Cisco Router DPC3925 User Manual

							4021192 Rev B  71 
 
 Control Access to the Gateway 
 
Section Field Description 
 Inactivity Time 
60 minutes [Factory default when a user is created. Otherwise, it is 0 (zero)]. 
Enter the amount of time during a user session where there is no Internet access activity, 
indicating that the user is no longer online. If the inactivity timer is triggered, the user 
session will be closed automatically. In order to regain Internet access, the user must log in 
again with their User Name and Password. 
Note: Set the Inactivity time value to 0 (zero) to prevent session timeout.  
Access Restrictions > Local Log 
This page allows you to track, by user, any attempts made by that user to access 
Internet sites that are restricted. From this page you can also view events captured 
by the parental control event-reporting feature. 
Select the Local Log tab to open the Access Restrictions Local Log page. 
The following illustration is an example of the Access Restrictions Local Log page. 
 
Section Field Description 
Local Log 
Parental Control - Event 
Log 
Last Occurence 
Displays the time of the most recent attempt to access a 
restricted Internet site 
Action 
Displays the action taken by the system 
Target 
Displays the URL of the restricted site 
User 
Displays the user who attempted a restricted site 
Source 
Displays the IP address of the PC that was used when 
attempting to access a restricted website 
  
						

							72  4021192 Rev B 
 
Configure Applications and Gaming 
 
Configure Applications and Gaming 
Overview 
Most well-known Internet applications are supported by Application Layer 
Gateways (ALGs). ALGs automatically adjust the gateway firewall to allow data to 
pass without making any custom settings. We recommend that you test your 
application before making changes in this section. 
Applications & Gaming > Port Filtering 
Use this window to configure transmission control protocol (TCP) and user 
datagram protocol (UDP) port filters. These filters prevent a range of TCP/UDP 
ports from accessing the Internet. You can also prevent PCs from sending outgoing 
TCP/UDP traffic to the WAN on specific IP port numbers. This filter is not IP 
address- or MAC address- specific. The system blocks the specified port ranges for 
all PCs. 
Select the Port Filtering tab to open the Applications & Gaming Port Filtering page. 
 
Applications and Gaming Port Filtering Page Description 
Use the descriptions and instructions in the following table to configure the port 
filtering for applications and gaming features used on your residential gateway. 
Click the Enable checkbox to enable port forwarding for the relevant application. 
After you make your selections, click Save Settings to apply your changes or Cancel 
Changes to cancel.  
						

							4021192 Rev B  73 
 
 Configure Applications and Gaming 
 
Section Field Description   
Port Filtering Start Port: 
This is the beginning of the port range. Enter the beginning of the 
range of port numbers (external ports) used by the server or Internet 
application. Check with the software documentation of the Internet 
application for more information if necessary. 
End Port: 
This is the end of the port range. Enter the end of the range of port 
numbers (external ports) used by the server or Internet application. 
Check with the software documentation of the Internet application 
for more information if necessary. 
Protocol 
Select one of the following protocols: 
 TCP 
 UDP 
 Both 
Enable: 
Check this box to enable filtering on the specified ports.  
Applications & Gaming > Port Range Forwarding 
Important: The gateway normally implements a feature called Port Translation. Port 
Translation monitors what ports are actually being used by your PCs or other 
devices on your LAN. This monitoring provides an added level of security beyond 
what the firewall provides. However, there are some applications that require the 
gateway to use specific ports to connect over the Internet. 
Use Port Range Forwarding to forward ports from the public Internet to specific IP 
addresses in your local network. Select the Port Range Forwarding tab to open the 
Applications & Gaming Port Range Forwarding page. 
For the Start and End Port, select a port from the recommended 49152 - 65535 range. 
Keep in mind that ports used are program specific so check which ones the program 
requires to be forwarded. Type the port number or range in both boxes. In the IP 
Address box type the name of the computer’s IP address to which this is to apply. 
Note: Port Range Forwarding continually exposes the selected ports to the public 
Internet. This means that the gateway’s firewall is no longer active on these ports. 
The device with the forwarding IP address can be exposed to hacker attacks while 
the port range is being forwarded.  
						

							74  4021192 Rev B 
 
Configure Applications and Gaming 
 
 
Applications and Gaming Port Range Forward Page Description 
Use the descriptions and instructions in the following table to configure the port 
range forwarding for the residential gateway. Select enable for each. After you make 
your selections, click Save Settings to apply your changes or Cancel Changes to 
cancel. 
Section Field Description   
Port Range Forwarding Start 
For the Start port, select a port from the recommended 49152 - 
65535 range. Keep in mind that ports used are program specific 
so check which ones the program requires to be forwarded.  
End 
For the End port, select a port from the recommended 49152 - 
65535 range. Keep in mind that ports used are program specific 
so check which ones the program requires to be forwarded. 
Protocol 
Select one of the following protocols: 
 TCP 
 UDP 
 Both 
IP Address 
Enter the computer’s IP address to which this is to apply. 
Enable 
Check this box to enable port forwarding for the specified ports 
and IP addresses.   
						

							4021192 Rev B  75 
 
 Configure Applications and Gaming 
 
Applications & Gaming > Port Range Triggering 
Port range triggering is a way to dynamically forward ports to a LAN PC that needs 
them at a particular time. That particular time is when it runs a certain application 
that performs some event that trigger the router. This event must be an outbound 
access of a particular port range. 
Select the Port Range Triggering tab to open the Applications & Gaming Port Range 
Triggering page. 
 
