Multi-Tech Systems RF660 User Manual

Page of 189
Chapter 6 – RouteFinder Software  
Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/600VPN User Guide (PN S000323D) 
103 
Packet Filters > ICMP 
Packet Filters > ICMP 
ICMP (Internet Control Message Protocol) is necessary to test network connections and to test functionality of your firewall. It 
is also used for diagnostic purposes.    
ICMP-forwarding and ICMP-on-firewall always apply to all IP addresses (“Any”). When these are enabled, all IPs can ping 
the firewall (ICMP-on-firewall) or the network behind it (ICMP-forwarding). Separate IP addresses can then no longer be 
ruled out with packet filter rules. If the ICMP settings are disabled, separate IPs and networks can be allowed to send ICMP 
packets through the firewall by using appropriate packet filter rules. 
 
 
ICMP Forwarding  
Check the ICMP Forward checkbox to enable the forwarding of ICMP packets through the RouteFinder into the 
local network and all connected DMZs. In this way you select whether an ICMP packet should be dropped or 
passed through to the local network and all connected DMZs
.
 
If ICMP forward is enabled, ICMP packets go through all connected networks.  Another use of ICMP 
forwarding is to allow ICMP packets to be forwarded to individual networks (set in Packet Filter > Rules). For 
this, ICMP forward in Packet Filter > ICMP must be disabled. 
The status is activated by clicking the Save button. 
ICMP on Firewall  
Check the ICMP on LAN, ICMP on WAN, and/or ICMP on DMS firewall checkbox to enable the direct sending 
and receiving of ICMP packets by the RouteFinder. Then click the Save button.
 
Note: 
To be able to use the tools Trace Route and Ping, the function ICMP on firewall must be enabled. After 
a successful startup of the RouteFinder, it is recommended that you disable this rule so that the RouteFinder 
cannot be pinged anymore.