Dos - ZyXEL Communications LTE Series User Manual

Table 48 Security > Firewall > Access Control > Add New ACL Rule (continued)
L ABEL
IP Type
Select Service
Protocol
Custom Source Port
Custom Destination
Port
TCP Flag
Policy
Direction
Enable Rate Limit
Scheduler Rules
packet(s) per (1-512)
Add New Rule
OK
Cancel
12.6 Do S
DoS (Denial of Service) attacks can flood your Internet connection with invalid packets and connection
requests, using so much bandwidth and so many resources that Internet access becomes unavailable.
Use the
Do S
Click
Se c urity > Fire wa ll > Do S
Security > Firewall > DoS
Fig ure 99
Chapter 12 Firewall
DESC RIPT IO N
Select between
designed to enhance IP address size and features. The increase in
128 bits (from the 32-bit
Device can use
rapid deployment (6RD).
IPv6
Select a service from the
Select the protocol (
packets for which you want to apply the rule.
This is a single port number or the starting port number of a range that defines your rule.
This is a single port number or the ending port number of a range that defines your rule.
Select the TCP Flag (SYN, ACK, URG, PSH, RST, FIN).
Use the drop-down list box to select whether to discard (
destination-unreachable message to the sender (
( ) packets that match this rule.
Ac c e pt
Select
WAN to L AN
apply the rule to traffic from LAN to WAN. Select
from WAN to router. Select
Click to enable (switch turns blue) the setting of maximum number of packets per
maximum number of minute/second to limit the throughput of traffic that matches this
rule. If not, the next item will be disabled.
Enter the maximum number of
Select a schedule rule for this ACL rule from the drop-down list box. You can configure a
new schedule rule by clicking
Click this to save your changes.
Click this to exit this screen without saving.
screen to activate protection against DoS attacks.
to display the following screen.
LTE Series User's Guide
or . Compared to
IPv4 IPv6 IPv4
address) allows up to 3.4 x 1038 IP addresses. The Zyxel
IPv4
/ dual stack to connect to
IPv4 IPv6
box.
Se le c t Se rvic e
, , , ,
AL L T C P/ UDP T C P UDP
to apply the rule to traffic from WAN to LAN. Select
to apply the rule to traffic from LAN to router.
L AN to Ro ute r
pa c ke ts (1- 512) pe r m inute
Add Ne w Rule
133
, (Internet Protocol version 6), is
IPv6
address size to
IPv6
and networks, and supports
IPv4 IPv6
, or ) used to transport the
IC MP IC MPv6
), deny and send an ICMP
Dro p
), or allow the passage of
Re je c t
L AN to WAN
to apply the rule to traffic
WAN to Ro ute r
/ .
se c o nd
.
to