{"id":4803,"date":"2017-08-22T17:39:13","date_gmt":"2017-08-22T09:39:13","guid":{"rendered":"https:\/\/www.4gltemall.com\/blog\/?p=4803"},"modified":"2017-08-24T21:43:58","modified_gmt":"2017-08-24T13:43:58","slug":"huawei-b618-security-settings","status":"publish","type":"post","link":"https:\/\/www.4gltemall.com\/blog\/huawei-b618-security-settings\/","title":{"rendered":"Huawei B618 Security Settings"},"content":{"rendered":"<ul>\n<li><strong><u>Enabling or Disabling the Firewall<\/u><\/strong><br \/>\nThe\u00a0<strong>Huawei B618 4G Router\u00a0<\/strong>supports the firewall function to control the transmission of data streams and protect your local area network from unauthorized access.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Setting LAN IP Filtering<\/u><\/strong><br \/>\nThe LAN IP address filtering function is used to block specified clients in the LAN from accessing specified Internet services.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Configuring a Virtual Server<\/u><\/strong><br \/>\nThe\u00a0<strong>Huawei B618 4G Router\u00a0<\/strong>supports the virtual server to enable external users to use the services provided in the local area network (LAN) using the Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), and other protocols.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Configuring a Special Application<\/u><\/strong><br \/>\nThe\u00a0<strong>Huawei B618 4G Router\u00a0<\/strong>supports the function to use a special application to configure dynamic port forwarding. Certain applications in the local area network (LAN) must use a specified port of the firewall to access remote applications. To set up a Transmission Control Protocol and User Datagram Protocol (TCP\/UDP) connection between an application in the LAN and a remote application, the firewall uses this port forwarding function to open the required port.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Setting the DMZ<\/u><\/strong><br \/>\nIf external users cannot access certain network services provided by the local area network (LAN), use the DMZ function provided by the\u00a0<strong>Huawei B618 4G Router\u00a0<\/strong>to set the client that provides the required network services as the DMZ host; external users can then access these services properly. DMZ is an acronym for the demilitarized zone in networks.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Setting the SIP ALG<\/u><\/strong><br \/>\nThe Session Initiation Protocol (SIP) is a control protocol at the Application Layer. It is used to initiate, change, or end a session. An application-level gateway (ALG) is a specific application of SIP and is used to check the status of data packages. To complete a SIP application, enable the SIP ALG.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Setting the UPnP<\/u><\/strong><br \/>\nThe Universal Plug and Play (UPnP) service realizes intelligent connection between two UPnP devices using port forwarding. UPnP devices can obtain IP addresses automatically and access the Internet dynamically.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Configuring NAT<\/u><\/strong><br \/>\nNetwork address translation is the process of modifying source and destination IP addresses when IP packets are transmitted across a router or firewall. The purpose of this process is to translate internal (private) IP addresses into external (public) IP addresses to provide a solution to the impending exhaustion of IP addresses.\u00a0<strong>Huawei B618 4G Router\u00a0<\/strong>supports port-restricted cone NAT and symmetric NAT. You can configure the NAT settings as required.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Filtering Specified Websites<\/u><\/strong><br \/>\nThe\u00a0<strong>Huawei B618 4G Router\u00a0<\/strong>enables you to specify and filter websites.