Wiki of WFilter NG Firewall - User contributions [en]

File:Wfilter event3.png

2026-05-18T07:21:19Z

WFilter:

File:Wfilter event2.png

2026-05-18T07:21:09Z

WFilter:

File:Wfilter event1.png

2026-05-18T07:20:15Z

WFilter:

Event

2026-05-18T07:20:06Z

WFilter: Created page with "{{DISPLAYTITLE:Events}} "Events List" is used to record various events that occur during system operation. There are three types of event information: "Information", "Alert" ..."

{{DISPLAYTITLE:Events}}

"Events List" is used to record various events that occur during system operation. There are three types of event information: "Information", "Alert" and "Error":

* Information: Log-type event information, such as operation logs, restarts, upgrades, etc.
* Alert: Warning events that require attention.
* Error: Critical events that require immediate action.

= Settings =

* Events to be recorded
* Admin Email(s): forward events to admin email boxes. SMTP settings shall be enabled in "Config->System->Email".
* Events to be forwarded: forward events to a syslog server or webhook service.

[[File: wfilter_event1.png|650px]]

[[File: wfilter_event2.png|450px]]

[[File: wfilter_event3.png|450px]]

Maccd

2026-04-01T08:30:34Z

WFilter:

{{DISPLAYTITLE:MAC Detector}}
== MAC Detector ==

"MAC Detector" can gather client's physical MAC addresses via SNMP protocol. With "MAC Detector" enabled, you can:
* Set access policy by MAC addresses.
* Set IP-MAC binding in a multiple-segments network.
* Show real MAC addresses in "Real-time Bandwidth".
* Show real MAC addresses in "Internet Usage".

== Settings ==
== SNMP Commands ==
"MAC Detector" use snmpwalk commands to send SNMP query to manageable devices. Usually, the snmpwalk commands are sent to routing devices, for example: core three-layer switch, or manageable wireless AP.
* "SNMP Commands": snmpwalk commands be sent to the manageable devices. Multiple commands are supported.
* "Result Format": a regular expression which matches ONE record row.

=== Example ===
Suppose the core three layer switch has ip address "192.168.1.2", the "SNMP Command" is:

''snmpwalk -v 2c -c public 192.168.1.2 ipNetToPhysicalPhysAddress''

"ipNetToPhysicalPhysAddress" can retrieve both IPv4 and IPv6 addresses, you also can use "ipNetToMediaPhysAddress" for IPv4 only. The real return message is:

''IP-MIB::ipNetToPhysicalPhysAddress.9.192.168.1.1 = STRING: 0:6:f6:bf:8b:cc''

''IP-MIB::ipNetToPhysicalPhysAddress.9.192.168.1.11 = STRING: ae:15:53:a0:9b:7f''
...

To match every return rows, we configure the "result format" as:

''IP-MIB::ipNetToPhysicalPhysAddress\.\d+.*''

The "MAC Detector" will use the "result format" to get every record and retrieve the mac and ip information.

[[File:Maccd00.jpg|750px]]

=== Test ===

You may click "test" to test the SNMP commands in the list.

[[File:Maccd01.jpg|750px]]

== FAQ ==

File:Faq account005.png

2025-08-20T02:58:39Z

WFilter:

Account

2025-08-20T02:58:17Z

WFilter: /* Password Complexity and Expiry */

{{DISPLAYTITLE:Accounts}}
== Introduction ==

This module defines WFilter NGF's local accounts of, which can be used for:
* [[Pppoe|PPPoE]]
* [[Webauth|Web Auth]]
* [[VPN]]
* Set access policy by users.
* Record internet activity by users.
For example, you can choose usernames in "Applied to" targets for polices:

[[File:Faq_en_account002.png|600px]]

