The Firewall configuration page allows you to enable or disable firewall functions and set firewall log parameters.

  1. Choose Security from the Configuration Menu.

  2. Configure settings using the information in the following table as a guide. When you have finished configuring settings, click Submit to make your changes take effect.

    Standard Firewall Parameters

    ItemDescription

    Enable TELNET access through LAN and WAN

    Enables TCP destination port 23 connections to the system's LAN and WAN interfaces for telnet terminal management access. The telnet service is disabled on the system when this option is disabled.

    In the GUI it can only be disabled. To enable it, edit fw_defs.conf in configuration directory and run config_fw script.

    Enable Firewall for WAN

    Select the Enable Firewall for WAN checkbox to enable or disable the system firewall.

    Basic WAN Firewall Settings

    Enable or disable the management services allowed to the system from the WAN:

    • WAN access to the firewall—Management access from the LAN to these services is still enabled even if all checkboxes are deselected.

    • Provider/Subscriber access to the system—Management services to the system apply to both the provider and the subscriber interfaces. Deselecting a management service causes loss of access to the system from both the provider and the subscriber interfaces.

    Allow HTTP Access Through the Firewall

    Select the Enable Firewall Logging checkbox to log information about packets to and through the system.

    Tip: To configure the system to use an external syslog server:

    • Choose Admin > System Configuration.

    • Select the Remote System Logging checkbox and configure settings in the Remote System Logging window.

    Refer to Configuring Remote System Logging.

    Set HTTP access port

    Enter the HTTP connection port to connect to the system and use the system GUI.

    Allow HTTPS Access Through the Firewall

    Select the checkbox to allow HTTPS system management from the WAN interface.

    Allow TELNET Access Through Firewall

    Select the checkbox to allow Telnet system management from the WAN interface.

    Allow SSH Access Through Firewall

    Select the checkbox to allow SSH (version 2) system management from the WAN interface.

    Allow SNMP Access Through Firewall

    Select the checkbox to allow SNMP V1 and V3 system management from the WAN interface.

    Enable Firewall Logging

    Select the checkbox to enable logging for packets to and through the system.

    Warning: Because port scanning and login attacks are common when connected to a public network, logging is disabled by default. When enabling logging, use caution! Firewall logging may affect call quality and system performance. It may also use network bandwidth if system logging is enabled over the WAN.