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Setting the DDNS<\/u><\/strong><br \/>\nThe Dynamic Domain Name Server (DDNS) is a system that associates a network address with a dynamic IP address. After you configure the DDNS, the\u00a0<strong>Huawei B618 4G Router\u00a0<\/strong>sends the dynamic IP address of a computer to the DDNS. The DDNS then associates the updated IP address with the specified network address so that Internet users can use this network address to access the resources that you provide.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong><u>Filtering Specified Devices<\/u><\/strong><br \/>\nThe MAC filtering function of the\u00a0<strong>Huawei B618 4G Router\u00a0<\/strong>can filter specified devices on the\u00a0<strong>Huawei B618 4G Router<\/strong>\u00a0local area network (LAN) so these devices are prevented from accessing the Internet or other devices on the same LAN.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Enabling or Disabling the Firewall<\/strong><\/p>\n<p>The\u00a0<strong>Huawei B618 LTE Router<\/strong>\u00a0supports the firewall function to control the transmission of data streams and protect your local area network from unauthorized access.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>Firewall<\/strong>.<\/li>\n<li>Select\u00a0<strong>Enable firewall\u00a0<\/strong>to enable the firewall or clear it to disable the firewall.<\/li>\n<\/ol>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<p>Other parameters are available only if you select\u00a0<strong>Enable firewall<\/strong>.<\/p>\n<ol start=\"3\">\n<li>Select\u00a0<strong>Enable IP address filter\u00a0<\/strong>to enable the function of filtering IP addresses.<\/li>\n<li>Select\u00a0<strong>Disable WAN port ping\u00a0<\/strong>to disable the ping function.<\/li>\n<li>Select\u00a0<strong>Enable domain name filter\u00a0<\/strong>to enable the function of filtering URLs.<\/li>\n<li>Select\u00a0<strong>Enable MAC filter\u00a0<\/strong>to enable the MAC filtering function.<\/li>\n<li>Click\u00a0<strong>Apply<\/strong>.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Setting LAN IP Filtering<\/strong><\/p>\n<p>The LAN IP address filtering function is used to block specified clients in the LAN from accessing specified Internet services.<\/p>\n<p><strong>Prerequisite<\/strong><\/p>\n<p>The IP address filtering function is enabled. For details, see\u00a0<u>Enabling or Disabling the Firewall<\/u>.<\/p>\n<p><strong>Context<\/strong><\/p>\n<p>The following table lists common protocols at the application layer of TCP\/IP.<\/p>\n<table width=\"943\">\n<thead>\n<tr>\n<td width=\"8%\"><strong>Protocol<\/strong><\/td>\n<td width=\"9%\"><strong>Default Port<\/strong><\/td>\n<td width=\"82%\"><strong>Service Provided<\/strong><\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td width=\"8%\">HTTP<\/td>\n<td width=\"9%\">80<\/td>\n<td width=\"82%\">Browse web pages.<\/td>\n<\/tr>\n<tr>\n<td width=\"8%\">SMTP<\/td>\n<td width=\"9%\">25<\/td>\n<td width=\"82%\">Send emails.<\/td>\n<\/tr>\n<tr>\n<td width=\"8%\">POP3<\/td>\n<td width=\"9%\">110<\/td>\n<td width=\"82%\">Receive emails.<\/td>\n<\/tr>\n<tr>\n<td width=\"8%\">FTP<\/td>\n<td width=\"9%\">21<\/td>\n<td width=\"82%\">Transfer files.<\/td>\n<\/tr>\n<tr>\n<td width=\"8%\">TELNET<\/td>\n<td width=\"9%\">23<\/td>\n<td width=\"82%\">Log in to a remote computer.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<p>For details about the port used for a service, contact your service provider.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>LAN IP Filter<\/strong>\u00a0.<\/li>\n<li>Choose one of the following options:\n<ul>\n<li><strong>Blacklist<\/strong>: Set the websites that you do not want users to access.