Garmin HM210DP/DI Modem User Manual


 
Configuring Firewall Settings
82 EN/LZT 108 6492 R2 - October 2003
11.2.2 Configuring IP Filter Global Settings
The IP Filter Configuration page enables you to configure several global
IP Filter settings, and displays a table showing all existing IP Filter rules.
The global settings that you can configure are:
Security Level: When High is selected, only those rules that are
assigned a security value of “High” will be in effect. The same is true
for the Medium and Low settings. When None is selected, IP
Filtering is disabled.
Private/Public/DMZ Default Action: This setting specifies a default
action to be taken (Accept or Deny on private, public or DMZ-type
devise interfaces when they receive packets that do not match any
of the filtering rules.
Private – Typically, the global setting for private interfaces is
Accept, so that LAN computers have access to the Internet
connection of the HM210dp/di.
Public – The interface connect to the Internet, e.g. PPP, EoA and
IpoA interfaces. Typically, the global setting for public interfaces is
Deny, so that all accesses to your LAN initiated from external
computers are denied (discarded at the public interface), except for
those allowed by a specific IP Filter rule.
DMZ – Refers to computers that are available for both public and in-
network accesses (such as a company’s public Web server).
Packets received on a DMZ interface – whether from a LAN or
external source – are subject to a set of protections that is in
between public and private interfaces. The global setting for DMZ-
type interfaces may be set to Deny so that all attempts to access
these servers are denied by default. The administrator may then
configure IP Filter rules to allow accesses of certain types.
11.2.3 Creating IP Filter Rules
To create an IP filter rule, you set various criteria that must be met in order
for the rule to be invoked. Use these instructions to add a new IP filter rule,
and refer to the examples in section 11.2.3.1 for assistance:
1. On the main IP Filter Configuration page, click the Add button.
The IP Filter Rule – Add page appears: