User manual

Dynamix UM-SB Series User Manual V0.06
135
firewall will take effect if NAT function is enabled. The remote management security is default to
block any WAN side connection to the device. Non-empty legal IP pool in ADMIN will block all
remote management connection except those IPs specified in the pool.
Level two, automatic, enables basic firewall security and all DoS protection.
Level three, advanced, is an advanced level of firewall where user can determine the security
level for special purpose, environment, and applications by configuring the DoS protection and
defining an extra packet filter with higher priority . Note that, an improper filter policy may degrade
the capability of the firewall and/or even block the normal network traffic.
The firewall security level can configure via level command.
Firewall Security Level:
Level
□
Basic
□
Automatic
□
Advanced
5
5
.
.
1
1
2
2
.
.
1
1
0
0
.
.
2
2
P
P
a
a
c
c
k
k
e
e
t
t
F
F
i
i
l
l
t
t
e
e
r
r
i
i
n
n
g
g
Packet filtering function can be configured by pkt_filter command. Move the cursor to pkt_filter
and press enter.
>>
active
Tigger packet filtering function
drop_flag
Drop fragment packets
add
Add packet filtering rule
delete
Delete packet filtering rule
modify
Modify packet filtering rule
exchange
Exchange the filtering rule
list
Show packet filtering table
To enable the packet filtering function, you can use active command.
To enable the drop fragmented packets, you can use drop_frag command.
Function enable:
Packet filtering function
□Disable □Enable
Drop fragmented packet
□Disable □Enable
Add the packet filtering rule via add command.
You can set up maximum 32 numbers packet filtering rules, Anytime you can modify and exchange
their rules by using modify and exchange command.
>>
protocol
Configure protocol type
direction
Configure direction mode
src_ip
Configure source IP parameter
dest_ip
Configure destination IP parameter
port
Configure port parameter (TCP and UDP only)
tcp_flag
Configure TCP flag (TCP only)