Operation Manual

Use caution when enabling the DMZ feature, as it can threaten the security of your network. Only use DMZ as a

last resort.

Firewall Options

Anti-Spoof: Anti-Spoof checks help protect against malicious users faking the source address in packets they transmit in

order to either hide themselves or to impersonate someone else. Once the user has spoofed their address they can

launch a network attack without revealing the true source of the attack or attempt to gain access to network services that

are restricted to certain addresses.

Log Web Access: Enable this option to create a syslog record of web (IP port 80) access. Each entry will contain the IP

address of the server and the client. Note that this may create a lot of log entries, especially on a busy network. Sending

the system log to a syslog server is recommended.

To view the logs, go to Status → System Logs. For configuration options, including syslog server setup, go to System

Settings → Administration and select the System Logging tab.

Network Prefix Translation

Network Prefix Translation is used in IPv6 networks to translate one IPv6 prefix to another. IPv6 prefix translation is an

experimental specification (RFC 6296) trying to achieve address independence similar to NAT in IPv4. Unlike NAT,

however, NPT is stateless and preserves the IPv6 principle that each device has a routable public address. But it still

breaks any protocol embedding IPv6 addresses (e.g. IPsec) and is generally not recommended for use by the IETF.

NPT can help to keep internal network ranges consistent across various IPv6 providers, but it cannot be used effectively

in all situations.

The primary purpose for Cradlepoint’s NPT implementation is for failover/failback and load balancing setups. LAN clients

can potentially retain the original IPv6 lease information and may experience a more seamless transition when WAN

connectivity changes than if not utilizing NPT.

Mode:

None – No translation is performed

Load Balance Only – (Default) Only translate networks when actively load balancing