Vlan; Firewall - SMC Networks EliteConnect SMCWHSG44-G User Manual

To set a rule for packet filtering:
1. Specify the protocol type, source IP address, source IP mask, destination
IP address, destination IP mask, and destination port for the rule. Then
specify in the Action setting how to deal with a packet that meets the rule.
2. Select the corresponding Enabled check box.
NOTE: Set the rules with great care since incorrect rules would make the
Router inaccessible. The last resort to restore the Router to service may be
resetting its configuration to factory-set values by pressing the reset button
on the back of the Router.

2.8.1.2. VLAN

VLAN (Virtual Local Area Network) settings are for traffic isolation. When
the Block wireless-to-Ethernet-LAN traffic check box is selected, the Router
does not forward packets between the wireless network interface and the
Ethernet LAN interface-traffic is allowed only between the Ethernet WAN
interface and the wireless network interface.

2.8.1.3. Firewall

SPI analyzes incoming and outgoing packets based on a set of criteria for
abnormal content. Therefore, SPI can detect hacker attacks, and can sum-
marily reject an attack if the packet fits a suspicious profile. To enable SPI,
select the Enable Stateful Packet Inspection (SPI) check box.
Some DoS (Denial of Service) attacks are based on sending invalid ICMP
request packets to hosts. The Router can be set to not accept any ICMP
requests on the Ethernet WAN interface to defend against attacks of this
kind. Enable this capability by selecting the Block ICMP PING from Internet
check box.
NOTE: SPI can detect hacker attacks, including IP-Spoofing, Zero IP Length,
Land, Smurf, Fraggle, Teardrop, Ping of Death, Syn-Flood, and X-Tree.
NOTE: Because some of the Router's CPU resources are spent in checking
packets for these security features, you may notice network performance
degradation if the security functions are enabled.
Fig. 101. VALN Settings.
Fig. 102. Packet Filters and Firewall Settings.
79