<\/li>\n<li><strong>Whitelist<\/strong>: Set the websites that users are allowed to access.<\/li>\n<\/ul>\n<\/li>\n<li>Click\u00a0<strong>Add\u00a0<\/strong>and set the parameters.<\/li>\n<li>Click\u00a0<strong>OK\u00a0<\/strong>to save the settings.<\/li>\n<\/ol>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<ul>\n<li>Click\u00a0<strong>Edit\u00a0<\/strong>to edit a selected item in the list.<\/li>\n<li>Click\u00a0<strong>Delete\u00a0<\/strong>to delete a selected item from the list.<\/li>\n<\/ul>\n<ol start=\"5\">\n<li>Click\u00a0<strong>Apply\u00a0<\/strong>for the settings to take effect.<\/li>\n<\/ol>\n<p><strong>Restricting Clients in a WLAN from Accessing Specified Websites<\/strong><\/p>\n<p>For example, if you want to restrict a client (192.168.1.101) in a WLAN from accessing\u00a0<strong>www.abc.com<\/strong>, perform the following steps:<\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>LAN IP Filter<\/strong>\u00a0.<\/li>\n<li>Select\u00a0<strong>Blacklist<\/strong>.<\/li>\n<li>Click\u00a0<strong>Add\u00a0<\/strong>and set the parameters.<\/li>\n<\/ol>\n<table width=\"871\">\n<tbody>\n<tr>\n<td width=\"14%\"><strong>LAN IP Address<\/strong><\/td>\n<td width=\"85%\">Enter\u00a0<strong>192.168.1.101<\/strong>.<\/p>\n<p><strong>NOTE:<\/strong><\/p>\n<p>You can view the IP addresses of the clients connected to the\u00a0<strong>Huawei B618<\/strong>\u00a0under the\u00a0<strong>Connected WLAN clients<\/strong>\u00a0section on the\u00a0<strong>Statistics<\/strong>\u00a0page.<\/td>\n<\/tr>\n<tr>\n<td width=\"14%\"><strong>LAN Port<\/strong><\/td>\n<td width=\"85%\">Enter\u00a0<strong>80<\/strong>.<\/td>\n<\/tr>\n<tr>\n<td width=\"14%\"><strong>WAN IP Address<\/strong><\/td>\n<td width=\"85%\">a.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 On your computer, choose\u00a0<strong>Start<\/strong>\u00a0&gt;\u00a0<strong>Run<\/strong>.<\/p>\n<p>b.\u00a0\u00a0\u00a0\u00a0\u00a0 Enter\u00a0<strong>cmd<\/strong>\u00a0and press\u00a0<strong>Enter<\/strong>.<\/p>\n<p>c.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 In the displayed window, enter\u00a0<strong>ping www.abc.com<\/strong>\u00a0and press\u00a0<strong>Enter<\/strong>.<\/p>\n<p>d.\u00a0\u00a0\u00a0\u00a0\u00a0 View the IP address of\u00a0<strong>www.abc.com<\/strong>. For example, it is\u00a0<strong>1.2.3.4<\/strong>.<\/p>\n<p>e.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 In the text box for\u00a0<strong>Huawei B618<\/strong>, enter\u00a0<strong>1.2.3.4<\/strong>.<\/p>\n<p><strong>NOTE:<\/strong><\/p>\n<p>The Windows 7 operating system is used in this example to describe how to obtain WAN IP addresses.<\/td>\n<\/tr>\n<tr>\n<td width=\"14%\"><strong>WAN Port<\/strong><\/td>\n<td width=\"85%\">Enter\u00a0<strong>80<\/strong>.<\/td>\n<\/tr>\n<tr>\n<td width=\"14%\"><strong>Protocol<\/strong><\/td>\n<td width=\"85%\">Select\u00a0<strong>TCP\/UDP<\/strong>.<\/p>\n<p><strong>NOTE:<\/strong><\/p>\n<p>If you do not know the protocol, select\u00a0<strong>TCP\/UDP<\/strong>. The\u00a0<strong>Mobile Broadband<\/strong>\u00a0will automatically select an appropriate protocol.<\/td>\n<\/tr>\n<tr>\n<td width=\"14%\"><strong>Status<\/strong><\/td>\n<td width=\"85%\">Select\u00a0<strong>On<\/strong>.<\/td>\n<\/tr>\n<tr>\n<td width=\"14%\"><strong>Options<\/strong><\/td>\n<td width=\"85%\">Click\u00a0<strong>OK<\/strong>.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"4\">\n<li>Click\u00a0<strong>Apply\u00a0<\/strong>for the settings to take effect.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Configuring a Virtual Server<\/strong><\/p>\n<p>The\u00a0<strong>Huawei B618 LTE CPE<\/strong>\u00a0supports the virtual server to enable external users to use the services provided in the local area network (LAN) using the Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), and other protocols.