Operation Manual
input the number into the left box. To enter a range of ports, fill in both boxes separated by the colon. For example
"80:90" would represent all ports between 80 and 90 including 80 and 90 themselves.
Source IP Address, Source Netmask, Destination IP Address, and Destination Netmask: Specify an IP address or
range of IP addresses by combining an IP address with a netmask for either “source” or “destination” (or both). Source
vs. destination is defined by traffic flow. Leave these blank to include all IP addresses (such as if your rule is defined by
a particular port instead).
*EXAMPLE: If you want to associate this rule with your guest LAN, you could input the IP address and netmask for the
guest LAN here (leaving the last slot “0” to allow for any user attached to the guest network):
Source IP Address: 192.168.10.0
Source Netmask: 255.255.255.0*
DSCP (DiffServ): Differentiated Services Code Point (DSCP) is the successor to TOS (Type of Service). Use this field to
select traffic based on the DSCP header in each IP packet. This field is sometimes set by latency sensitive equipment
such as VoIP phones.
This setting is optional. For more information see the Differentiated services Wikipedia page.
DSCP Negate: When checked this rule will match on any packet that does not match the DSCP field.
Click Finish to save this rule.
Remote Admin. Restriction
Enable Remote Administration Access Control: Selecting this option allows you to make remote administration tools
available to only the specified IP addresses. Access from all other IP addresses will be blocked. This option only filters
IP addresses: you must enable Remote Management separately (System Settings → Administration).
The services affected by this include remote HTTP, HTTPS, SNMP, and SSH configuration tools. This does not impact
LAN-based administration, i.e., devices within your network still have administration access. The individual remote
administration services can be enabled under System Settings → Administration: select the Remote Management
tab.
Add/Edit Allowed Remote Access Addresses
72