33Chapter 6: Network TabAirRouter HP User GuideUbiquiti Networks, Inc.SOHO Router > Multicast RoutingSettingsWith a multicast design, applications can send one copyof each packet and address it to a group of computersthat want to receive it. This technique addresses packetsto a group of receivers rather than to a single receiver.It depends on the network to forward the packetsto the hosts which need to receive them. Commonrouters isolate all the broadcast (thus multicast) trafficbetween the internal and external networks, however theAirRouter HP provides the multicast traffic pass-throughfunctionality.Enable Multicast Routing Option enables multicastpacket pass-through between internal and externalnetworks while the AirRouter HP is operating in Routermode. Multicast intercommunication is based on InternetGroup Management Protocol (IGMP).Multicast Upstream Specify the source of Multicasttraffic, i.e. defines where multicast traffic comes from.SOHO Router > Firewall SettingsFirewall functionality on any router interface can beenabled using the Enable Firewall option. Router Firewallrules can be configured, enabled or disabled in theFirewall configuration window which is opened by clickingConfigure.Firewall entries can be specified by using the followingcriteria:• Interface The interface (WLAN, LAN or PPP) wherefiltering of the incoming/passing-through packets isprocessed.• IP Type Sets which particular L3 protocol type (IP, ICMP,TCP, UDP, P2P) should be filtered.• Source IP/Mask The source IP of the packet (specifiedwithin the packet header), usually it is the IP of the hostsystem which sends the packets.• Src Port The source port of the TCP/UDP packet(specified within the packet header), usually it is the portof the host system application which sends the packets.• Destination IP/mask The destination IP of the packet(specified within the packet header), usually it is the IPof the system which the packet is addressed to.• Dst Port The destination port of the TCP/UDP packet(specified within the packet header), usually it is theport of the host system application which the packet isaddressed to.• Comment Field used to enter a brief description of thefirewall entry.• On Enables or disables the effect of the particularfirewall entry. All the added firewall entries are saved inthe system configuration file, however only the enabledfirewall entries will be active during AirRouter HPoperation.• Not Can be used for inverting the Source IP/mask,Source Port, Destination IP/mask and Destination Portfiltering criteria (i.e. if not is enabled for the specifiedDestination Port value 443, the filtering criteria will beapplied to all the packets sent to any Destination Portexcept the 443 which is commonly used by HTTPS).Firewall entries can be saved by clicking Save or discardedby clicking Cancel in the Firewall configuration window.All active firewall entries are stored in the FIREWALL chainof the iptables filter table, while the device is operatingin Router mode. Please refer to the iptables tutorial fordetailed description of the firewall functionality in Routermode.Click Change to save the changes made on the Networktab.