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>Virtual Server<\/strong>\u00a0.<\/li>\n<li>Click\u00a0<strong>Add\u00a0<\/strong>and set the parameters.<\/li>\n<li>Click\u00a0<strong>OK\u00a0<\/strong>to save the settings.<\/li>\n<\/ol>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<ul>\n<li><strong>Edit<\/strong>: to edit an item.<\/li>\n<li><strong>Delete<\/strong>: to delete an item.<\/li>\n<\/ul>\n<ol start=\"4\">\n<li>Click\u00a0<strong>Apply\u00a0<\/strong>for the settings to take effect.<\/li>\n<\/ol>\n<p><strong>Configuring an FTP Server<\/strong><\/p>\n<p>To enable a client whose IP address is 192.168.8.101 to provide FTP services and be accessed by external users, do the following:<\/p>\n<ol>\n<li>Configure a virtual server.<\/li>\n<\/ol>\n<table width=\"871\">\n<tbody>\n<tr>\n<td width=\"16%\"><strong>Name<\/strong><\/td>\n<td width=\"16%\"><strong>WAN Port<\/strong><\/td>\n<td width=\"16%\"><strong>LAN IP Address<\/strong><\/td>\n<td width=\"16%\"><strong>LAN Port<\/strong><\/td>\n<td width=\"16%\"><strong>Protocol<\/strong><\/td>\n<td width=\"16%\"><strong>Status<\/strong><\/td>\n<\/tr>\n<tr>\n<td width=\"16%\">My FTP server<\/td>\n<td width=\"16%\">21-22<\/td>\n<td width=\"16%\">192.168.8.101<\/td>\n<td width=\"16%\">23-24<\/td>\n<td width=\"16%\"><strong>TCP<\/strong><\/td>\n<td width=\"16%\"><strong>On<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"2\">\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>System<\/strong>\u00a0&gt;\u00a0<strong>Device Information<\/strong>\u00a0, view the wide area network (WAN) IP address of the\u00a0<strong>Huawei B618<\/strong>. For example 10.2.1.123.<\/li>\n<li>In the browser of an external user, enter the FTP server address (<strong>ftp:\/\/10.2.1.123<\/strong>) and access the FTP services provided by the client whose IP address is 192.168.8.101.<\/li>\n<\/ol>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<p>If the default service port is 21-22, the external user should enter\u00a0<strong>ftp:\/\/10.2.1.123:21<\/strong>\u00a0or\u00a0<strong>ftp:\/\/10.2.1.123:22<\/strong>\u00a0to access the FTP server.<\/p>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Configuring a Special Application<\/strong><\/p>\n<p>The\u00a0<strong>Huawei B618 LTE CPE<\/strong>\u00a0supports the function to use a special application to configure dynamic port forwarding. Certain applications in the local area network (LAN) must use a specified port of the firewall to access remote applications. To set up a Transmission Control Protocol and User Datagram Protocol (TCP\/UDP) connection between an application in the LAN and a remote application, the firewall uses this port forwarding function to open the required port.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>Special Applications<\/strong>.<\/li>\n<li>Click\u00a0<strong>Add\u00a0<\/strong>and set the parameters.<\/li>\n<li>Click\u00a0<strong>OK\u00a0<\/strong>to save the settings.<\/li>\n<\/ol>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<ul>\n<li><strong>Edit<\/strong>: to edit an item.<\/li>\n<li><strong>Delete<\/strong>: to delete an item.<\/li>\n<\/ul>\n<ol start=\"4\">\n<li>Click\u00a0<strong>Apply\u00a0<\/strong>for the settings to take effect.<\/li>\n<\/ol>\n<p><strong>Example of the Configuration of a Special Application<\/strong><\/p>\n<p>A client in the LAN uses TCP to access the MSN game server through port 47624. When the game starts, the game server uses TCP and port 2400 to set up a connection to the client that tries to access the server. In this case, you must configure dynamic port forwarding, because the game conflicts with the following default firewall rules:<\/p>\n<ul>\n<li>The firewall blocks external data input.