NetComm NB712 Network Router User Manual


 
106 NB712 / NB714 User Guide
YML829 Rev1
14.16.12 DMZ
To setup demilitarized zone, move the cursor “>>” to dmz and press enter.
>> active Trigger DMZ host function
address Configure virtual IP address and interface
You can enable the demilitarized zone via active command.
After enabling the DMZ, shift the cursor to address and press enter.
----------------------------------------------------------------------
Command: setup ip_share dmz address <ip> <1~10>
Message: Please input the following information.
Virtual IP address: 192.168.1.251
Active interface number (Enter for default) <1>: 1
----------------------------------------------------------------------
14.16.13 Firewall
The product supports advanced firewall. To setup the advanced firewall, you can use firewall to configure.
>> Level Configure firewall security level
pkt_filter Configure packet filter
dos_protection Configure DoS protection
There are three levels of firewall:
Level one, basic, only enables the NAT firewall and the remote management security. The NAT firewall will take
effect if NAT function is enabled. The remote management security is default to block any WAN side connection
to the device. Non-empty legal IP pool in ADMIN will block all remote management connection except those IPs
specified in the pool.
Level two, automatic, enables basic firewall security, all DoS protection, and the SPI filter function.
Level three, advanced, is an advanced level of firewall where the user can determine the security level for a
special purpose, environment and/or applications by configuring DoS protection and defining an extra packet filter
with higher priority than the default SPI filter. Note that, an improper filter policy may degrade the capability of the
firewall and/or even block the normal network traffic.
The firewall security level can configure via level command.