ZyXEL Communications Corporation AMG1302 Manuel D’Utilisation

 Chapter 10 Firewalls

AMG1302-T10A User’s Guide

This section provides some technical background information about the topics covered in this 

chapter.

Your customized rules take precedence and override the Device’s default settings. The Device 

checks the source IP address, destination IP address and IP protocol type of network traffic against 

the firewall rules (in the order you list them). When the traffic matches a rule, the Device takes the 

action specified in the rule. 

Firewall rules are grouped based on the direction of travel of packets to which they apply: 

Note: The LAN includes both the LAN port and the WLAN.

By default, the Device’s stateful packet inspection allows packets traveling in the following 

directions:

• LAN  to  Router 

These rules specify which computers on the LAN can manage the Device (remote management). 

Note: You can also configure the remote management settings to allow only a specific 

computer to manage the Device.

• LAN  to  WAN

These rules specify which computers on the LAN can access which computers or services on the 

WAN.

By default, the Device’s stateful packet inspection drops packets traveling in the following 

directions:

• WAN  to LAN

These rules specify which computers on the WAN can access which computers or services on the 

LAN. 

Note: You also need to configure NAT port forwarding (or full featured NAT address 

mapping rules) to allow computers on the WAN to access devices on the LAN.

• WAN  to Router 

By default the Device stops computers on the WAN from managing the Device. You could 

configure one of these rules to allow a WAN computer to manage the Device.

Note: You also need to configure the remote management settings to allow a WAN 

computer to manage the Device.

You may define additional rules and sets or modify existing ones but please exercise extreme 

caution in doing so.

• LAN  to  Router

• WAN  to LAN

• LAN to WAN

• WAN to Router