User manual NETGEAR MBR624GU

[. . . ] Plumeria Drive San Jose, CA 95134 USA 202-10437-02 March 2009 © 2009 by NETGEAR, Inc. All rights reserved. Trademarks NETGEAR and the NETGEAR logo are trademarks of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. [. . . ] You can also choose to log traffic that matches or does not match the rule you have defined. You can change the order of precedence of rules so that the rule that applies most often will take effect first. To view or change firewall rules, select Firewall Rules on the main menu. Figure 3-3 · · · To edit an existing rule, select its button on the left side of the table and click Edit. To delete an existing rule, select its button on the left side of the table and click Delete. To move a rule to a different position in the table, select its button, and then click Move. At the prompt, enter the number of the desired new position, and then click OK. Protecting Your Network v1. 1, March 2009 3-5 3G Broadband Wireless Router MBR624GU User Manual Inbound Rules (Port Forwarding) Because the router uses Network Address Translation (NAT), your network presents only one IP address to the Internet, and outside users cannot directly access any of your local computers. However, by defining an inbound rule you can make a local server (for example, a Web server or game server) visible and available to the Internet. The rule tells the router to direct inbound traffic for a particular service to one local server based on the destination port number. Note: Some broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP might periodically check for servers and might suspend your account if it discovers any active services at your location. Inbound Rule Example: A Local Public Web Server If you host a public Web server on your local network, you can define a rule to allow inbound Web (HTTP) requests from outside IP addresses to the IP address of your Web server at any time of day. This rule is shown in the following figure: Figure 3-4 The settings are: · Service. From this list, select the application or service to be allowed or blocked. The list already displays many common services, but you are not limited to these choices. Use the Services screen to add any additional services or applications that do not already appear. 3-6 v1. 1, March 2009 Protecting Your Network 3G Broadband Wireless Router MBR624GU User Manual · Action. You can block or allow always, or you can choose to block or allow according to the schedule you have defined in the Schedule screen. Enter the IP address of the computer or server on your LAN which will receive the inbound traffic covered by this rule. These settings determine which packets are covered by the rule, based on their source (WAN) IP address. If this option is selected, you must enter the Start and Finish fields. Enter the required address in the Start field. · · · Log. Traffic of this type that does not match the rule will be logged. Inbound Rule Example: Allowing Videoconferencing You can create an inbound rule to allow incoming videoconferencing to be initiated from a restricted range of outside IP addresses, such as from a branch office. In this example, CU-SeeMe connections are allowed only from a specified range of external IP addresses. [. . . ] You should see a message like this one: Pinging <IP address> with 32 bytes of data If the path is working, you see this message: Reply from < IP address >: bytes=32 time=NN ms TTL=xxx If the path is not working, you see this message: Request timed out If the path is not working correctly, you could have one of the following problems: · Wrong physical connections ­ ­ Make sure that the LAN port LED is on. If the LED is off, follow the instructions in Table 6-1 on page 6-2. · Check that the corresponding Link LEDs are on for your network interface card and for the hub ports (if any) that are connected to your workstation and router. Wrong network configuration ­ ­ Verify that the Ethernet card driver software and TCP/IP software are both installed and configured on your PC or workstation. Verify that the IP address for your router and your workstation are correct and that the addresses are on the same subnet. Troubleshooting v1. 1, March 2009 6-6 3G Broadband Wireless Router MBR624GU User Manual Testing the Path from Your Computer to a Remote Device After verifying that the LAN path works correctly, test the path from your PC to a remote device. [. . . ]