Security Policy - Huawei ADSL2+Broadband Router Aolynk DR814 User Manual

User Manual
Aolynk DR811/DR814 ADSL2+Broadband Router
Where item0 is the virtual interface added at the last step.
Then, enter the Port Filters page of external-dmz (refer to 4.9 Security Policy),
l
configure to ensure that users under the external interface can access the Internet
services the DMZ zone specifies such as http, ftp, telnet, and so on. Meanwhile,
configure port filtering policies for external-internal to disable users under the
external interface from accessing host services under the internal interface.
Finally, configure to allow DMZ hosts to access DMZ zone. Make sure the IP
l
address of the DMZ host is in the same segment as that of the above configured
virtual interface (for example, configure the IP address as 172.16.1.100, the mask
as 255.255.0.0), enable the corresponding Internet service, and then connect the
host to the LAN port of the router, and configure the corresponding virtual server.
As such, DMZ is completely and securely configured.

4.9 Security Policy

A policy is the collective term for the rules that apply to incoming and outgoing traffic
between two interface types. Firewall must be enabled before you can create policies.
Click Security in the Main menu and choose the Policy tab in the Main Frame to open
the Security Policy Configuration page.
Figure 4-20 Security policy configuration
This page allows you to:
Edit a security policy present in the Current Security Policies list.
l
To edit an existing security policy, click the
Filter to configure the port filter rules, and/or click the
web page Host Validators to configure the host validator rules.
label to open the web page Port
30
4 Web-based Management
label to open the