Firewall - Dahua VTA2302A Quick Start Manual

Parameter
IP Address
Subnet Mask
Default Gateway
MAC Address
Preferred DNS
Alternate DNS
Click Save.

3.5.2 Firewall

You can configure network access, PING prohibited, and anti half connection to strengthen the
security of the network and data.
Network Access: Restrict access by setting black list and white list.

White List: Only if the IP or MAC address of the user is in the white list, can the
Terminal be accessed. If a port is also set, the user can only access the specified port.
Black List: If the IP or MAC address of the user is in the black list, the Terminal cannot
be accessed. If a port is also set, the user cannot access the specified port.
 PING Prohibited: If the function is enabled, the Terminal will not respond ping request.
 Anti Half Connection: If the function is enabled, the Terminal can provide services
normally when there is half connection attack.
You cannot add the IP address or MAC address of the Terminal to the white list or black

list.
When adding MAC address, you cannot set the port.

 MAC address verification takes effect only when the IP address of the Terminal and PC of
the user are in the same LAN.
 When the Terminal is accessed through WAN, the system can only verify the MAC address
of the router.
This section takes setting network access as an example.
Select Network > Firewall on the web interface.
Select Network Access as the Type, and then select the Enable check box.
Table 3-5 TCP/IP parameter description
Description
Enter the IP address, subnet mask, and default gateway you planned.
The IP address and default gateway must be in the same network
segment.
The MAC (Media Access Control) address of the Terminal.
The IP address of the DNS server.
Alternate IP address of the DNS server.
18