Cisco Aironet 600 Series User Manual page 25

Chapter 2 Access Point GUI
LAN Access Client
The LAN Access Client set of filters (see
unblocking of packets based on protocol, port, and IP range. This configuration also allows LAN devices
to access, through the OEAP, the selected applications and services over the Internet. A maximum of 10
such filters are allowed. You need to specify the protocol (TCP/UDP), LAN client IP range and
destination port range to configure each filters.
Forwarding
The Port Forwards settings (see
from WAN port to Local LAN clients and back. A maximum of 10 Port Forwards can be set, but the
ranges should not overlap and should be of the same size. Every rule takes protocol (TCP/UDP), WAN
port range, Local LAN client IP (where traffic will be forwarded), and LAN port range as parameters.
Figure 2-10 Firewall–Forwarding Settings Page
DMZ
The DMZ feature allows one network computer connected to a local LAN or WLAN to be exposed to
the Internet for using special-purpose services such as Internet gaming. The DMZ feature forwards all
the ports terminating on a WAN IP (set as the DMZ IP Address) at the same time to one PC.
The DMZ feature, if enabled, will forward all incoming WAN packets to the LAN machine, except the
CAPWAP control/data and packets which are destined to any ports and which have a port forwarding
rule. The DMZ feature is not applicable to corporate networks such as Remote-LAN and Corp WLAN.
However, the Port Forwards feature is more secure, compared to DMZ feature because the former only
opens the ports you want to have opened, while DMZ opens all the ports of one computer, exposing the
computer to the Internet/WAN.
OL-29882-03
Figure 2-9) provide a more fine grained but controlled
Figure 2-10) allow you to configure port forwarding rules for packets
Cisco Aironet 600 Series OfficeExtend Access Point User Guide
Configuration Page
2-11