== New Local Account ==

You need to configure account's username, password, valid date, group, sessions, mac binding, access priviledge and pppoe properties.
* Supported access type:
** PPPoE: allow this user to access WFilter NGF's pppoe service. Please check [[Pppoe|PPPoE]] for details.
** VPN: allow this user to connect to vpn service. Please check [[VPN]] for details.
** Web: allow this user to authenticate via web auth. Please check [[Webauth|Web Auth]] for details.
** Static IP: bind static IP to an username.
* "Concurrent Logins": maximum concurrent sessions of this user. No limit by default.
* "MAC Binding": supports "dynamic binding" and "static binding".
** Static: this user can only be connected from the bound MAC addresses. Multiple MACs are separated by commas.
** Dynamic1: bind this user to MAC address of the first time connection.
** Dynamic3: automatically bind the first three authenticated mac addresses.
** Dynamic5: automatically bind the first five authenticated mac addresses.
** Automatic IP-MAC binding: automatically add IP-MAC addresses to "IP-MAC binding".
* Expired users can not access any authentication service.
* PPPoE properties are only valid to PPPoE users.
** "Bandwidth Limit": limit this user's real-time bandwidth rate.
** "Static IP": assign a static ip address to this user when this user is connected via pppoe or VPN.
[[File:Faq_en_account001.png|600px]]

== Third Party Accounts ==
Users authenticated via third party authentication services will be listed. You can click "delete" to delete expired users.
* Third party authentication
** "Email Authentication".
** "Ldap Authentication".
** "Radius Authentication".
* Access Type:
** webauth: access via [[webauth|Web Auth]].
** pppoe: access via [[pppoe|PPPoE]].
** vpn: access via [[VPN|VPN]].

[[File:Faq_account004.png|800px]]

== Login History ==
Login history of users.

[[File:Faq_account003.png|800px]]

== Settings ==
=== Password Complexity and Expiry ===
* Password Complexity. The following four password complexity requirements are supported:
** None: No complexity requirements for passwords.
** Basic level: The minimum length is 6. Common weak passwords, keyboard character sequences, repeated keys more than 3 times, and account name information are not allowed.
** Intermediate level: On the basis of meeting the basic level, it also requires a minimum length of 8 and must contain 3 or more types of characters (uppercase letters, lowercase letters, numbers, special characters).
** High strength: On the basis of meeting the basic level, it also requires a minimum length of 12 and must contain all 4 types of characters (uppercase letters, lowercase letters, numbers, special characters).
* Password Expiry. When password is expired, user will be redirected to password page upon successful logon.

[[File:Faq_account005.png|800px]]

== FAQ ==

Account

2025-08-20T02:58:04Z

WFilter:

Main Page

2025-07-10T04:26:19Z

WFilter: /* Links */

{{DISPLAYTITLE:WFilter NG Firewall Documents}}
__NOTOC__

  '''WFilter NG Firewall''' is a [http://www.wfilterngf.com linux based next generation firewall and internet content filtering system].<br>
  This site provides official documents for '''WFilter NG Firewall'''. For [http://www.wfiltericf.com/WFilter.htm WFilter ICF], please check [http://wiki.wfiltericf.com Documents of WFilter ICF].<br>
  If you can not find a solution here, please [http://www.wfiltericf.com/contact.htm contact us].<br><br>

= Using WFilter NG Firewall=
* [[NewUser|Installation]]
* [[Getting Started with WFilter ROS|Getting Started]]
* [[Settings|Modules and Settings]]

= Solutions =
* [[Bandwidth_Solutions|Bandwidth Optimization solutions]]
* [[Account_Solutions|Active directory Integration]]
* [[Maccd_Solutions|By MAC address monitoring solutions]]
* [[ISP_Solutions|ISP management solutions]]
* [[WFilter_NGF_WiFi|Wifi monitoring solutions]]
* [[IPv6|IPv6]]

= Others =
* [[WFilterROS_License|License]]
* [[About_WFilterROS|About WFilter NG Firewall]]
* [[Errorcode|Errorcode]]

= Links =
* [http://www.wfilterngf.com/download.htm Downloads]
* [http://www.wfiltericf.com/protocols/getlist.php Protocols]
* [http://blog.wfilterngf.com Blog of WFilter NG Firewall]

SD-WAN

2025-07-10T04:24:26Z

WFilter: /* Cross-Platform clients */

== SD-WAN ==

SD-WAN is an integration of the ZeroTier networking. With SD-WAN, you are able to:
* Network virtualization: setup SD-WAN subnets and join multiple devices/networks together.
* End-to-End encryption
* Set up a VPN without needing a static public IP address.

== Server Settings ==

Server settings of WFilter SD-WAN can be accessed in [http://cloud.wfilterngf.com/management WFilter Cloud Service].

[[File:sdwan001.png|800px]]

=== Networks ===

Click "New network" to create a new sdwan subnet.