<\/li>\n<li>The game server can send a connection request to the external IP address of the\u00a0<strong>Huawei B618\u00a0<\/strong>but cannot send the request to the LAN client that tries to access the game server, because the IP addresses of clients are not open to external devices.<\/li>\n<\/ul>\n<p>To solve this problem, you must define a set of port forwarding rules. When the client in the LAN sends data to TCP port 47624, the rules allow data input from TCP port 2400. Then data from the game server can be received from and transmitted to the LAN client that sends data to TCP port 47624.<\/p>\n<table width=\"943\">\n<tbody>\n<tr>\n<td width=\"16%\"><strong>Name<\/strong><\/td>\n<td width=\"16%\"><strong>Status<\/strong><\/td>\n<td width=\"16%\"><strong>Trigger Port<\/strong><\/td>\n<td width=\"16%\"><strong>Trigger Protocol<\/strong><\/td>\n<td width=\"16%\"><strong>Open Protocol<\/strong><\/td>\n<td width=\"16%\"><strong>Open Port<\/strong><\/td>\n<\/tr>\n<tr>\n<td width=\"16%\">MSN Gaming Zone<\/td>\n<td width=\"16%\"><strong>On<\/strong><\/td>\n<td width=\"16%\">47624<\/td>\n<td width=\"16%\"><strong>TCP<\/strong><\/td>\n<td width=\"16%\"><strong>TCP<\/strong><\/td>\n<td width=\"16%\">2400<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<p>For details about\u00a0<strong>Trigger Port<\/strong>,\u00a0<strong>Open Port<\/strong>,\u00a0<strong>Trigger Protocol<\/strong>, and\u00a0<strong>Open Protocol<\/strong>, contact your service provider.<\/p>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Setting the DMZ<\/strong><\/p>\n<p>If external users cannot access certain network services provided by the local area network (LAN), use the DMZ function provided by the\u00a0<strong>Huawei B618<\/strong>\u00a0to set the client that provides the required network services as the DMZ host; external users can then access these services properly. DMZ is an acronym for the demilitarized zone in networks.<\/p>\n<p><strong>Prerequisite<\/strong><\/p>\n<p>DMZ users are not protected by the firewall and may be easily attacked. In addition, the security of other users in the LAN is compromised.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>DMZ Settings<\/strong>.<\/li>\n<li>Select:\n<ul>\n<li><strong>Enable<\/strong>: to enable the DMZ function.<\/li>\n<li><strong>Disable<\/strong>: to disable the DMZ function.<\/li>\n<\/ul>\n<\/li>\n<li>In\u00a0<strong>DMZ IP address:<\/strong>, enter the IP address of the client to be set as the DMZ host.<\/li>\n<\/ol>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<p>One client can be set as the DMZ host at a time.<\/p>\n<ol start=\"4\">\n<li>Click\u00a0<strong>Apply<\/strong>.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Setting the SIP ALG<\/strong><\/p>\n<p>The Session Initiation Protocol (SIP) is a control protocol at the Application Layer. It is used to initiate, change, or end a session. An application-level gateway (ALG) is a specific application of SIP and is used to check the status of data packages. To complete a SIP application, enable the SIP ALG.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>SIP ALG Settings<\/strong>.<\/li>\n<li>Select\u00a0<strong>Enable SIP ALG\u00a0<\/strong>to enable the SIP ALG.<\/li>\n<li>In\u00a0<strong>SIP port<\/strong>, enter the SIP port number provided by your service provider.<\/li>\n<li>Click\u00a0<strong>Apply<\/strong>.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Setting the UPnP<\/strong><\/p>\n<p>The Universal Plug and Play (UPnP) service realizes intelligent connection between two UPnP devices using port forwarding. UPnP devices can obtain IP addresses automatically and access the Internet dynamically.