Digitus Router DN 7049 1 User Manual

							102 
settings will take effect (Please wait for about 30 seconds while router is 
rebooting). 
 
 
3-3-1 Access Control 
 
This function allows or denies computers with specific MAC address 
from connecting to the network; it can also allow or deny computers with 
specific IP address, protocol, or port. 
 
Please click ‘Firewall’ menu on the left of web management interface, 
then click ‘Access Control’, and the following message will be displayed 
on your web browser: 
 
 
 
Here are descriptions of every setup items: 
 
 
Enable MAC   Check this box to enable MAC address based 
Filtering (1): filtering, and please select ‘Deny’ or ‘Allow’ to 
decide the behavior of MAC filtering table. If you 
select deny, all MAC addresses listed in filtering 
table will be denied from connecting to the network; 
if you select allow, only MAC addresses listed in 
filtering table will be able to connect to the network, 
and rejecting all other network devices. 
 
1 
2 3 
5 6 
7 
8 9 10 
12 13 14 15 
16 
11
0 
4  
						

							103 
Client PC    Please input the MAC address of computer 
MAC address (2):  or network device here, dash ( - ) or colon ( : ) are 
not required. (i.e. If the MAC address label of your 
wireless device indicates ‘aa-bb-cc-dd-ee-f f’ or 
‘aa:bb:cc:dd:ee:ff’, just input ‘aabbc c d d e e ff ’ 
 
Computer Name (3): Pull down the menu and all the computers 
connected to the router will be listed here. You can 
easily to select the computer name without checking 
the IP address of the computer. 
 
Comment (4):  You can input any text here as the comment of this 
MAC address, like ‘ROOM 2A Computer’ or 
anything. You can input up to 16 alphanumerical 
characters here. This is optional and you can leave 
it blank, however, it’s recommended to use this field 
to write a comment for every MAC addresses as a 
memory aid. 
 
Add (5):  Click ‘Add’ button to add the MAC address and 
associated comment to the MAC address filtering 
table. 
 
Reset (6):    Remove all input t e d   v a l u e s . 
 
C u r r e n t  MAC   All existing MAC addresses in filtering table 
Filtering T a b l e   (7):  will be listed here. 
 
Delete (8):  If you want to delete a specific MAC address entry, 
check the ‘select’ box of the MAC address you want 
to delete, then click ‘Delete Selected’ button. (You 
can select more than one MAC addresses). 
 
Delete All (9):  If you want to delete all MAC addresses listed here, 
p l e a s e   c l i c k  ‘Delete All’ button. 
 
Reset (10):  You can also click ‘R e s e t’ button to unselect all 
MAC addresses.  
						

							104 
 
Enable IP    Check this box to enable IP address based 
Filtering (1 1):      filtering, and please select ‘Deny’ or ‘Allow’  
to decide the behavior of IP filtering table. If you 
select deny, all IP addresses listed in filtering table 
will be denied from connecting to the network; if 
y o u   s e l e c t  allow, only IP addresses listed in filtering 
table will be able to connect to the network, and 
rejecting all other network devices. 
 
IP Filtering   All existing IP addresses in filtering table will be 
T a b l e   ( 12) :     listed here. 
 
Add PC (13):  Click this button to add a new IP address to IP 
filtering table, up to 20 IP addresses can be added. 
 Please refer to section 3-3-1-1 ‘Add PC’ b e l o w .  
 
Delete (14):   If you want to delete a specific IP address entry, 
  check the ‘select’ box of the IP address you want to 
delete, then click ‘D e l e t e   S e l e c t e d’ button. (You can 
select more than one IP addresses). 
 
Delete All (15):  If you want to delete all IP addresses listed here, 
p l e a s e   c l i c k  ‘Delete All’ button. 
 
After you finish with all settings, please click ‘Apply’ (16) button and the 
following message will be displayed on your web browser: 
 
 
 
 
Please click ‘Continue’ to back to previous setup menu; to continue on 
other setup procedures, or click ‘Apply’ to reboot the router so the  
						

							105 
settings will take effect (Please wait for about 30 seconds while router is 
rebooting). 
 
If you want to reset all settings in this page back to previously-saved 
value, please click ‘Cancel’ button. 
 
 
3-3-1-1 Add PC 
 
After button is clicked, the following message will be displayed on your 
web browser: 
 
a 
b 
c 
d 
e 
f  
						

							106 
 
Here are descriptions of every setup items: 
 
Client PC    Please input any text to describe this IP 
Description (a):  address, up to 16 alphanumerical characters. 
 
Client PC IP   Please input the starting IP address in the left 
address (b):  field, and input the end IP address in the right field 
to define a range of IP addresses, or just input the 
IP address in the left field to define a single IP 
address. 
 
Client PC    Please check all services you want to allow or 
Service (c):  deny this IP address to use, you can check multiple 
services. 
 
Protocol (d):  If the service you need is not listed above, you can 
create a new service on your own. Please select 
TCP or UDP, if you’re not sure, p l e a s e   s e l e c t  
‘Both’. 
 
Port Range (e):  Please input the port range of new service here. If 
you want to specify port 80 to 90, please 
input ’80-90’; if you want to apply this rule on a 
single port, just input the port number, like ‘80’. 
 
Add (f):  When you finish with all settings, please click ‘Add’ 
to save settings, you’ll be brought back to previous 
menu, and the rule you just set will appear in 
current IP filtering table. 
 
If you want to remove all settings in this page, click ‘Reset’ button. 
 
