Справочник Пользователя для Interepoch Technology Inc. IWE3200

 

 

61

 

 

Set the rules with great care since incorrect rules would make the Router inaccessible. 
The last resort to restore the Router to service may be resetting its configuration to fac-
tory-set values by pressing the Default switch on the housing of the Router. 

 

 

Fig. 100. VALN settings. 

VLAN (Virtual Local Area Network) settings are for traffic isolation. When the Block wire-
less-to-Ethernet-LAN traffic check box is selected, the Router does not forward packets between the 
wireless network interface and the Ethernet LAN interface—traffic is allowed only between the 
Ethernet WAN interface and the wireless network interface. 

 

Fig. 101. Packet filters and firewall settings. 

 
SPI analyzes incoming and outgoing packets based on a set of criteria for abnormal content. Therefore, 
SPI can detect hacker attacks, and can summarily reject an attack if the packet fits a suspicious profile. 
To enable SPI, select the Enable Stateful Packet Inspection (SPI) check box. 

Some DoS (Denial of Service) attacks are based on sending invalid ICMP request packets to hosts. 
The Router can be set to not accept any ICMP requests on the Ethernet WAN interface to defense 
against attacks of this kind. Enable this capability by selecting the Block ICMP PING from Internet 
check box. 

SPI can detect hacker attacks, including IP-Spoofing,  Zero IP Length,  Land, Smurf,  Fraggle,  Tear-
drop, Ping of Death, Syn-Flood, and X-Tree. Because some of the Router’s CPU resources are spent 
in checking packets for these security features, you may feel networking performance degradation if 
the security functions are enabled. 

 

Fig. 102. URL filters settings.