BreezeMAX Si 2000 CPE User Manual - Alvarion

Chapter 5 - Gateway Configuration
Firewall
to network resources. The Router protects against the following DoS attacks:
IP Spoofing, Land Attack, Ping of Death, Smurf Attack, TCP null scan, ICMP
defect, and TCP SYN flooding.
• Discard PING from WAN side – Prevents pings on the unit’s WiMAX interface
from being routed to the network.
• Discard to PING the Gateway – Prevents any response to a ping to the unit’s
IP address from the LAN.
• Drop Port Scan – Prevents outside hackers form testing the TCP/UDP port
numbers on the unit for any services.
5.6.2 Client Filtering
You can block access to the Internet from clients on the local network by
specifying IP addresses and TCP/UDP port numbers. You can configure up to five
IP filters on the unit.
Figure 5-19: Client Filtering
• Enable Client Filter – Enables client filtering for entries in the table.
(Default: Disabled)
• IP – Specifies an IP address or range on the local network. (Range: 192.168.1.1
to 192.168.1.254)
• Port – Specifies a TCP/UDP port number range to filter. (Range: 1-65535)
• Type – Specifies the port type. (Options: TCP or UDP; Default: TCP)
• Enable – Enables filtering for the table entry. (Default: Disabled)
BreezeMAX Si 2000 CPE 70 User Manual