Multitech RF830 Network Router User Manual


 
Chapter 5 – Configuration Using Web Management Software
Multi-Tech Systems, Inc. RouteFinder SOHO RF820/RF820-AP & RF830/RF830-AP User Guide (S000399E) 59
Packet Filters > ICMP
Packet Filter > ICMP
ICMP (Internet Control Message Protocol) is used to test the network connections and the functionality of the
RouteFinder. It is also used for diagnostic purposes.
ICMP-on-Firewall and ICMP Forwarding always apply to all IP addresses (Any). When these are enabled, all
IP hosts can PING the RouteFinder (ICMP-on-Firewall) or the network behind it (ICMP Forwarding). Unique
IP addresses can then no longer be ruled out with packet filter rules. If the ICMP settings are disabled,
separate IP hosts and networks can be allowed to send ICMP packets through the RouteFinder firewall by
using appropriate user defined packet filter rules.
Screen Notes: The RF830/RF830-AP screen includes a field for ICMP on WAN2.
With the AP build, an additional screen option for ICMP on WLAN displays.
ICMP Forwarding
Check the ICMP Forward checkbox to enable the forwarding of ICMP packets through the firewall into the
local network and all connected DMZs. The default is Enabled.
ICMP on Firewall
ICMP on LAN
Check the ICMP on LAN checkbox to enable the forwarding of ICMP packets through the firewall into
the local network and all connected DMZs. The default is Enabled.
ICMP on WAN1
Check the ICMP on WAN1 checkbox to enable the transfer of ICMP packets on the WAN1 interface.
Packet Filter > Packet Filter Log
Use this section to enable or disable Packet Filter Logs.
All Access Requests Traversing Firewall Violating Security Policy
Check this box to enable the logging of all access requests from private (LAN) and public (WAN) network
clients to traverse the RouteFinder that violate the configured security policy.
All Access Requests to Firewall Violating Security Policy
Check this box to enable the logging of all access requests from private (LAN) and public (WAN) network
clients to send traffic to the RouteFinder itself that violate the configured security policy.
Log Access to Administrative Access Port
Check this box to enable the logging of all access requests from private (LAN) and public (WAN) network
clients to send traffic to the RouteFinder itself on the administrative access port.