This chapter shows you how to configure your ZyAIR firewall. This chapter is not applicable to the
12.1 Access Methods
The web configurator is, by far, the most comprehensive firewall configuration tool your ZyAIR has to offer.
For this reason, it is recommended that you configure your firewall using the web configurator. SMT screens
allow you to activate the firewall.
12.2 Firewall Policies Overview
Firewall rules are grouped based on the direction of travel of packets to which they apply:
•
LAN to LAN/ZyAIR
•
LAN to WAN
By default, the ZyAIR's stateful packet inspection allows packets traveling in the following directions:
•
LAN to LAN/ZyAIR
This allows computers on the LAN to manage the ZyAIR and communicate between networks or
subnets connected to the LAN interface.
•
LAN to WAN
By default, the ZyAIR's stateful packet inspection blocks packets traveling in the following directions:
•
WAN to LAN
•
WAN to WAN/ZyAIR
This prevents computers on the WAN from using the ZyAIR as a gateway to communicate with
other computers on the WAN and/or managing the ZyAIR.
You may define additional rules and sets or modify existing ones but please exercise extreme caution in
doing so.
Firewall Screens
ZyAIR Wireless Gateway Series User's Guide
•
WAN to LAN
•
WAN to WAN/ZyAIR
Chapter 12
Firewall Screens
ZyAIR B-2000.
12-1