IS200DAMDG2A自动化模块备件
保存单击保存按钮保存设置撤消单击撤消按钮取消设置创建/编辑GRE隧道应用添加/编辑按钮后，将出现GRE规则配置屏幕。EW200工业蜂窝网关254 GRE规则配置窗口项值设置描述隧道名称所需设置输入隧道名称。值范围：1~9个字符。接口1。所需设置2。默认情况下选择WAN 1选择要在其上建立GRE隧道的接口。它可以是任何可用的WAN和LAN接口。隧道IP可选设置输入隧道IP地址和相应的子网掩码。需要远程IP设置输入远程GRE隧道网关的远程IP地址。通常这是远程GRE网关的公共IP地址。MTU 1。所需设置2。默认设置自动（值为零或空白）MTU指传输单元。它指定允许Internet传输的最大数据包大小。当设置为“自动”（值“0”或空白）时，路由器会选择MTU以提高Internet连接性能。值范围：0~1500。密钥可选设置输入GRE连接的密钥。值范围：0~9999999999。TTL 1。所需设置2。1到255范围指定此GRE隧道的TTL跃点计数值。值范围：1~255。需要远程子网设置指定此GRE隧道的远程子网。远程子网格式必须是IP地址/网络掩码（例如10.0.0.2/24）。它适用于GRE服务器对等体的Intranet。在GRE客户端对等端，目的地位于专用子网中的数据包将通过GRE隧道传输。其他将根据GRE客户端对等点安全网关的当前路由策略进行传输。如果在远程子网字段中输入0.0.0.0/0，则它将被视为GRE客户端对等体的默认网关设置，所有数据包（包括GRE客户端对等的Internet访问）都将通过已建立的GRE隧道。EW200工业蜂窝网关255意味着远程GRE服务器对等体控制来自GRE客户端对等体的任何分组的流。默认情况下未选中“隧道”复选框以启用此GRE隧道。保存单击保存按钮保存设置。撤消单击“撤消”按钮取消设置。后退单击后退按钮返回上一页。EW200工业蜂窝网关256 5.2防火墙防火墙功能包括数据包过滤器、URL阻止、内容过滤器、MAC控制、应用程序过滤器、IPS和一些防火墙选项。支持的功能因网关型号而异。5.2.1数据包过滤器EW200工业蜂窝网关257“数据包过滤器”功能允许您定义传入和传出数据包的过滤规则，允许网关控制在数据包通过时允许或阻止哪些数据包。数据包过滤器规则应指示数据包从哪个接口进入和离开网关、源和目标IP地址、，以及目的地服务端口类型和端口号。此外，应该有一个计划，该规则将为其激活。
Save Click Save button to save the settings Undo Click Undo button to cancel the settings Create/Edit GRE tunnel When the Add/Edit button is applied, a GRE Rule Configuration screen will appear. EW200 Industrial Cellular Gateway 254 GRE Rule Configuration Window Item Value setting Description Tunnel Name Required setting Enter a tunnel name. Value Range: 1 ~ 9 characters. Interface 1. Required setting 2. WAN 1 is selected by default Select the interface on which GRE tunnel is to be established. It can be any available WAN and LAN interface. Tunnel IP Optional setting Enter the Tunnel IP address and corresponding subnet mask. Remote IP Required setting Enter the Remote IP address of remote GRE tunnel gateway. rmally this is the public IP address of the remote GRE gateway. MTU 1. Required setting 2. Auto (value zero or blank) is set by default MTU refers to Transmission Unit. It specifies the largest packet size permitted for Internet transmission. When set to Auto (value ‘0’ or blank), the router selects the MTU for Internet connection performance. Value Range: 0 ~ 1500. Key Optional setting Enter the Key for the GRE connection. Value Range: 0 ~ 9999999999. TTL 1. Required setting 2. 1 to 255 range Specify TTL hop-count value for this GRE tunnel. Value Range: 1 ~ 255. Remote Subnet Required setting Specify the remote subnet for this GRE tunnel. The Remote Subnet format must be IP address/netmask (e.g. 10.0.0.2/24). It is for the Intranet of GRE server peer. At GRE client peer, the packets whose destination is in the dedicated subnet will be transferred via the GRE tunnel. Others will be transferred based on current routing policy of the security gateway at GRE client peer. If 0.0.0.0/0 is entered in the Remote Subnet field, it will be treated as a default gateway setting for the GRE client peer, and all packets, including the Internet accessing of GRE client peers, will go through the established GRE tunnel. That EW200 Industrial Cellular Gateway 255 means the remote GRE server peer controls the flow of any packets from the GRE client peer. Tunnel Unchecked by default Check Enable box to enable this GRE tunnel. Save Click Save button to save the settings. Undo Click Undo button to cancel the settings. Back Click Back button to return to the previous page. EW200 Industrial Cellular Gateway 256 5.2 Firewall The firewall functions include Packet Filter, URL Blocking, Content Filter, MAC Control, Application Filter, IPS and some firewall options. Supported functions vary depending on the gateway model. 5.2.1 Packet Filter EW200 Industrial Cellular Gateway 257 The "Packet Filter" function lets you define filtering rules for incoming and outgoing packets, allowing the gateway to control what packets are allowed or blocked as they pass through it. A packet filter rule should indicate from and to which interface the packet enters and leaves the gateway, the source and destination IP addresses, and destination service port type and port number. In addition, there should be a schedule for which the rule will be active.