[[File:sdwan_network01.png|450px]]

* Net ID: SD-WAN network id
* Net Name: network description
* Start/End IP: DHCP IP address range

[[File:sdwan_network02.png|450px]]

To join multiple networks together, you need to setup routing policies. As shown below, network "192.168.1.0/24" can be reached via "10.200.188.1", while network "192.168.2.0/24" can be reached via "10.200.188.2". So these two networks are reachable from each side.

[[File:sdwan_network03.png|450px]]

== Client Settings ==

In WFilter NGF, you can join SD-WAN networks in the "VPN"->"SD-WAN" module.
* SD-WAN secret: SD-WAN client id
* Zone: zone firewall ACL rules will be applied. Please check [[firewallrule|Firewall Rules]]

[[File:sdwan_client01.png|800px]]

[[File:sdwan_client02.png|800px]]

[[File:sdwan_client03.png|800px]]

Client is denied by default, you also need to authorize clients in the server side.

[[File:sdwan_client04.png|450px]]

== Cross-Platform clients ==

WFilter's SD-WAN networks are compatible with ZeroTier clients, and you may download clients for other operating systems here: [https://www.zerotier.com/download/ zerotier download]

= Links =
* [http://blog.wfilterngf.com/?p=660 How to setup site-to-site VPN with WFilter’s SD-WAN service?]

[[Category:VPN]]

WSGCloud

2025-07-10T04:22:00Z

WFilter: /* Related Links */

{{DISPLAYTITLE:WFilter cloud service}}

= Overview =

The WFilter cloud service offers a centralized service for managing multiple wfilter devices. The following functions can be achieved:
* View device address, system version, IP address, and alert information
* Synchronize configurations
* Access the management interface via Internet

[[File:cloud_dashboard1.png|800px]]

The cloud service has following modules: Devices(management of wfilter devices), Configurations(create and synchronize configurations), and Operators(manage operators of the cloud service).

'''Please note: relaying of wfilter web UI is via our website wfilterngf.com, so the speed is not as fast as direct access.'''

= User Registration =

Click "Sign up" to create a new user. The username must be an email address, which can also be used to reset the password.

[[File:cloud_register.png|450px]]

[[File:cloud_register2.png|450px]]

In "Operators", multiple operators can be added. Operators can manage the devices and configurations under this account.

[[File:cloud_user1.png|800px]]

= Device management =
== WFilter side ==
In WFilter, the SDWAN module shall be enabled and join the cloud service network.(network ID is displayed in the upper right corner of the cloud service webpage).

[[File:cloud_clients3.png|800px]]

== Join WFilter device to the cloud service ==

In the "Devices" of the cloud service, click "New device" and enter the device's SDWAN ID, username, and password. The cloud service will retrieve information such as the status and configuration of the terminal device through WFilter API. So correct username and password shall be provided. If "Set as Template" is selected, you can also create configurations from the template in "Configurations".

[[File:cloud_clients2.png|600px]]

Click the query icon to open the web UI of wfilter device. Please note: Only one web UI can be opened at a time.

[[File:cloud_clients1.png|800px]]

= Configurations =

In "Configurations", click "New configure template" to create a configuration from a template device. As shown in the figure below:

[[File:cloud_settings1.png|800px]]

Click the "Deploy" icon to synchronize the configuration to other devices. As shown in the figure below:

[[File:cloud_settings3.png|800px]]

[[File:cloud_settings2.png|800px]]

'''Please note: synchronizing the network or firewall settings of a device may cause it to lose network connectivity. Use it with caution. You're recommended to test it locally before synchronizing to other terminals.'''

= Restricting login IPs =

If you have restricted the login IP addresses in Config - System - Operators, you need to add the cloud service's IP address (10.192.0.1) to the allowed IP list.

= Related Links =

* [http://cloud.wfilterngf.com/management WFilter Cloud Service]
* [http://cloud.imfirewall.com/management WSG Cloud Service(Chinese version)]
* [http://blog.wfilterngf.com/?p=658 Remote management via the WFilter cloud service.]

[[Category:Solutions]]

SD-WAN

2025-07-07T04:29:44Z

WFilter: /* SD-WAN */

File:Sdwan client04.png

2025-07-06T08:33:35Z

WFilter:

SD-WAN

2025-07-06T08:31:28Z

WFilter: /* Client Settings */

== SD-WAN ==

SD-WAN is an integration of the ZeroTier networking. With SD-WAN, you are able to:
* Network virtualization: setup SD-WAN subnets and join multiple devices/networks together.
* End-to-End encryption
* Setup VPN without a static public IP address.

