User manual COMTREND CT-5071T

[. . . ] CT-5071T ADSL2+ Ethernet Router User's Manual Version A3. 1, May 15, 2007 261063-010 Warning Before servicing or disassembling this equipment, always disconnect all power and telephone lines from the device. Use an appropriate power supply and a UL Listed telephone line cord. Specification of the power supply is clearly stated in Appendix C Specifications. Preface This manual provides information to network administrators. It covers the installation, operation and applications of the ADSL2+ Ethernet router. The reader reading this manual is presumed to have a basic understanding of telecommunications. [. . . ] or User can enter the name of their choice. Enter the starting trigger port number (when you select custom application). When an application is selected the port ranges are automatically configured. Trigger Port End Enter the ending trigger port number (when you select custom application). When an application is selected the port ranges are automatically configured. Trigger Protocol Open Port Start User can select from: TCP, TCP/UDP or UDP. Enter the starting open port number (when you select custom application). When an application is selected the port ranges are automatically configured. Open Port End Enter the ending open port number (when you select custom application). When an application is selected the port ranges are automatically configured. Open Protocol User can select from: TCP, TCP/UDP or UDP. 54 6. 3. 3 DMZ Host The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer. Enter the computer's IP address and click "Apply" to activate the DMZ host. Clear the IP address field and click "Apply" to deactivate the DMZ host. 55 6. 3. 4 ALG SIP ALG is Application layer gateway. If the user has an IP phone(SIP) or VoIP gateway(SIP) behind the ADSL router, the SIP ALG can help VoIP packet passthrough the router (NAT enabled). Note: SIP (Session Initiation Protocol, RFC3261) is the protocol of choice for most VoIP (Voice over IP) phones to initiate communication. This ALG is only valid for SIP protocol running on UDP port 5060. 56 6. 4 Setup. Security To display the Security function, you need to enable the firewall feature in the WAN 6. 4. 1 IP Filtering IP filtering allows you to create a filter rule to identify outgoing/incoming IP traffic by specifying a new filter name and at least one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Click 'Save/Apply' to save and activate the filter. Outgoing Note: The default setting for all Outgoing traffic is Accepted. To add a filtering rule, simply click the Add button. The following screen will be displayed. 57 Filter Name Protocol Source IP address Source Subnet Mask Source Port (port or port:port) Destination IP address Destination Subnet Mask Destination port (port or port:port) Type a name for the filter rule. User can select from: TCP, TCP/UDP, UDP or ICMP. Enter destination port number. 58 Incoming Note: The default setting for all Incoming traffic is Blocked. To add a filtering rule, simply click the Add button. The following screen will be displayed. To configure the parameters, please reference Outgoing table above. 59 6. 4. 2 Parental Control Parental control: allows parents, schools, and libraries to set access times for Internet use. To add a parental control, simply click the Add button. The following screen will be displayed. Username: MAC: Mon, Tue, Wed, Thu, Fri, Sat, Sun: Start, Stop: Input Internet access user name Set the MAC address to access the Internet Set which days that will have block restrictions to Internet access Set Internet block start and stop time 60 6. 4. 3 MAC Filtering Mac Filtering is only available when Bridging PVC is configured. Each network device has a unique MAC address. You can block or forward the packets based on the MAC addresses. The MAC Filtering Setup screen allows setting up the MAC filtering policy and the MAC filtering rules. MAC Filtering is only effective on ATM PVCs configured in Bridge mode. [. . . ] WAN => LAN --> All Frames coming from WAN destined to LAN. LAN => WAN --> All Frames coming from LAN destined to WAN User needs to select the interface on which this rule is applied. Examples: 1. Global Policy: Forwarded Protocol Type: PPPoE Dest. MAC Addr: 00:12:34:56:78 Source MAC Addr: NA Frame Direction: LAN => WAN WAN Interface Selected: br_0_34/nas_0_34 Addition of this rule drops all PPPoE frames going from LAN-side to WAN-side with a Dest. [. . . ]