MB Connect Line mbNET Series Manual page 155

minimum Security
All incoming Packages (Data from Internet) are accepted.
All outgoing Packages (Data from LAN) are accepted.
With this setting, all incoming and outgoing data traffic is allowed.
Firewall off
All incoming Packages (Data from Internet and WAN Ethernet*) are accepted.
All outgoing Packages (Data from LAN) are accepted.
Routing between all interfaces is on
With this setting, all incoming and outgoing data traffic is allowed.
Furthermore, all entered firewall rules are deactivated and routing between WAN <> LAN is active.
ADVICE: The variants "minimum Security" and "Firewall off" should be selected only briefly and for test
purposes or during initial configuration, if you want to ensure that a configured rule is not to be
accessed.
The integrity of your mbNET and the devices connected to it is threatened when selecting one of
these two variants!
SNAT
This function transparently passes on the incoming data traffic from Internet or VPN connections to the LAN. In other
words, all data packets going to the LAN are assigned the IP address of the router as the sender address. This means
that none of the LAN subscribers need the router as a "gateway". This is a considerable advantage when integrating
remote maintenance into existing network structures as it means that these structures do not need to be changed.
If this checkbox is activated, incoming traffic from LAN participants is transparently forwarded to the WAN network.
That that all data packets sent to the WAN receive the sender address as the WAN IP address of the router.
All data traffic from inside to outside and external access is possible!
* For devices without a WAN Ethernet interface, this is only "Data from Internet".
Page 155 of 237
Version: 5.1.6 – June 4
th
, 2018