Netgear DM111PSPv2 DM111PSPv2 User Manual - Page 36

Outbound Rules (Service Blocking), Inbound Rule Example: Allowing Video Conferencing

Page 36 highlights

Broadband ADSL2+ Modem DM111PSPv2 Inbound Rule Example: Allowing Video Conferencing Create an inbound rule to allow incoming video conferencing to be initiated from a restricted range of outside IP addresses, such as from a branch office. In the following figure, CU-SeeMe connections are allowed from a specified range of external IP addresses only. In this case, logging of any incoming CU-SeeMe requests that do not match the allowed settings is always allowed. Figure 8. Allow inbound video conferencing Considerations for Inbound Rules • If your external IP address is assigned dynamically by your ISP, the IP address might change periodically as the DHCP lease expires. Consider using the Dynamic DNS screen described in Dynamic DNS on page 56 so that external users can always find your network. • If the IP address of the local server computer is assigned by DHCP, it might change when the computer is rebooted. To avoid this, use the Reserved IP address feature in the LAN Setup screen to keep the computer's IP address constant. • Local computers are required to access the local server using the computer's local LAN address (192.168.0.11 in the example shown in Figure 8, Allow inbound video conferencing). Attempts by local computers to access the server using the external WAN IP address fail. Outbound Rules (Service Blocking) The modem lets you block computers on your local network from using certain Internet services. This is called service blocking or port filtering. You can define an outbound rule to block Internet access from a local computer based on local computer, Internet site being contacted, time of day, and type of service being requested. Security Settings 36

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82

Security Settings
36
Broadband ADSL2+ Modem DM111PSPv2
Inbound Rule Example: Allowing Video Conferencing
Create an inbound rule to allow incoming video conferencing to be initiated from a restricted
range of outside IP addresses, such as from a branch office. In the following figure,
CU-SeeMe connections are allowed from a specified range of external IP addresses only. In
this case, logging of any incoming CU-SeeMe requests that do not match the allowed
settings is always allowed.
Figure 8. Allow inbound video conferencing
Considerations for Inbound Rules
If your external IP address is assigned dynamically by your ISP, the IP address might
change periodically as the DHCP lease expires. Consider using the Dynamic DNS screen
described in
Dynamic DNS
on page
56 so that external users can always find your
network.
If the IP address of the local server computer is assigned by DHCP, it might change when
the computer is rebooted. To avoid this, use the Reserved IP address feature in the LAN
Setup screen to keep the computer’s IP address constant.
Local computers are required to access the local server using the computer’s local LAN
address (192.168.0.11 in the example shown in
Figure
8, Allow inbound video
conferencing
). Attempts by local computers to access the server using the external WAN
IP address fail.
Outbound Rules (Service Blocking)
The modem lets you block computers on your local network from using certain Internet
services. This is called service blocking or port filtering. You can define an outbound rule to
block Internet access from a local computer based on local computer, Internet site being
contacted, time of day, and type of service being requested.