User manual ZYXEL NBG410W3G

[. . . ] NBG410W3G Series 3G Wireless Router User's Guide Version 4. 03 08/2008 Edition 1 www. zyxel. com About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology. Related Documentation · Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access. [. . . ] It is generally a mechanism used to protect a trusted network from an untrusted network. The ZyXEL Device physically separates the LAN, DMZ and the WAN and acts as a secure gateway for all data passing between the networks. The ZyXEL Device protects against Denial of Service (DoS) attacks, prevents theft, destruction and modification of data, and logs events. Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN, DMZ and WAN. By default the firewall: · allows traffic that originates from your LAN computers to go to all of the networks. · blocks traffic that originates on the other networks from going to the LAN. · allows traffic that originates on the WAN to go to the DMZ and protects your DMZ computers against DoS attacks. User A can initiate an IM (Instant Messaging) session from the LAN to the WAN (1). However other traffic initiated from the WAN is blocked (3 and 4). Figure 96 Default Firewall Action LAN A 1 2 WAN 3 4 Internet Your customized rules take precedence and override the ZyXEL Device's default settings. The ZyXEL Device checks the source IP address, destination IP address and IP protocol type of network traffic against the firewall rules (in the order you list them). When the traffic matches a rule, the ZyXEL Device takes the action specified in the rule. NBG410W3G Series User's Guide 167 Chapter 9 Firewall 9. 2 Packet Direction Matrix The ZyXEL Device's packet direction matrix allows you to apply certain security settings (like firewall) to traffic flowing in specific directions. For example, click SECURITY > FIREWALL to open the following screen. This screen configures general firewall settings. Figure 97 SECURITY > FIREWALL > Default Rule Packets have a source and a destination. The packet direction matrix in the lower part of the screen sets what the ZyXEL Device does with packets traveling in a specific direction that do not match any of the firewall rules. From A specific interface A specific interface To To set the ZyXEL Device to block traffic from WAN 1 from going to the DMZ interfaces, find where the From WAN1 row and the To DMZ column intersect and set the field to Drop as shown. 168 NBG410W3G Series User's Guide Chapter 9 Firewall Figure 98 Default Block Traffic From WAN1 to DMZ Example 9. 3 Packet Direction Examples Firewall rules are grouped based on the direction of travel of packets to which they apply. This section gives some examples of why you might configure firewall rules for specific connection directions. By default, the ZyXEL Device allows packets traveling in the following directions. : · LAN to LAN These rules specify which computers on the LAN can manage the ZyXEL Device (remote management) and communicate between networks or subnets connected to the LAN interface (IP alias). You can also configure the remote management settings to allow only a specific computer to manage the ZyXEL Device. · LAN to WAN These rules specify which computers on the LAN can access which 1 computers or services connected to WAN 1. See Section 9. 5 on page 171 for an example. NBG410W3G Series User's Guide 169 Chapter 9 Firewall By default, the ZyXEL Device drops packets traveling in the following directions. · WAN 1 to LAN These rules specify which computers connected to WAN 1 can access which computers or services on the LAN. For example, you may create rules to: · Allow certain types of traffic, such as Lotus Notes database synchronization, from specific hosts on the Internet to specific hosts on the LAN. · Allow public access to a Web server on your protected network. You could also block certain IP addresses from accessing it. You also need to configure NAT port forwarding (or full featured NAT address mapping rules) to allow computers on the WAN to access devices on the LAN. See Section 12. 5. 3 on page 236 for an example. · WAN to WAN By default the ZyXEL Device stops computers connected to WAN1 or WAN2 from managing the ZyXEL Device or using the ZyXEL Device as a gateway to communicate with other computers on the WAN. [. . . ] See third generation 126 BSS 389 C CA 195, 396 Certificate Authority See CA. certificates 195 CA 195 thumbprint algorithms 196 thumbprints 196 verifying fingerprints 196 Certification Authority. certifications 415 notices 416 viewing 417 channel 148, 391 ID 152 interference 391 CNM 278 command line interface 36 computer names 104, 106 configuration backup 334 configuration restore 334 contact information 419 copyright 415 cost of transmission 112 CTS (Clear to Send) 392 custom ports 185 customer support 419 A access point 147 See also AP. AES 398 ALG 293 RTP 294 SIP 295 STUN 295 alternative subnet mask notation 379 antenna directional 401 gain 401 omni-directional 401 anti-probing 180 AP 147 See also access point. [. . . ]