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>UPnP Settings<\/strong>.<\/li>\n<li>Select:\n<ul>\n<li><strong>Enable<\/strong>: to enable the UPnP service.<\/li>\n<li><strong>Disable<\/strong>: to disable the UPnP service.<\/li>\n<\/ul>\n<\/li>\n<li>Click\u00a0<strong>Apply<\/strong>.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Configuring NAT<\/strong><\/p>\n<p>Network address translation is the process of modifying source and destination IP addresses when IP packets are transmitted across a router or firewall. The purpose of this process is to translate internal (private) IP addresses into external (public) IP addresses to provide a solution to the impending exhaustion of IP addresses.<strong> Huawei B618 LTE CPE<\/strong>\u00a0supports port-restricted cone NAT and symmetric NAT. You can configure the NAT settings as required.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>NAT Settings<\/strong>.<\/li>\n<li>Select from the following options:\n<ul>\n<li><strong>Cone<\/strong>: to enable port-restricted cone NAT. This type of NAT are more compatible with applications (including applications on game devices), although it provides lower security.<\/li>\n<li><strong>Symmetric<\/strong>: to enable symmetric NAT. This type of NAT are generally adopted by gateways with higher security.<\/li>\n<\/ul>\n<\/li>\n<li>Click\u00a0<strong>Apply<\/strong>.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Filtering Specified Websites<\/strong><\/p>\n<p>The\u00a0<strong>Huawei B618 LTE Gateway<\/strong>\u00a0enables you to specify and filter websites.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>Domain Name Filter<\/strong>.<\/li>\n<li>Choose one of the following options:\n<ul>\n<li><strong>Blacklist<\/strong>: Set the websites that you do not want users to access.<\/li>\n<li><strong>Whitelist<\/strong>: Set the websites that users are allowed to access.<\/li>\n<\/ul>\n<\/li>\n<li>Click\u00a0<strong>Add<\/strong>.<\/li>\n<li>In\u00a0<strong>Domain Name<\/strong>, enter the address of the website you want to filter.<\/li>\n<li>From the\u00a0<strong>Status\u00a0<\/strong>drop-down list, select\u00a0<strong>On<\/strong>.<\/li>\n<li>Click\u00a0<strong>OK<\/strong>.<\/li>\n<li>Click\u00a0<strong>Apply<\/strong>for the settings to take effect.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Setting the DDNS<\/strong><\/p>\n<p>The Dynamic Domain Name Server (DDNS) is a system that associates a network address with a dynamic IP address. After you configure the DDNS, the\u00a0<strong>Huawei B618<\/strong>\u00a0sends the dynamic IP address of a computer to the DDNS. The DDNS then associates the updated IP address with the specified network address so that Internet users can use this network address to access the resources that you provide.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>DDNS<\/strong>.<\/li>\n<li>Click\u00a0<strong>Add<\/strong>.<\/li>\n<li>Set DDNS parameters.<\/li>\n<\/ol>\n<p><strong>\u00a0NOTE:<\/strong><\/p>\n<p>The user name and password must be registered on the website of the DDNS service provider.<\/p>\n<ol start=\"4\">\n<li>Click\u00a0<strong>OK<\/strong>.<\/li>\n<\/ol>\n<p><strong>Example<\/strong><\/p>\n<p>To share large files or videos with Internet users:<\/p>\n<ol>\n<li>Register a DDNS user name and password on a DDNS service provider. For example, register an account with both the user name and password as\u00a0<strong>admin\u00a0<\/strong>on\u00a0<a href=\"http:\/\/www.dyndns.org\/\">http:\/\/www.dyndns.org\/<\/a>.<\/li>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>DDNS<\/strong>.