Huawei Aolynk DR811 User Manual

User Manual
Aolynk DR811/DR814 ADSL2+Broadband Router

4 Web-based Management

Where item0 is the virtual interface added at the last step.

Then, enter the Port Filters page of external-dmz (refer to 4.9 Security Policy),

configure to ensure that users under the external interface can access the Internet

services the DMZ zone specifies such as http, ftp, telnet, and so on. Meanwhile,

configure port filtering policies for external-internal to disable users under the

external interface from accessing host services under the internal interface.

Finally, configure to allow DMZ hosts to access DMZ zone. Make sure the IP

address of the DMZ host is in the same segment as that of the above configured

virtual interface (for example, configure the IP address as 172.16.1.100, the mask

as 255.255.0.0), enable the corresponding Internet service, and then connect the

host to the LAN port of the router, and configure the corresponding virtual server.

As such, DMZ is completely and securely configured.

4.9 Security Policy

A policy is the collective term for the rules that apply to incoming and outgoing traffic

between two interface types. Firewall must be enabled before you can create policies.

Click Security in the Main menu and choose the Policy tab in the Main Frame to open

the Security Policy Configuration page.

Figure 4-20 Security policy configuration

This page allows you to:

Edit a security policy present in the Current Security Policies list.

To edit an existing security policy, click the

label to open the web page Port

Filter to configure the port filter rules, and/or click the

label to open the

web page Host Validators to configure the host validator rules.