D-Link DIR-818LW User Manual - Page 89

Firewall Settings - vpn

Page 89 highlights

Section 3 - Configuration Firewall Settings A firewall protects your network from the outside world. The DIR-818LW offers a firewall-type functionality. The SPI feature helps prevent cyber attacks. There may be times you want a computer exposed to the outside world for certain types of applications. To expose a computer, you can enable DMZ. This option will expose the selected computer completely to the outside world. Enable SPI: Check the box to Enable SPI (Stateful Packet Inspection, also known as dynamic packet filtering). This helps prevent cyber attacks by tracking more state per session. It validates that the traffic passing through the session conforms to the protocol. Enable Anti-Spoof Check the box to Enable this feature, which will protect your Checking: network from certain kinds of "spoofing" attacks. Enable DMZ: If an application has trouble working from behind the router, you check the box to expose a single computer to the Internet and run the application on that computer. Note: Placing one computer in the DMZ may expose that computer to a variety of security risks. This option is only recommended as a last resort. DMZ IP Address: Specify the IP Address of the computer on the LAN that you want to allow unrestricted Internet access. If this computer obtains it's IP address automatically using DHCP, be sure to make a static reservation on the Setup > Network Settings page so that the IP address of the DMZ machine does not change. PPTP: Check the box to allow multiple machines on the LAN to connect to their corporate network using PPTP protocol. IPSec (VPN): Check the box to allow multiple VPN clients to connect to their corporate network using IPSec. Some VPN clients support traversal of IPSec through NAT. This Application Level Gateway (ALG) may interfere with the operation of such VPN clients. If you are having trouble connecting with your corporate network, try turning this ALG off. Please check with the system administrator of your corporate network to find out whether your VPN client supports NAT traversal. D-Link DIR-818LW User Manual 84

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227

84
D-Link DIR-818LW User Manual
Section 3 - Configuration
Check the box to
Enable
SPI (Stateful Packet Inspection, also
known as dynamic packet filtering). This helps prevent cyber
attacks by tracking more state per session. It validates that the
traffic passing through the session conforms to the protocol.
Check the box to
Enable
this feature, which will protect your
network from certain kinds of “spoofing” attacks.
If an application has trouble working from behind the router,
you check the box to expose a single computer to the Internet
and run the application on that computer.
Note:
Placing one computer in the DMZ may expose that
computer to a variety of security risks. This option is only
recommended as a last resort.
Specify the
IP Address
of the computer on the LAN that you
want to allow unrestricted Internet access. If this computer
obtains it’s IP address automatically using DHCP, be sure to
make a static reservation on the
Setup
>
Network Settings
page so that the IP address of the DMZ machine does not
change.
Check the box to allow multiple machines on the LAN to
connect to their corporate network using PPTP protocol.
Check the box to allow multiple VPN clients to connect to their corporate network using IPSec. Some VPN clients support traversal
of IPSec through NAT. This Application Level Gateway (ALG) may interfere with the operation of such VPN clients. If you are having
trouble connecting with your corporate network, try turning this ALG off. Please check with the system administrator of your
corporate network to find out whether your VPN client supports NAT traversal.
Enable SPI:
Enable Anti-Spoof
Checking:
Enable DMZ:
DMZ IP Address:
PPTP:
IPSec (VPN):
Firewall Settings
A firewall protects your network from the outside world. The DIR-818LW offers a firewall-type functionality. The SPI feature helps
prevent cyber attacks. There may be times you want a computer exposed to the outside world for certain types of applications.
To expose a computer, you can enable DMZ. This option will expose the selected computer completely to the outside world.