Firewall


See Logging into the ONT for help with logging in.


1. Select Security from the top-level menu, then Firewall in the left-hand menu


2. Use the drop-down box to select Security Level


    Choose the security level from the drop-down menu: Off, Low, or High

  • Off: No firewall security is in effect.
  • Low: Pre-routing is supported: port forwarding, DMZ, host application, and host drop. Also supported are application services: DDNS, DHCP, DNS, H248, IGMP, NTP client, SSH, Telnet, TFTP, TR-069, and VoIP. The following types of ICMP messages are permitted: echo request and reply, destination unreachable, and TTL exceeded. Other types of ICMP messages are blocked. DNS proxy is supported from LAN to WAN but not from WAN to LAN.
  • High: Pre-routing and application services are not supported. UDP Port 8000 can be used to access the services; for example, FTP can use 8021, and Telnet can use 8023. Regular UDP cannot be used. RG access is permitted via the LAN side but not via the WAN side.


3. Use the drop-down box to select Attack Protection (Protection against DoS or DDoS attacks)

  • Choose enable or disable attack protection from the drop-down menu 
  • The default is disabled (Protection against DoS or DDoS attacks)


4. Click Save