SMC Networks ELITECONNECT SMC2502W User Manual page 217

As a result, a location that uses this Guest group effectively shuts down port 6346.
Notice that stopping users from using the network in this way is a moving target,
as you will have to discover what ports are being abused, and close them one at a
time.
Note:
If you are truly concerned about your network being abused in this way, you should
start by allowing nothing, and then add more allows as your users demand more
services. This can also be achieved by setting up the Guest and User groups. Start by
deselecting all Allows for these groups, and one at a time, create an allow for the things
you will allow your users to access. HTTP, SSH, SMTP, and others.
In addition to opening up ports, you can also direct what addresses these ports can
connect to using the Allow Editor. For instance if you want to open up the mail
port, and know the mail server is on 192.168.2.248, then, using the Allow Editor,
only allow access to that address, as shown in
EliteConnect WLAN Security System User Manual
Figure C-42. Group Editor
Figure C-43.
C-49