<\/li>\n<\/ol>\n<table width=\"871\">\n<tbody>\n<tr>\n<td width=\"20%\"><strong>Service Provider<\/strong><\/td>\n<td width=\"20%\"><strong>Status<\/strong><\/td>\n<td width=\"20%\"><strong>Domain Name<\/strong><\/td>\n<td width=\"20%\"><strong>User name<\/strong><\/td>\n<td width=\"20%\"><strong>Password<\/strong><\/td>\n<\/tr>\n<tr>\n<td width=\"20%\"><strong>DynDNS.org<\/strong><\/td>\n<td width=\"20%\"><strong>On<\/strong><\/td>\n<td width=\"20%\"><strong>www.abc.com<\/strong><\/td>\n<td width=\"20%\"><strong>admin<\/strong><\/td>\n<td width=\"20%\"><strong>admin<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol start=\"3\">\n<li>Click\u00a0<strong>OK<\/strong>.<\/li>\n<li>Internet users will then be able to access your resources by accessing\u00a0<strong>abc.com<\/strong>from their browsers.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p><strong>Filtering Specified Devices<\/strong><\/p>\n<p>The MAC filtering function of the\u00a0<strong>Huawei B618 4G Router<\/strong>\u00a0can filter specified devices on the\u00a0<strong>Huawei B618 4G Router<\/strong>\u00a0local area network (LAN) so these devices are prevented from accessing the Internet or other devices on the same LAN.<\/p>\n<p><strong>Procedure<\/strong><\/p>\n<ol>\n<li>Choose\u00a0<strong>Settings<\/strong>&gt;\u00a0<strong>Security<\/strong>\u00a0&gt;\u00a0<strong>MAC Filter<\/strong>.<\/li>\n<li>Select an MAC filtering mode from the\u00a0<strong>Filtering mode:\u00a0<\/strong>drop-down list box.\n<ul>\n<li><strong>Disable<\/strong>: Disable the MAC filtering function.<\/li>\n<li><strong>Allow<\/strong>: If the MAC address of a client is in the\u00a0<strong>MAC Address\u00a0<\/strong>list, the client is allowed to connect to the\u00a0<strong>Huawei B618 4G Router<\/strong>.<\/li>\n<li><strong>Deny<\/strong>: If the MAC address of a client is in the\u00a0<strong>MAC Address\u00a0<\/strong>list, the client is not allowed to connect to the\u00a0<strong>Huawei B618 4G Router<\/strong>.<\/li>\n<\/ul>\n<\/li>\n<li>In the\u00a0<strong>MAC Address\u00a0<\/strong>text box, enter the MAC address of the client you want to filter.<\/li>\n<li>Click\u00a0<strong>Apply<\/strong>.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Check more details about Huawei B618 4G Router here:\u00a0<a href=\"https:\/\/www.4gltemall.com\/huawei-b618-lte-cat11-router.html\">https:\/\/www.4gltemall.com\/huawei-b618-lte-cat11-router.html<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enabling or Disabling the Firewall The\u00a0Huawei B618 4G Router\u00a0supports the firewall function to control the transmission of data streams and protect your local area network from unauthorized access. &nbsp; Setting LAN IP Filtering The LAN IP address filtering function is used to block specified clients in the LAN from accessing specified Internet services. &nbsp; Configuring &hellip; <a href=\"https:\/\/www.4gltemall.com\/blog\/huawei-b618-security-settings\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Huawei B618 Security Settings<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[258,3,1156,35,2305],"tags":[2326,2331,2327,2332,2324,2325,2330,2328,2329],"_links":{"self":[{"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/posts\/4803"}],"collection":[{"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/comments?post=4803"}],"version-history":[{"count":2,"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/posts\/4803\/revisions"}],"predecessor-version":[{"id":4866,"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/posts\/4803\/revisions\/4866"}],"wp:attachment":[{"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/media?parent=4803"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/categories?post=4803"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.4gltemall.com\/blog\/wp-json\/wp\/v2\/tags?post=4803"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}