Asus Router RX3042H User Manual

59
RX3042H User's Manual Configuring DDNS
8  Configuring DDNS
Dynamic DNS (DDNS) is a service that allows computers to use the 
same  domain  name,  even  when  the  IP  address  changes  from  time 
to  time  (during  reboot  or  when  the  ISPʼs  DHCP  server  resets  IP 
leases).  RX3042H  connects  to  a  DDNS  service  provider  whenever 
the  WAN  IP  address  changes.  It  supports  setting  up  the  web 
services  such  as  Web  server,  FTP  server  using  a  domain  name 
instead  of  the...

60
Configuring DDNS RX3042H User's Manual

8.1  DDNS Configuration Parameters
Table  8.1  describes  the  configuration  parameters  available  for 
DDNS service.
Table 8.1. DDNS Configuration Parameters
FieldDescription
InterfaceSelect the interface that the DDNS service is to be used.
StatusShows the state of DDNS.
Enable 
DDNS
Check  this  box  to  enable  DDNS  service;  otherwise,  keep  the 
box unchecked.
Domain 
Name
Enter the registered domain name into this field. For example, 
If the host...

61
RX3042H User's Manual Configuring DDNS

Follow these instructions to configure the HTTP DDNS:
1. First, you should have already registered a domain name to the  DDNS service provider, dyndns. If you have not done so, please 
visit www.dyndns.org for more details.
2.  Open  the  DDNS  configuration  page  by  clicking  Advanced  -> 
DDNS Service menu.
3. Select the interface that the DDNS service is to be used.
4. Check Enable DDNS checkbox to enable the DDNS service.
5. Enter the registered domain...

RX3042H User's Manual Configuring Firewall
63
9  Configuring Firewall and NAT
The  RX3042H  provides  built-in  firewall/NAT  functions,  enabling 
you  to  protect  the  system  against  denial  of  service  (DoS)  attacks 
and  other  types  of  malicious  accesses  to  your  LAN  while  providing 
Internet access sharing at the same time. You can also specify how 
to  monitor  attempted  attacks,  and  who  should  be  automatically 
notified.
This  chapter  describes  how  to  create/modify/delete...

Configuring Firewall RX3042H User's Manual
64

9.1.2  DoS (Denial of Service) Protection
Both DoS protection and stateful packet inspection provide first line 
of  defense  for  your  network.  No  configuration  is  required  for  both 
protections  on  your  network  as  long  as  firewall  is  enabled  for  the 
RX3042H.  By  default,  the  firewall  is  enabled  at  the  factory.  Please 
refer to section 9.3.1 “Firewall ” to enable or disable firewall service 
on the RX3042H.
9.1.3  Firewall and...

RX3042H User's Manual Configuring Firewall
65

•    ACL  Rules:  for  controlling  all  access  to  the  computers  on  the 
LAN  and  DMZ  and  for  controlling  access  to  external  networks 
for hosts on the LAN and DMZ.
•  Self-Access Rules: for controlling access to the RX3042H itself.
Default Access Rules
•  All traffic from external hosts to the hosts on the LAN and DMZ is 
denied.
•   All  traffic  originated  from  the  LAN  is  forwarded  to  the  external  network using NAT.
WARNING:  It...

Configuring Firewall RX3042H User's Manual
66

Figure 9.1 NAPT – Map Any Internal PCs to a Single Global IP Address
Figure  9.2  Reverse  NAPT  –  Relayed  Incoming  Packets  to  the Internal Host Base on the Protocol, Port Number or IP Address 

RX3042H User's Manual Configuring Firewall
67

9.2.2  Reverse NAPT / Virtual Server
Reverse  NAPT  is  also  called  inbound  mapping,  port  mapping,  or 
virtual  server. Any  packet  coming  to  the  RX3042H  can  be  relayed 
to  the  internal  host  based  on  the  protocol,  port  number  and/or  IP 
address  specified  in  the  ACL  rule.  This  is  useful  when  multiple 
services are hosted on different internal hosts. Figure 9.2shows that 
web  server  (TCP/80)  is  hosted  on  PC A,...

Configuring Firewall RX3042H User's Manual
68

The  RX3042H  has  an Attack  Defense  Engine  that  protects  internal 
networks  from  Denial  of  Service  (DoS)  attacks  such  as  SYN 
flooding,  IP  smurfing,  LAND,  Ping  of  Death  and  all  re-assembly 
attacks.  It  can  drop  ICMP  redirects  and  IP  loose/strict  source 
routing  packets.  For  example,  a  security  device  with  the  RX3042H 
Firewall provides protection from “WinNuke”, a widely used program 
to  remotely  crash...