== Server Settings ==

Server settings of WFilter SD-WAN can be accessed in [http://cloud.wfilterngf.com/management WFilter Cloud Service].

[[File:sdwan001.png|800px]]

=== Networks ===

Click "New network" to create a new sdwan subnet.

[[File:sdwan_network01.png|450px]]

* Net ID: SD-WAN network id
* Net Name: network description
* Start/End IP: DHCP IP address range

[[File:sdwan_network02.png|450px]]

To join multiple networks together, you need to setup routing policies. As shown below, network "192.168.1.0/24" can be reached via "10.200.188.1", while network "192.168.2.0/24" can be reached via "10.200.188.2". So these two networks are reachable from each side.

[[File:sdwan_network03.png|450px]]

== Client Settings ==

In WFilter NGF, you can join SD-WAN networks in the "VPN"->"SD-WAN" module.
* SD-WAN secret: SD-WAN client id
* Zone: zone firewall ACL rules will be applied. Please check [[firewallrule|Firewall Rules]]

[[File:sdwan_client01.png|800px]]

[[File:sdwan_client02.png|800px]]

[[File:sdwan_client03.png|800px]]

Client is denied by default, you also need to authorize clients in the server side.

[[File:sdwan_client04.png|450px]]

== Cross-Platform clients ==

WFilter's SD-WAN networks are compatible with ZeroTier clients, and you may download clients for other operating systems here: [https://www.zerotier.com/download/ zerotier download]

[[Category:VPN]]

File:Sdwan client03.png

2025-07-06T08:15:29Z

WFilter:

File:Sdwan client02.png

2025-07-06T08:15:07Z

WFilter:

File:Sdwan client01.png

2025-07-06T08:14:46Z

WFilter:

SD-WAN

2025-07-06T08:13:14Z

WFilter:

== SD-WAN ==

SD-WAN is an integration of the ZeroTier networking. With SD-WAN, you are able to:
* Network virtualization: setup SD-WAN subnets and join multiple devices/networks together.
* End-to-End encryption
* Setup VPN without a static public IP address.

== Server Settings ==

Server settings of WFilter SD-WAN can be accessed in [http://cloud.wfilterngf.com/management WFilter Cloud Service].

[[File:sdwan001.png|800px]]

=== Networks ===

Click "New network" to create a new sdwan subnet.

[[File:sdwan_network01.png|450px]]

* Net ID: SD-WAN network id
* Net Name: network description
* Start/End IP: DHCP IP address range

[[File:sdwan_network02.png|450px]]

To join multiple networks together, you need to setup routing policies. As shown below, network "192.168.1.0/24" can be reached via "10.200.188.1", while network "192.168.2.0/24" can be reached via "10.200.188.2". So these two networks are reachable from each side.

[[File:sdwan_network03.png|450px]]

== Client Settings ==

In WFilter NGF, you can join SD-WAN networks in the "VPN"->"SD-WAN" module.
* SD-WAN secret: SD-WAN client id
* Zone: zone firewall ACL rules are applied. Please check [[firewallrule|Firewall Rules]]

[[File:sdwan_client01.png|800px]]

[[File:sdwan_client02.png|800px]]

[[File:sdwan_client03.png|800px]]

Client is denied by default, you also need to authorize clients in the server side.

[[File:sdwan_client04.png|450px]]

== Cross-Platform clients ==

WFilter's SD-WAN networks are compatible with ZeroTier clients, and you may download clients for other operating systems here: [https://www.zerotier.com/download/ zerotier download]

[[Category:VPN]]

SD-WAN

2025-07-06T08:05:00Z

WFilter: /* Networks */

SD-WAN

2025-07-06T07:46:54Z

WFilter: /* Client Settings */

SD-WAN

2025-07-06T07:43:39Z

WFilter: /* Networks */

File:Sdwan network03.png

2025-07-06T07:39:43Z

WFilter:

File:Sdwan network02.png

2025-07-06T07:39:24Z

WFilter:

SD-WAN

2025-07-06T07:39:14Z

WFilter: /* Networks */

SD-WAN

2025-07-06T07:37:51Z

WFilter: /* Networks */

File:Sdwan network01.png

2025-07-06T07:37:27Z

WFilter:

SD-WAN

2025-07-06T07:36:09Z

WFilter: /* Networks */

SD-WAN

2025-07-06T07:22:59Z

WFilter: /* Server Settings */

File:Sdwan001.png

2025-07-06T07:19:21Z

WFilter:

SD-WAN

2025-07-06T07:19:03Z

WFilter: Created page with "== SD-WAN == SD-WAN is an integration of the ZeroTier networking. With SD-WAN, you are able to: * Network virtualization: setup SD-WAN subnets and join multiple devices/netwo..."