 
3-3-2 URL Blocking 
 
If you want to prevent computers in local network from accessing certain 
website (like pornography, violence, or anything you want to block), you  
						

							107 
can use this function to stop computers in local network from accessing 
the site you defined here. 
 
This function is useful for parents and company managers. 
 
Please follow the following instructions to set URL blocking parameters: 
Please click ‘Firewall’ menu on the left of web management interface, 
then click ‘URL Blocking’, and the following message will be displayed 
on your web browser: 
 
 
 
Here are descriptions of every setup items: 
 
Enable URL   Check this box to enforce URL Blocking, 
Blocking (1):   uncheck it to disable URL Blocking. 
 
URL/Keyword (2):  Input the URL (host name or IP address of website, 
like http://www.blocked-s i t e . c o m or 
http://11.22.33.44), or the keyword which is 
contained in URL (like pornography, cartoon, stock, 
or anything). 
 
Add (3):  Click ‘Add’ button to add the URL / keyword to the 
URL / Keyword filtering table. 
 
Reset (4):  Click ‘Reset’ to remove the value you inputted in 
URL/Keyword field. 
2 
3 4 
5 
6 7 8 
9 
1  
						

							108 
 
C u r r e n t   U R L    All existing URL/Keywords in filtering 
Blocking Table (5):  table will be listed here. 
 
Delete (6):  If you want to delete a specific URL/Keyword entry, 
check the ‘select’ box of the MAC address you want 
to delete, then click ‘Delete Selected’ button. (You 
can select more than one MAC addresses). 
 
Delete All (7):  If you want to delete all URL/Keyword listed here, 
p l e a s e   c l i c k  ‘Delete All’ button. 
 
Reset (8):  You can also click ‘R e s e t’ button to unselect all 
URL/Keywords. 
 
After you finish with all settings, please click ‘Apply’ (9) button, and the 
following message will be displayed on your web browser: 
 
 
 
Please click ‘Continue’ to back to previous setup menu; to continue on 
other setup procedures, or click ‘Apply’ to reboot the router so the 
settings will take effect (Please wait for about 30 seconds while router is 
rebooting). 
 
If you want to reset all settings in this page back to previously-saved 
value, please click ‘Cancel’ button. 
 
 
3-3-3 DoS Attack Prevention 
 
Denial of Service (DoS) is a common attack measure, by transmitting a 
great amount of data or request to your Internet IP address and server, the  
						

							109 
Internet connection will become very slow, and server may stop 
responding because it is not capable to handle too much traffics. 
 
This router has a built-in DoS attack prevention mechanism; when you 
activate it, the router will stop the DoS attack for you. 
 
Please follow the following instructions to set DoS prevention 
parameters: 
 
Please click ‘Firewall’ menu on the left of web management interface, 
then click ‘DoS’, and the following message will be displayed on your 
web browser: 
 
 
 
Here are descriptions of every setup items: 
 
Ping of Death (1):  Ping of Death is a special packet, and it will cause 
certain computer to stop responding. Check this box 
and the router will filter this kind of packet out. 
 
D i s c a r d P i n g    Ping is a common and useful tool to know 
From WAN (2):  the connection status of a specified remote network 
device, but some malicious intruder will try to fill 
your network bandwidth with a lot of PING request 
data packet, to make your internet connection 
become very slow, even unusable. Check this box 
and  the  router  will  ignore  all  inbound  PING  request, 
but when you activate this function, you will not be 
1 
2 
3 
4 
5 
6  
						

							110 
able to ping your own router from internet, too. 
Port Scan (3):  Some malicious intruder will try to use a ‘port 
scanner’ to know how many ports of your Internet 
IP address are open, and they can collect a lot of 
valuable information by doing so. Check this box 
and the router will block all traffics w h i c h are trying 
to scan your Internet IP address. 
 
Sync Flood (4):  This is another kind of attack, which uses a lot of 
fake connection request to consume the memory of 
your server, and try to make your server become 
unusable. Check this box and the router will filter 
this kind of traffic out. 
 
Advanced    Click this button and you can set advanced 
Settings (5):  settings of the DoS prevention method listed above, 
please see section 3-3-3-1 ‘DoS – Advanced 
Settings’ below. 
 
After you finish with all settings, please click ‘Apply’ (6) button and the 
following message will be displayed on your web browser: 
 
 
 
Please click ‘Continue’ to back to previous setup menu; to continue on 
other setup procedures, or click ‘Apply’ to reboot the router so the 
settings will take effect (Please wait for about 30 seconds while router is 
rebooting). 
 
If you want to reset all settings in this page back to previously-saved 
value, please click ‘Cancel’ button. 
 
  
						

							1 1 1 
 
3-3-3-1 DoS - Advanced Settings 
When you click ‘Advanced’ button in DoS menu, the following message 
will be displayed on your web browser: 
 
 
 
Here are descriptions of every setup items: 
 
Ping of Death (a):  Set the threshold of when this DoS prevention 
mechanism will be activated. Please check the box 
of Ping of Death, and input the frequency of 
threshold (how many packets per second, minute, or 
hour), you can also input the ‘Burst’ value, which 
means when this number of ‘Ping of Death’ packet 
is received in very short time, this DoS prevention 
mechanism will be activated. 
 
Discard Ping   Check the box to activate this DoS 
From WAN (b):   prevention mechanism. 
 
Port Scan (c):  Many kind of port scan methods are listed here, 
please check one or more DoS attack methods you 
want to prevent. 
 
Sync Flood (d):  Like Ping of Death, you can set the threshold of 
when this DoS prevention mechanism will be 
a 
b 
c 
d 
e