Access Control; Lan Clients - Asus AAM6010EV-T4 User Manual

In "Trusted mode" all the rules will be applied first, regardless of the setting of the TOS bits. After the rules
have been exhausted the existing TOS bit settings will be honored. The "Un-trusted" mode will match first
against all rules as in "Trusted" mode. The difference is that if there is no match then a default rule will be
used. The default rule will have an associated queuing priority - Low.
Note: If IP QoS is enabled and no rules are defined, a Default Rule is added which is hidden. The Default
Rule puts all the Traffic to be transmitted in the Low Priority Queue.
IP Filters
This firewall feature allows you to block network access based on a user's computer IP address. You can
use this page to block specific traffic (for example block web access) or any traffic from a computer on
your local network. To configure an IP Filter rule select the computers' IP address and add the
corresponding firewall traffic definition from the Firewall Policy Database. If the traffic type is set to
"Any" all network traffic from that computer will be blocked.
4.6.4

Access Control

Access control can also be called port blocking. Specific types of traffic that is destined to a selected LAN
IP address can be blocked. To enable any of the Access Control features, from the Home screen, click
Advanced and under Advanced, select Access Control. A page similar to the port-forwarding page appears.
Similar to the port-forwarding page, an IP address can be added to a rule. All Access Control rules have
precedence over rules that were added via the port-forwarding page.
The apply button will temporarily save this connection. To make the change permanent you need to click
on Tools (at the top of the page) and select System Commands. At the system commands page, click on
Save All.
4.6.5

LAN clients

To add a LAN client, from the Home screen, click Advanced and under Advanced, select LAN Clients. If
DHCP is used, all DHCP clients are automatically assigned. If a fixed IP address server is on the LAN and
you want this server to be visible via the WAN, you must add its IP address. Once the IP address has been
added to you can apply Port Forwarding and Access Control rules to this IP address.
Figure 15 (IP QoS)
27
AAM6010EV-T4 User Manual
27