Huawei DR814Q Network Router User Manual


 
User Manual
Aolynk DR814Q ADSL2+ Broadband Router 5 Advanced Configuration
45
z low: Indicates that the external and internal users have more access rights than
“medium”.
z default: Indicates that the internal users can access all the Internet services, while
the external users are prevented to access the internal network.
III. Configure port filtering policies
You can configure port filtering policies manually to meet the actual demands.
Table 5-3 Description of port filtering policy setting items
Item Description
Description
Type in a description of the port filtering policy to identify
it.
Address
Type in the source IP address. The default address
0.0.0.0 indicates any node on the network.
Source
Mask
Type in the subnet mask of the source. The default mask
0.0.0.0 indicates any node on the network.
Address
Type in the destination IP address. The default address
0.0.0.0 indicates any node on the network and is usually
adopted.
Destination
Mask
Type in the subnet mask of the destination. The default
mask 0.0.0.0 indicates any node on the network and is
usually adopted.
IP Protocol
Select a protocol type (TCP, UDP or ICMP) from the
drop-down list and apply the filtering policy to the packets
of this type.
Destination Port
Range
Type in the port range of the destination. Generally, this
parameter needs to be set. For example, to control Web
services, type in the corresponding port number 80. To
control FTP services, type in the port number 21.
Inbound
The direction of inbound data. Select the Allow option to
permit external hosts to access internal hosts. Select the
Block option to forbid external hosts to access internal
hosts.
Outbound
The direction of outbound data. Select the Allow option to
permit internal hosts to access external hosts. Select the
Block option to forbid internal hosts to access external
hosts.
Click <Add> after the configuration. This policy will be added to the list of port filtering
policies. You can click <Delete> to delete the corresponding policy.
Example: External hosts are not allowed to ping the WAN port of the DR814Q when the
security level is set to “low”. To allow the internal hosts and external hosts to ping each
other, you can perform the configuration as shown in Figure 5-8 and Figure 5-9.