21Chapter 6: Network TabAirRouter HP User GuideUbiquiti Networks, Inc.Comment Field used to enter a brief description of thefirewall entry.On Enables or disables the effect of the particular firewallentry. All added firewall entries are saved in systemconfiguration file, however only the enabled firewallentries will be active on the AirRouter HP.Not Can be used for inverting the Source IP/mask, SourcePort, Destination IP/mask and Destination Port filteringcriteria (i.e. if not is enabled for the specified DestinationPort value 443, the filtering criteria will be applied to allthe packets sent to any Destination Port except the 443which is commonly used by HTTPS).Click Save to save your firewall entries or click Cancel todiscard your changes.All active firewall entries are stored in the FIREWALL chainof the ebtables filter table, while the device is operatingin Bridge mode. Please refer to the ebtables manual for adetailed description of the firewall functionality in Bridgemode.Click Change to save the changes made in the Networktab.Bridge > Static RoutesIn this section you can manually add static routing rules tothe System Routing Table, this allows you to specify that aspecific target IP address (es) passes through a determinedgateway. Click Configure to add an entry.For each entry you must specify a valid Target Network IP,Netmask, Gateway IP, and optionally a comment. SelectOn to enable the rule. Click Save to save your entries orCancel to discard them.RouterThe role of the LAN and WLAN interface will changedepending on the Wireless Mode selected while theAirRouter HP is operating in Router mode:• The wireless interface and all connected wireless clientsare considered as part of the internal LAN and theEthernet interface is dedicated for the connection to theexternal network while the AirRouter HP is operating inAccess Point or Access Point WDS mode.• The wireless interface and all of the connected wirelessclients are considered part of the external networkand all network devices on the LAN side as well as theEthernet interface itself are considered as part of theinternal network when the AirRouter HP is operating inStation or Station WDS mode.Wireless/wired clients are routed from the internalnetwork to the external one by default. Network AddressTranslation (NAT) functionality works the same way.Router > WLAN Network SettingsIP Address This is the IP address to be represented bythe WLAN interface which is connected to the internalnetwork according to the wireless operation modedescribed above. This IP will be used for the routing ofthe internal network (it will be the Gateway IP for allthe devices connected on the internal network). This IPaddress can be used to access the management interfaceof the AirRouter HP.