System Security - NetComm Telus Smart Hub User Manual

www.netcommlimited.com
5.4.3 DMZ
If you have a client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall,
then you can open up the firewall restrictions to allow unrestricted two-way Internet access by defining a DMZ Host.
The DMZ function allows you to re-direct all packets going to your WAN port IP address, to a particular IP address
in your LAN. The difference between the virtual server and the DMZ function is that the virtual server re-directs a
particular service/Internet application (e.g. FTP, websites) to a particular LAN client/server, whereas DMZ re-directs
all packets (regardless of services) going to your WAN IP address to a particular LAN client/server. The Smart
Hub's DMZ settings can be viewed and configured by selecting the "DMZ" menu item under the "Firewall" tab in
the Advanced View of the Management Console.
DMZ Settings: Enable/disable DMZ.
DMZ IP Address: Fill in the IP address of a particular host in your LAN Network that will receive all the packets
originally going to the WAN port/Public IP address of your Smart Hub.
Click 'Apply' to save the above configurations.
5.4.4

System Security

This page allows you to improve the security of your Smart Hub through the SPI (Stateful Packet Inspection) firewall
and remote access settings. The Smart Hub's system security settings can be viewed and configured by selecting
the "System Security" menu item under the "Firewall" tab in the Advanced View of the Management Console.
Remote Management (via WAN): Enable/Disable remote management on the WAN interface.
Deny ping from WAN interface: Select Enable to deny ICMP packets received on the WAN interface. Otherwise,
select "Disable" to allow ICMP packets received on the WAN interface.
SPI Firewall: Enable/Disable the SPI (Stateful Packet Inspection) firewall to improve the security of your Smart Hub.
Click 'Apply' to save the settings.
Telus smart Hub
3G8WV-TS
35