internal port ending number (when you select Custom Server). When a service is selected, the port ranges are automatically configured. External Port End Protocol Internal Port Start Internal Port End 39 6. 3. 2 Port Triggering Some applications require that specific ports in the firewall be opened for access by the remote parties. Port Triggers dynamically 'Open Ports' in the firewall when an application on the LAN initiates a TCP/UDP connection to a remote party using the 'Triggering Ports'. The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the 'Open Ports'. A maximum 32 entries can be configured. To add a Trigger Port, click Add. The following will be displayed. Consult the table below for field and header descriptions. Field/Header Select an Application Or Description User should select the application from the list. Or 40 Custom Application Trigger Port Start Trigger Port End Trigger Protocol Open Port Start Open Port End Open Protocol User can enter the name of their choice. Enter the starting trigger port number (when you select custom application). When an application is selected, the port ranges are automatically configured. Enter the ending trigger port number (when you select custom application). When an application is selected, the port ranges are automatically configured. Enter the starting open port number (when you select custom application). When an application is selected, the port ranges are automatically configured. Enter the ending open port number (when you select custom application). When an application is selected, the port ranges are automatically configured. TCP, TCP/UDP, or UDP. 6. 3. 3 DMZ Host The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer. To Activate the DMZ host, enter the DMZ host IP address and click Save/Apply. To Deactivate the DMZ host, clear the IP address field and click Save/Apply. 6. 3. 4 ALG Session Initiation Protocol (SIP - RFC3261) Application Layer Gateway (ALG) is the protocol of choice for most VoIP (Voice over IP) phones to initiate communication. If the user has an IP phone (SIP) or VoIP gateway (SIP) situated behind the router, the SIP ALG can help VoIP packets pass through when NAT is enabled. Tick the SIP Enabled checkbox to enable SIP ALG and click Save/Apply. 41 NOTE: This ALG is only valid for SIP protocol running on UDP port 5060. 6. 4 Security To display this function, you must enable the firewall feature in WAN Setup. [. . . ] Port Selected WAN interface : : : : : : : : : In_Filter1 TCP 210. 168. 219. 45 255. 255. 0. 0 80 NA NA NA mer_0_35/nas_0_35 This filter will ACCEPT all TCP packets coming from WAN interface mer_0_35/nas_0_35 with IP Address/Subnet Mask 210. 168. 219. 45/16 having a source port of 80 irrespective of the destination. Example 2: Filter Name Protocol Source Address Source Subnet Mask Source Port Dest. Port : : : : : : : : In_Filter2 UDP 210. 168. 219. 45 255. 255. 0. 0 5060:6060 192. 168. 1. 45 255. 255. 255. 0 6060:7070 This rule will ACCEPT all UDP packets coming from WAN interface mer_0_35/nas_0_35 with IP Address/Subnet Mask 210. 168. 219. 45/16 and a source port in the range of 5060 to 6060, destined to 192. 168. 1. 45/24 and a destination port in the range of 6060 to 7070. MAC LAYER FILTER These rules help in the filtering of Layer 2 traffic. [. . . ]