User's Guide

Chapter 16: Controlling Access to the ER-1000
TR0190 Rev. A1 103
Web GUI
The client isolation parameters can be set via the web interface on the “Firewall” tab on the
“Security” page (see Figure 48). By setting an interface’s client isolation parameter to ‘yes’,
client devices connecting to that interface will not be able to communicate with any other client
devices connected to the EL-500.
Figure 48. Connection-related firewall settings
Note that devices connected to different interfaces can only communicate with each other if
client-to-client isolation is disabled for both interfaces.
Client-to-client isolation is only enabled if the EL-500 firewall
(firewall.node.enable) is enabled (section 16.1).
16.4 Connection Tracking
The firewall keeps track of existing TCP connections. It is advisable to enable connection
tracking for public networks that can have large numbers of users. In particular, it is important
to enable connection tracking if your network is heavily loaded or if it has users running file