User manual ASUS RX3041H

[. . . ] RX3041H User's Manual Revision 1. 3 Aug. 19, 2004 ii Table of Contents 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 1. 1 1. 2 1. 3 Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 System Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Using this Document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 1. 3. 1 1. 3. 2 1. 3. 3 Notational conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Typographical conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Special messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2 Getting to Know the RX3041H. . . . . . . . . . . . . . . . . 3 2. 1 2. 2 2. 3 2. 4 Parts List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Rear Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Major Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 2. 4. 1 Firewall and NAT Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Address Sharing and Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 ACL (Access Control List) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Stateful Packet Inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Defense against DoS Attacks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Application Command Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Application Level Gateway (ALG) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 URL Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Log and Alerts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Remote Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2. 4. 1. 1 2. 4. 1. 2 2. 4. 1. 3 2. 4. 1. 4 2. 4. 1. 5 2. 4. 1. 6 2. 4. 1. 7 2. 4. 1. 8 2. 4. 1. 9 3 Quick Start Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 3. 1 Part 1 -- Connecting the Hardware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 3. 1. 1 3. 1. 2 3. 1. 3 3. 1. 4 3. 2 Step 1. Connect an ADSL or a cable modem. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Step 2. Connect computers or a LAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Step 3. [. . . ] For outbound ACL rules, only static, dynamic and overload NAT pool can be used. This option is available for outbound ACL rules only. Select this option to use the WAN interface IP address for the outbound traffic. Note that WAN IP must be configured prior to selecting this option. Three options are available: eth0, pppoe0 and pppoe1. Select eth0 if your WAN interface type is static or dynamic; pppoe0 if WAN interface is PPPoE0, and pppoe1 if WAN interface is PPPoE1. Interface (Outbound ACL only) Time Ranges Select a pre-configured time range during which the rule is active. Select "Always" to make the rule active at all times. Application Filtering This option allows you to select pre-configured FTP, HTTP, RPC and/or SMTP application filters from the drop-down list. Log Click on the "Enable" or "Disable" radio button to enable or disable logging for this ACL rule. 9. 4 Configuring Inbound ACL Rules Inbound ACL rules are used to control (allow or deny) access to the local network. 57 Chapter 9. Configuring Firewall/NAT Settings RX3041H User's Manual 9. 4. 1 Add an Inbound ACL Rule To add an inbound ACL rule, follow the instructions below: 1. Open the Inbound ACL Rule Configuration Page by clicking on the Firewall Inbound ACL menu. Select "Add New" from the "ID" drop-down list. Set desired action (Allow or Deny) from the "Action" drop-down list. Make changes to any or all of the following fields: Source/Destination IP, Source/Destination Port, Protocol, NAT, Time Ranges, Application Filtering, and Log. Please see Table 9. 1 for explanation of these fields. Figure 9. 7 illustrates how to create an ACL rule to allow inbound FTP service for any host on the Internet to access to FTP server in the local network w/ IP address 192. 168. 1. 123. Figure 9. 7. Assign a priority for this rule by selecting a number from the "Move to" drop-down list. Note that the number indicates the priority of the rule with 1 being the highest. Higher priority rules will be examined prior to the lower priority rules by the firewall. Click on the button to create the new ACL rule. You may verify the new ACL rule in the inbound access control list table displayed at the bottom half of the Inbound ACL configuration page as shown in Figure 9. 8. Figure 9. 8. Inbound ACL List 9. 4. 2 Modify an Inbound ACL Rule Inbound ACL To modify an inbound ACL rule, follow the instructions below: 1. [. . . ] Originally meant as a time duration, the TTL is usually represented instead as a maximum hop count; each router that receives a packet decrements this field by one. When the TTL reaches zero, the packet is discarded. protocol remote RIP RJ-45 routing rule SDNS SNMP subnet subnet mask TCP TCP/IP Telnet TFTP TTL 124 RX3041H User's Manual Appendix E. Glossary twisted pair The ordinary copper telephone wiring long used by telephone companies. It contains one or more wire pairs twisted together to reduce inductance and noise. [. . . ]