
QuadroCS Manual II: Administrator's Guide Administrator's Menus
QuadroCS (SW Version 3.1.x) 42
Disable CCP (Compression Control Protocol) negotiation -
this option should only be selected if the peer system is not
working properly. For example, if it is not accepting the requests
from the PPPD (Point-to-Point Daemon) for CCP negotiation.
Disable magic number negotiation - with this option, PPPD
cannot detect a looped-back line. This option should only be
selected if the peer is not working properly.
Disable protocol field compression negotiation in both the
receive and the transmit direction – with this option, no
protocol field compression will take place.
Disable Van Jacobson style TCP/IP header compression in
both the transmit and the receive direction – with this option,
no negotiation of TCP/IP header compression will take place
and the header will always be sent uncompressed.
Disable the connection-ID compression option in Van
Jacobson style TCP/IP header compression - with this
option, PPPD will not compress the connection-ID byte from
Van Jacobson and will not ask the peer to do so.
Disable the IPXCP and IPX protocols - this option should only
be selected if the peer is not working properly and cannot
handle requests from PPPD for IPXCP negotiation.
Fig. II-69: Advanced PPP Settings page
Firewall
The Firewall Configuration page allows setting up a firewall, configuring the security level of QuadroCS.
A Firewall is a security service configured by the QuadroCS administrator based on various criteria. The firewall allows or blocks traffic based on
policies, services and/or IP addresses. The firewall has several levels of security policies (low, medium, high). The administrator may add additional
service-based rules. Filtering rules will take effect only if the Firewall has been enabled and are independent from the selected firewall security level.
The Firewall Configuration page consists of the following
components:
The Enable Firewall checkbox selection enables the firewall
security service. The firewall security level has to be selected,
otherwise the firewall cannot be enabled.
The Firewall Security radio buttons are:
• Low Security - Everything that is not explicitly forbidden is
allowed. This security level doesn't block anything by
default. It is recommended if the device is already located
behind another firewall or if every filter has been configured
correctly.
• Medium Security - Traffic originating from the LAN side
may pass and traffic from the WAN side will be blocked by
default. This is the recommended security level.
• High Security - Everything that is not explicitly allowed will
be blocked, including traffic from the LAN side.
Advanced Firewall Settings link refers to page where QuadroCS
privacy can be configured.
The View Filter Rules link opens the Filtering Rules
page.
Fig. II-70: Firewall and NAT Settings page
Advanced Firewall Settings
Advanced Firewall Settings are used to deny Ping and
Portscanning operations addressed toward the device. With
these features enabled QuadroCS will answer with irritating
message to the Ping and Portscanning operations. Page
consists of the following components:
The Ping Stealth checkbox selection prohibits Ping operation
toward QuadroCS from its WAN.
The Fool Portscanner checkbox selection prohibits QuadroCS
portscanning from its WAN. As a reply to Portscanning
operation, "network unreachable" or "host unreachable"
feedback messages will be sent.
Fig. II-71: Advanced Firewall Settings page
Comentários a estes Manuais