Firewall Advanced Settings; General Settings; Snat; Table 39: Firewall-General Settings - Grandstream Networks GWN7000 User Manual

Firewall Advanced Settings

Firewall Advanced Settings page provides the ability to setup input/output policies for each WAN interface
and LAN groups; as well as setting configuration for Static and Dynamic NAT.

General Settings

Click on next to a WAN interface or Network group to edit its input and output policies.
Refer to below table for general settings options:
Input Policy
Output Policy
IP Masquerading
MSS Clamping
Log Dropped and Reject
Traffic to Syslog
Limit for Dropped and
Rejected Traffic

SNAT

Following actions are available for SNAT.
•
To add new SNAT entry, click on
•
To edit a SNAT entry, click on
•
To delete a SNAT rule, click on
Refer to below table when creating or editing an SNAT entry:
Name
Enabled

Table 39: Firewall-General Settings

Select which action to apply to all incoming traffic to this interface/LAN
group, 3 actions are available: Accept, Reject and Drop.
Select which action to apply to all outgoing traffic from this interface/LAN
group, 3 actions are available: Accept, Reject and Drop.
Check to enable IP Masquerading, this will allow internal computers with
no known address outside their network, to communicate to the outside.
It allows one machine to act on behalf of other machines.
Check to enable MSS Clamping.
fragmentation when the MTU value on the communication path is lower
than the MSS value.
Check to send all rejected and dropped traffic logs to configured Syslog
Server.
Specify the limit for dropped and reject traffic. The value format is N/unit,
where N is a digit number, and unit can either be in second, minute, hour
or day.
.
.
.

Table 40: SNAT

Specify a name for the SNAT entry
Check to enable this SNAT entry.
GWN7000 User Manual
Version 1.0.6.28
This will provide a method to prevent
P a g e |
116