Asus Router RX3042H User Manual

RX3042H User's Manual Configuring Firewall
79

Figure 9.8. Self-Access ACL Configuration Example
9.6.2  Modify a Self-Access Rule
To modify a Self-Access rule, follow the instructions below:
1.  Open  the  Self-Access  ACL  configuration  page  by  clicking  Firewall/NAT ->Self-Access ACL
 menu.
2.  Click  on  the      icon  of  the  Self-Access  rule  to  be  modified  in  the  Existing Self-Access ACL  table or select the Self-Access ACL 
from the ID drop-down list.
3. Make desired changes to any or...

Configuring Firewall RX3042H User's Manual
80

9.7  Configure Virtual Server
Virtual server allows you to configure up to ten public servers, such 
as a Web, E-mail, FTP server and etc. accessible by external users 
of  the  Internet.  Each  service  is  provided  by  a  dedicated  server 
configured  with  a  fixed  IP  Address.  Although  the  internal  service 
addresses  are  not  directly  accessible  to  the  external  users  the 
router  is  able  to  identify  the  service  requested  by  the...

RX3042H User's Manual Configuring Firewall
81

virtual server configuration.
Table 9.5. Virtual Server Configuration Parameters
SettingDescription
ID
Add NewClick on this option to add a new virtual server.
NumberSelect the ID of a virtual server from the drop-down list to 
modify its settings.
Move to
This  option  allows  you  to  set  a  priority  for  virtual  server  rule  check.  NAT 
does  the  IP  and/or  port  mapping  based  on  the  priority  of  the  rules.  Set  a 
priority by specifying a...

Configuring Firewall RX3042H User's Manual
82

SettingDescription
Redirect 
Service
Select a service, from the drop-down list, to which this rule 
should  apply.  If  the  desired  service  is  not  listed,  click  on 
the "Edit" button to create a new service.
Bypass ACLCheck  this  option  if  you  do  not  want  firewall  to  perform 
access  control  on  this  virtual  server.  This  means  that 
the  virtual  server  allows  anyone  to  access  the  service 
provided.  If  you  want  to...

RX3042H User's Manual Configuring Firewall
83

ApplicationService Port Numbers
Netmeeting or VoIP
1503-1503, 1720(ALG)
NEWS TCP 119-119
PC Anywhere TCP 5631
PC Anywhere TCP 5631, UDP 5632
POP3TCP 110-110
Powwow Chat13233-13233
Red Alert II
1234-1237
SMTP TCP 25-25
Sudden Strike2300-2400
TELNETTCP 23-23
Win VNCUDP 5800-5800
9.7.2  Virtual Server Example 1 – Web Server
Figure  9.10  illustrates  the  network  topology  for  the  web  server 
deployment.  This  web  server  provides  HTTP  service...

Configuring Firewall RX3042H User's Manual
84

Figure 9.11. Virtual Server Example 1 – Web Server
3.  Enter  the  IP  address  of  the  web  server,  which  is  192.168.1.28, 
in Redirect IP field.
4.  Since  the  web  server  is  not  using  the  standard TCP  port,  which  is  80,  for  providing  the  http  service,  a  new  service  type  must 
be created for http service using TCP port 80. Click on the 
Edit 
button on the redirect service field to create a new service type. 
In  the  popped  up...

RX3042H User's Manual Configuring Firewall
85

5. Select the service, HTTP_8080, from the Redirect Service drop-
down list.
6. Click Add to save the virtual server settings.
9.7.3  Virtual Server Example 2 – FTP Server
Figure  9.10  illustrates  the  network  topology  for  the  FTP  server 
deployment.  This  FTP  server  provides  FTP  service  using  standard 
FTP port.
Following  describes  the  procedure  to  setup  the  FTP  server  as 
illustrated in Figure 9.10.
1.  Open  the  Virtual  Server...

Configuring Firewall RX3042H User's Manual
86

 Note:  Only  one  PC  can  use  one  particular  special 
application at a time..
9.8.1  Special Application Configuration Parameters
Table  9.7  describes  the  configuration  parameters  available  for 
virtual server configuration.
Table 9.7. Special Application Configuration Parameters
SettingDescription
EnabledCheck this box to activate the policy.
Trigger ProtocolSelect  the  protocol  type  from  the  drop-down  list.  The 
available options are...

RX3042H User's Manual Configuring Firewall
87

ApplicationOutgoing Port 
Number
Incoming Port Range
ICU II20192000-2038, 2050-2051, 
2069, 2085, 3010-3030
MSN Gaming Zone476242300-2400, 28800-29000
PC to Phone1205312120, 12122, 150-24220
Quick Time 4
5546970-6999
wowcall80004000-4020
Yahoo Messenger
50505000-5101
9.8.2  Special Application Example
Figure 9.14. Special Application Configuration Page
Following describes the procedure to setup a special application for 
MSN Gaming Zone.
1.  Open  the...

Configuring Firewall RX3042H User's Manual
88
5.  Select TCP/UDP  from  the  incoming  protocol  drop-down  list. 
If  you  are  not  sure  whether  the  application  uses  TCP  or  UDP 
protocol, you may select TCP/UDP in this field.
6 .   E n t e r   i n c o m i n g   p o r t   r a n g e ,   i n   t h i s   c a s e :   2 3 0 0 - 2 4 0 0   a n d 
28800-29000
7. In the  Comment  field, enter the name identifying this application, 
which is MSN Gaming Zone in this instance.
8. Click Apply to save the...