User manual NETGEAR DG834PN REFERENCE MANUAL

[. . . ] Reference Manual for the DG834PN RangeMaxTM ADSL Modem Wireless Router NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR 202-10127-01 November 2005 © 2005 by NETGEAR, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. [. . . ] -- Match -- traffic of this type which matches the parameters and action will be logged. -- Not match -- traffic of this type which does not match the parameters and action will be logged. Inbound Rule Example: Allowing Video conferencing If you want to allow incoming video conferencing to be initiated from a restricted range of outside IP addresses, such as from a branch office, you can create an inbound rule. In the example shown in Figure 4-6, CU-SeeMe connections are allowed only from a specified range of external IP addresses. In this case, we have also specified logging of any incoming CU-SeeMe requests that do not match the allowed parameters. Figure 4-6 4-8 v1. 0, November 2005 Protecting Your Network Reference Manual for the DG834PN RangeMaxTM ADSL Modem Wireless Router Considerations for Inbound Rules · If your external IP address is assigned dynamically by your ISP, the IP address may change periodically as the DHCP lease expires. Consider using the Dynamic DNS feature in the Advanced menu so that external users can always find your network. If the IP address of the local server computer is assigned by DHCP, it may change when the computer is rebooted. To avoid this, use the Reserved IP address feature in the LAN IP menu to keep the computer's IP address constant. Local computers must access the local server using the computer's local LAN address (192. 168. 0. 11 in the example in Figure 4-6 above). Attempts by local computers to access the server using the external WAN IP address will fail. · · Outbound Rules (Service Blocking) The DG834PN allows you to block the use of certain Internet services by computers on your network. You can define an outbound rule to block Internet access from a local computer based on: · IP address of the local computer (source address) · IP address of the Internet site being contacted (destination address) · Time of day · Type of service being requested (service port number) Following is an application example of outbound rules: Protecting Your Network v1. 0, November 2005 4-9 Reference Manual for the DG834PN RangeMaxTM ADSL Modem Wireless Router Outbound Rule Example: Blocking Instant Messenger If you want to block Instant Messenger usage by employees during working hours, you can create an outbound rule to block that application from any internal IP address to any external address according to the schedule that you have created in the Schedule menu. You can also have the ADSL modem wireless router log any attempt to use Instant Messenger during that blocked period. Figure 4-7 The parameters are: · Service From this list, select the application or service to be allowed or blocked. The list already displays many common services, but you are not limited to these choices. Use the Add Custom Service feature to add any additional services or applications that do not already appear. You can block or allow always, or you can choose to block or allow according to the schedule you have defined in the Schedule menu. LAN Users These settings determine which packets are covered by the rule, based on their source LAN IP address. Select the desired option: -- Any -- all IP addresses are covered by this rule. -- Address range -- if this option is selected, you must enter the Start and Finish fields. Protecting Your Network v1. 0, November 2005 · · 4-10 Reference Manual for the DG834PN RangeMaxTM ADSL Modem Wireless Router -- Single address -- enter the required address in the Start field. · WAN Users These settings determine which packets are covered by the rule, based on their destination WAN IP address. Select the desired option: -- Any -- all IP addresses are covered by this rule. -- Address range --if this option is selected, you must enter the Start and Finish fields. The choices are: -- Never -- no log entries will be made for this service. [. . . ] You should see a message like this one: Pinging <IP address> with 32 bytes of data If the path is working, you see this message: Reply from < IP address >: bytes=32 time=NN ms TTL=xxx If the path is not working, you see this message: Request timed out Troubleshooting v1. 0, November 2005 7-7 Reference Manual for the DG834PN RangeMaxTM ADSL Modem Wireless Router If the path is not functioning correctly, you could have one of the following problems: · Wrong physical connections -- Make sure the LAN port LED is on. If the LED is off, follow the instructions in "LAN or Internet Port LEDs Not On" on page 7-2. -- Check that the corresponding Link LEDs are on for your network interface card and for the hub ports (if any) that are connected to your workstation and router. · Wrong network configuration -- Verify that the Ethernet card driver software and TCP/IP software are both installed and configured on your PC or workstation. [. . . ]