The General Screen - ZyXEL Communications PMG5318-B20A User Manual

Chapter 15 Firewall

15.2 The General Screen

Use this screen to enable firewall and set the default action that the firewall takes on packets
depending on packet direction. Click Security > Firewall to display the following screen.
Note: When configuring the firewall, WAN refers to traffic passing through the WAN
interface set as the default gateway. To check which interface this is click Network
> WAN > Default Gateway.
Figure 67 Security > Firewall
The following table describes the labels in this screen.
Table 48 Security > Firewall
LABEL
Active Firewall
Reject to response the
request for
unauthorized services
Packet Direction
Default Action
Apply
Cancel
130
DESCRIPTION
Select this to enable the firewall feature.
If you select this, the GPON Device will not send an ICMP response packet when
unsupported services are requested. Therefore, an outside user will not be able to
determine the ONT exists.
This is the direction of travel of packets (LAN to WAN, WAN to LAN).
Firewall rules are grouped based on the direction of travel of packets to which they
apply. For example, LAN to WAN means packets traveling from a computer/subnet
on the LAN to the WAN.
Use the drop-down list boxes to select the default action that the firewall is to take
on packets that are traveling in the selected direction and do not match any of the
firewall rules.
Select Drop to silently discard the packets without sending a TCP reset packet or an
ICMP destination-unreachable message to the sender.
Select Reject to deny the packets and send a TCP reset packet (for a TCP packet) or
an ICMP destination-unreachable message (for a UDP packet) to the sender.
Select Permit to allow the passage of the packets.
Click this to save your changes.
Click this to restore your previously saved settings.
PMG5318-B20A User's Guide