Asus Router RX3141 User Manual

RX3141 User’s Manual  Chapter 9. Configuring Firewall/NAT Settings 
 61 
3.  Make desired changes to any settings.. 
4.  Click on the 
 button to save the changes. The new settings for this Self-Access rule 
will then be displayed in the 
Existing Self-Access ACL table located at the bottom half of the 
Self-Access ACL configuration page. 
9.6.3  Delete a Self-Access Rule 
To delete a Self-Access rule, open the Self-Access Rule configuration page by double clicking the Router 
Setup
 Î Self Access ACL...

Chapter 9. Configuring Firewall/NAT Settings  RX3141 User’s Manual 
62 
Figure 9.11 Sample Firewall Log 
9.7.1 Log Format 
Two types of log are supported by the RX3141 – system security log and firewall access control log. They are 
designated by the two keywords, sys and fw respectively. The log format is best explained by 
examples:
System Security Log Example:  
Jan 1 00:01:22 2000 klogd: sys: TCP XMAS/NULL packet from 192.168.1.100. 
Explanation: 
Jan 1 00:01:22 2000 indicates the time of the attack;...

RX3141 User’s Manual Chapter 11. System Management 
 63 
10 Virtual Sever and Special Application 
This chapter describes the configuration procedures for: 
f Virtual Server 
f Special Application 
NAT is the technology used to support the above applications. 
10.1 NAT Overview 
Network Address Translation allows use of a single device, such as the RX3141, to act as an agent between 
the Internet (public network) and a local (private) network. This means that a NAT IP address can represent an 
entire...

Chapter 11. System Management RX3141 User’s Manual 
64 
 
Figure 10.2 Reverse NAPT – Relayed Incoming Packets to the Internal Host Base on the Protocol, Port 
Number or IP Address 
10.1.2 Reverse NAPT / Virtual Server 
Reverse NAPT is also called inbound mapping, port mapping, or virtual server. Any packet coming to the 
RX3141 can be relayed to the internal host based on the protocol, port number and/or IP address specified in 
the ACL rule. This is useful when multiple services are hosted on different...

RX3141 User’s Manual Chapter 11. System Management 
 65 
Table 10.1. Virtual Server Configuration Parameters 
Setting Description 
Enable Select an application from the list of pre-configured applications. The 
corresponding protocol and the redirect port range will be automatically 
selected. Select “Manual Setting” if you want to configure the settings 
yourself. To activate the policy, make sure the check box is checked. For a list 
of pre-configured applications, please refer to 
Table 10.2....

Chapter 11. System Management RX3141 User’s Manual 
66 
Application Service Port Numbers 
Netmeeting or VOIP 1503-1503, 1720 (ALG) 
NEWS TCP 119-119 
PC Anywhere TCP: 5631 
PC Anywhere TCP: 5631, UDP: 5632 
POP3 TCP 110-110 
Powwow Chat 13223-13223 
Red Alert II 1234-1237 
SMTP TCP 25-25 
Sudden Strike 2300-2400 
TELNET TCP 23-23 
Win VNC UDP 5800-5900 
10.2.2 Virtual Server Example 
Following describes the procedure to setup a FTP server: 
1.  Open the Virtual Server configuration page, as shown in...

RX3141 User’s Manual Chapter 11. System Management 
 67 
5.  For security concerns, the RX3141 denies all the access requests from the external users unless 
a proper inbound ACL rule is setup for each virtual server to allow external users to access the 
internal servers set up in the Virtual Server configuration page. For example, if you want to allow 
any one in the external network to access the FTP server, define an inbound ACL rule as 
configured in Figure 10.4. Note that the destination IP address...

Chapter 11. System Management RX3141 User’s Manual 
68 
Setting Description 
Application Name The name identifying the application. 
Outgoing (Trigger) 
Port Range The port range this application uses when it sends outbound packets. The 
outgoing port numbers act as the trigger. When the router detects the 
outgoing packets with these port numbers, it will allow the corresponding 
inbound packets with the incoming port numbers specified in the 
Incoming 
Port Range
 field to pass through the router. For...

RX3141 User’s Manual Chapter 11. System Management 
 69 
Following describes the procedure to setup a special application for Quick Time. 
1.  Open the Special Application configuration page, as shown in Figure 10.5, by double clicking the 
Advanced Î Special Application menu. 
2. Select 
Quick Time from the Enable drop-down list and the check the check box to activate this 
policy. Note that the application name, outgoing and incoming port range are automatically 
selected. 
3. Click 
 to save the...

Chapter 11. System Management RX3141 User’s Manual 
70 
11 System Management 
This chapter describes the following administrative tasks that you can perform using the Configuration 
Manager: 
f  Modify password and system-wide settings 
f  View system information 
f  Modify system date and time 
f  Reset system configuration 
f Reboot system 
f Update firmware 
f  Backup/restore system configuration 
11.1  Login Password and System-Wide Settings 
The first time you log into the Configuration Manager, you...