Specifications

3-12 WS2000 Wireless Switch System Reference Guide
Src. Ports (Source Ports)—The source port range determines which ports the firewall rule applies to
on the source IP address. To configure the source port range, click the field and a new window will pop
up to enter the starting and ending ports in the range. For rules where only a single port is necessary,
enter the same port in the start and end port fields.
Dst. Ports (Destination Ports)—The destination port range determines which ports the firewall rule
applies to on the destination IP address. To configure the destination port range, click the field and a new
window will pop up to enter the starting and ending ports in the range. For rules where only a single port
is necessary, enter the same port in the start and end port fields.
Rev. NAT (Reverse NAT) (inbound) / NAT (outbound)—To enable NAT or reverse NAT for a firewall
rule, enter this value.
For Inbound, click the Rev. NAT field and a new window will pop up to enter the IP address and
translation port for the reverse NAT host.
For the Outbound direction, select the WAN (WAN1, WAN2, and so on) from the NAT field menu that is
associated with the appropriate NAT definition. (See Configuring Network Address Translation (NAT)).
Action—Choose Allow or Deny from the pull-down menu in this field to determine whether the
firewall rule is to allow or deny the specified rule.
Log - Choose disable or enable from the pull-down menu in this field. When enabled, the following is the
behavior.
A log entry is created every time a packet that matches this rule is denied by the action “Deny”.
A log entry is created once per session for packets that match this rule is allowed access by the
action “Allow”.
3.5 Bridge Configuration
Bridges are data link layer devices. They operate at the Layer 2 of the OSI reference model. Bridges are
generally used to connect different segments of the same network.
To configure Bridging, select Network Configuration --> LAN --> <subnet> and select the Bridging tab.
The Bridge Config (Bridge Configuration) screen appears.
GRE General Routing Encapsulation (GRE) supports VPNs across the Internet. GRE is a mechanism for
encapsulating network layer protocols over any other network layer protocol. Such encapsulation
allows routing of IP packets between private IP networks across an Internet that uses globally
assigned IP addresses.
Transport Description