541401

Allied Telesis AR450S Manual

46
Zoom out
Zoom in
Previous page
1/134
Next page
46 AR400 Series Router User Guide
Software Release 2.7.1
C613-02021-00 REV F
■ Check the NAT configuration. See “Traffic Flow and Network Address
Translation (NAT)” on page 44.
Problem Illegitimate traffic is reaching your LAN or DMZ.
Solutions
■ The most likely cause of this problem is an incorrect rule. Check that:
• “Allow” rules are tight enough that only the intended traffic types are
allowed through.
• The firewall is processing the rules in the order you expected, and that
specific rules (e.g. deny IP address x access to FTP on the server) have
lower numbers than general rules (e.g. allow all FTP access).
• Rules intended to block traffic have an action of “Deny”.
• The ports, services and protocols are correct.
• The IP addresses the rules apply to are entered correctly, and actually
belong to the specified devices.
• The rules apply to the correct days and time.
■ Some traffic is allowed through the firewall, to enable the protocols to
work correctly. You can specify which ICMP traffic is allowed through on
the Firewall Policy Options page (Configuration > Firewall > Interfaces >
Policy options tab). For example, if Ping is checked on this page, ping
packets addressed to the private LAN will be allowed.
Problem A device on your LAN or DMZ cannot access the Internet.
Solutions
■ The most likely cause of this problem is an incorrect outgoing rule. Check
that:
• “Deny” rules are not too tight and therefore blocking more traffic than
intended.
• The firewall is processing the rules in the order you expected, and that
specific rules (e.g. allow IP address x to use FTP) have lower numbers
than general rules (e.g. deny all outgoing FTP requests).
• Rules intended to allow traffic have an action of “Allow”.
• The rules apply to the correct IP services (by name or port number).
• The IP addresses the rules apply to are entered correctly, and actually
belong to the specified devices.
• The rules apply to the correct days and time.
■ Check that the device’s gateway address is correct.
■ Check the NAT configuration. See “Traffic Flow and Network Address
Translation (NAT)” on page 44.
■ If an IP address-based rule exists to allow traffic from this particular
device, check that the device has a permanently-assigned IP address. If the
router is assigning IP addresses as a DHCP server, you can give the
required device a permanent IP address by making it a static entry
(Configuration > DHCP Server).
… 46 …


Need help? Post your question in this forum.

Forumrules


Report abuse

Libble takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Product:

For example, Anti-Semitic content, racist content, or material that could result in a violent physical act.

For example, a credit card number, a personal identification number, or an unlisted home address. Note that email addresses and full names are not considered private information.

Forumrules

To achieve meaningful questions, we apply the following rules:

Register

Register getting emails for Allied Telesis AR450S at:


You will receive an email to register for one or both of the options.


Get your user manual by e-mail

Enter your email address to receive the manual of Allied Telesis AR450S in the language / languages: English as an attachment in your email.

The manual is 1,66 mb in size.

 

You will receive the manual in your email within minutes. If you have not received an email, then probably have entered the wrong email address or your mailbox is too full. In addition, it may be that your ISP may have a maximum size for emails to receive.

The manual is sent by email. Check your email

If you have not received an email with the manual within fifteen minutes, it may be that you have a entered a wrong email address or that your ISP has set a maximum size to receive email that is smaller than the size of the manual.

The email address you have provided is not correct.

Please check the email address and correct it.

Your question is posted on this page

Would you like to receive an email when new answers and questions are posted? Please enter your email address.



Info