Applications and Gaming Port Range Triggering Page Description 
Use the descriptions and instructions in the following table to configure the port 
range triggering for the residential gateway. Select enable for each. After you make 
your selections, click Save Settings to apply your changes or Cancel Changes to 
cancel. 
Section Field Description   
Port Range Triggering 
Triggered Range Start Port 
For the Start port, select a port from the recommended 49152 - 
65535 range. Keep in mind that ports used are program specific 
so check which ones the program requires to be forwarded.  
End Port 
For the End port, select a port from the recommended 49152 - 
65535 range. Keep in mind that ports used are program specific 
so check which ones the program requires to be forwarded. 
Forwarded Range Start Port 
For the Start port, select a port from the recommended 49152 - 
65535 range. Keep in mind that ports used are program specific 
so check which ones the program requires to be forwarded.   
						

							76  4021192 Rev B 
 
Configure Applications and Gaming 
 
Section Field Description   
End Port 
For the End port, select a port from the recommended 49152 - 
65535 range. Keep in mind that ports used are program specific 
so check which ones the program requires to be forwarded. 
Protocol 
Select one of the following protocols: 
 TCP 
 UDP 
 Both 
Enable 
Click the Enable checkbox to enable port range triggering for 
the relevant application.  
Applications & Gaming > DMZ 
Use this page to configure an IP address whose ports are directly exposed to the 
public Internet or to the Wide Area Network (WAN). Demilitarized Zone (DMZ) 
hosting is commonly referred to as exposed host, and allows you to specify a 
recipient of WAN traffic that Network Address Translation (NAT) is unable to 
translate to a known local PC. 
A DMZ is typically used by a company that wants to host its own Internet server. 
DMZ allows one IP address to be placed on the Internet side of the gateway firewall 
while others remain protected behind the firewall. 
The DMZ allows a device to be directly accessible to Internet traffic, such as a web 
(HTTP) server, an FTP server, an SMTP (e-mail) server, and a domain name system 
(DNS) server. Select the DMZ tab to open the Applications & Gaming DMZ page. 
  
						

							4021192 Rev B  77 
 
 Configure Applications and Gaming 
 
Applications and Gaming DMZ Page Description 
Use the descriptions and instructions in the following table to configure the port 
range triggering for the residential gateway. Select enable for each DMZ Host IP 
address. After you make your selections, click Save Settings to apply your changes 
or Cancel Changes to cancel. 
Section Field Description  
DMZ DMZ Hosting 
Select the desired option: 
 Enable  
 Disable (factory default) 
DMZ Host IP Address 
DMZ allows one IP address to be unprotected while others remain 
protected. Enter the IP address of the computer you want to 
expose to the Internet in this field. 
 
  
						

							78  4021192 Rev B 
 
Manage the Gateway 
 
Manage the Gateway 
Administration > Management 
The Administration Management page allows the network’s administrator to 
manage specific gateway functions for access and security. Select the Management 
tab to open the Administration Management page. 
Important: The following page displays when DHCP (factory default) is the 
Connection Mode. The page that displays when Static IP is selected is shown and 
described later in this section. 
 
Administration Management Page Description  
Use the descriptions and instructions in the following table to configure the 
administration management for the residential gateway when DHCP or Static IP 
connection mode is selected. After you make your selections, click Save Settings to 
apply your changes or Cancel Changes to cancel.  
						

							4021192 Rev B  79 
 
 Manage the Gateway 
 
Field Description  
Gateway Setup 
(WAN) 
Internet Connection 
Type 
 
 
 
 
 
 
Connection Mode This setting allows you to determine how the 
WAN (or gateway interface to the Internet) obtains its IP address. 
DHCP (factory default) 
Allows the gateway to obtain a public IP address automatically 
 
Static IP 
Allows you to specify the WAN IP address and corresponding 
server information as static or fixed values that will be used 
whenever the gateway goes online 
 
  
						

							80  4021192 Rev B 
 
Manage the Gateway 
 
Field Description  
 
 
 
 
 
 
 
 
 
 
 
 
MTU 
 
 
 
Gateway Access 
Local Access 
Internet IP Address 
Enter the gateway’s IP address (as seen from the Internet) 
Subnet Mask 
Enter the gateway’s subnet mask (as seen from the Internet, 
including your service provider) 
Default Gateway 
Enter the default gateway of the service provider’s server 
Primary DNS 
Enter the primary domain name server IP address(es) provided by 
your service provider. This is required. 
Secondary DNS 
Enter the secondary domain name server IP address(es) provided 
by your service provider. This is optional. 
MTU size 
MTU is the Maximum Transmission Unit. The MTU size specifies 
the largest packet size permitted for Internet transmission. . The 
factory default = 0 (1500 bytes) 
Current User Name 
Identifies the currently logged in user 
Change Current User Name to 
This field allows you to change your user name. If you want to 
change your user name, enter your new user name in this field 
and click Save Settings to apply the change.  
Note: The factory default user name is a blank field. 
Change Password to 
This field allows you to change your password. If you want to 
change your password, enter your new password in this field. 
Then, re-enter your new password in the Re-Enter New Password 
field and click Save Settings to apply the change. 
Note: The factory default password is a blank field. 
Re-Enter New Password 
Allows you to re-enter the new password. You must enter the 
same password as the one entered in the previous field Change 
Password to. After you re-enter your new password, click Save 
Settings to apply the change.