Gateway 400 User Guide | Configuration
36
5.7.1.5
Zone Configuration
Here you will find an overview of pre-configured zones. A zone can never contain more than one in-
terface. The “policy” of each zone describes how to handle data packets for which no additional
rules exist. NAT (Network Address Translation) allows you replace the IP address of your PC with the
IP address of the Gateway 400.
ICMPv6 Filter
Here you can configure the ICMPv6 Filter settings that allow or deny incoming or outgoing ICMPv6
packets. The following filters can be selected:
destination-unreachable
,
packet-too-big
,
parameter-problem
,
time-exceeded
,
echo-request
and
echo-reply
Edit entry
To edit a zone, click on the pencil icon
at the end of the overview. This will open the
Edit entry
screen dialog.
The
Policy
of each zone describes how to handle data packets for which no additional rules exist.
Allowed
:
This policy allows all packets which are not explicitly denied.
Denied
:
The policy allows only packets that are explicitly allowed (e.g., by opening specific
ports).
NAT
:
Network Address Translation replaces the local IP address of the network device
with the public IP address of the Gateway 400. This is required, for example, if the
network device has a private IP and you want to communicate with servers on the
Internet. This feature is only available for IPv4 connections!
ICMPv4
Enable ICMPv4 Filter
: ICMP is used to exchange error and information messages. Since this feature
can also be used for malicious attacks in the network, you are given the option to
activate a filter.
ICMPv6
You can allow or deny incoming and outgoing ICMPv6 packets globally. If you want to allow only
specific packets, set the transmit direction to
Filtered
. You can then configure the
ICMPv6 filter
un-
der
Zone Configuration
to determine which packets are allowed.
5.7.2
Port Forwarding
Port forwarding allows computers within a local network to also be reached from the Internet. This
is important, for example, if you need to exchange data over the Internet or make a web server ac-
cessible from the Internet. Computer games may require configuring port forwarding to communi-
cate with other computers.
Note
Computers that are accessible via port forwarding from the Internet are also vulnerable
to attacks from the Internet. Make sure that your computer is adequately protected
against Internet attacks by installing appropriate security software and using secure
passwords. Change your passwords at regular intervals.
Summary of Contents for 400
Page 1: ...User Guide Gateway 400 ...
Page 2: ......
Page 7: ...7 11 Index 65 ...
Page 8: ...8 ...
Page 54: ...Gateway 400 User Guide Legal Notices 54 ...
Page 58: ...Gateway 400 User Guide Passwords 58 Note More Notes ...
Page 67: ......