File:Sdwan1.png

2025-07-06T06:55:13Z

WFilter:

VPN

2025-07-06T06:55:06Z

WFilter:

{{DISPLAYTITLE:VPN}}
* [[File:pptpvpn1.png]] [[pptpvpn|PPTP / L2TP]]
* [[File:ipsecvpn1.png]] [[ipsecvpn|IPSec Tunnels]]
* [[File:openvpn1.png]] [[Openvpn|OpenVPN]]
* [[File:webvpn1.png]] [[WebVPN|WebVPN]]
* [[File:sdwan1.png]] [[SD-WAN|SD-WAN]]
* [[File:zerotier1.png]] [[ZeroTier|ZeroTier]]
* [[File:vpnclient1.png]] [[vpnclient|VPN Client]]
* [[Firewall_for_vpn|VPN related firewall settings]]

[[Category:VPN]]

WSGCloud

2025-07-06T06:51:19Z

WFilter: /* WFilter side */

{{DISPLAYTITLE:WFilter cloud service}}

= Overview =

The WFilter cloud service offers a centralized service for managing multiple wfilter devices. The following functions can be achieved:
* View device address, system version, IP address, and alert information
* Synchronize configurations
* Access the management interface via Internet

[[File:cloud_dashboard1.png|800px]]

The cloud service has following modules: Devices(management of wfilter devices), Configurations(create and synchronize configurations), and Operators(manage operators of the cloud service).

'''Please note: relaying of wfilter web UI is via our website wfilterngf.com, so the speed is not as fast as direct access.'''

= User Registration =

Click "Sign up" to create a new user. The username must be an email address, which can also be used to reset the password.

[[File:cloud_register.png|450px]]

[[File:cloud_register2.png|450px]]

In "Operators", multiple operators can be added. Operators can manage the devices and configurations under this account.

[[File:cloud_user1.png|800px]]

= Device management =
== WFilter side ==
In WFilter, the SDWAN module shall be enabled and join the cloud service network.(network ID is displayed in the upper right corner of the cloud service webpage).

[[File:cloud_clients3.png|800px]]

== Join WFilter device to the cloud service ==

In the "Devices" of the cloud service, click "New device" and enter the device's SDWAN ID, username, and password. The cloud service will retrieve information such as the status and configuration of the terminal device through WFilter API. So correct username and password shall be provided. If "Set as Template" is selected, you can also create configurations from the template in "Configurations".

[[File:cloud_clients2.png|600px]]

Click the query icon to open the web UI of wfilter device. Please note: Only one web UI can be opened at a time.

[[File:cloud_clients1.png|800px]]

= Configurations =

In "Configurations", click "New configure template" to create a configuration from a template device. As shown in the figure below:

[[File:cloud_settings1.png|800px]]

Click the "Deploy" icon to synchronize the configuration to other devices. As shown in the figure below:

[[File:cloud_settings3.png|800px]]

[[File:cloud_settings2.png|800px]]

'''Please note: synchronizing the network or firewall settings of a device may cause it to lose network connectivity. Use it with caution. You're recommended to test it locally before synchronizing to other terminals.'''

= Restricting login IPs =

If you have restricted the login IP addresses in Config - System - Operators, you need to add the cloud service's IP address (10.192.0.1) to the allowed IP list.

= Related Links =

* [http://cloud.wfilterngf.com/management WFilter Cloud Service]
* [http://cloud.imfirewall.com/management WSG Cloud Service(Chinese version)]
* [http://www.imfirewall.com/blog/post/604.html How to Perform Remote Management via the WSG Cloud Management Service?]

[[Category:Solutions]]

File:Cloud settings2.png

2025-07-04T08:48:24Z

WFilter:

File:Cloud settings3.png

2025-07-04T08:47:42Z

WFilter:

File:Cloud settings1.png

2025-07-04T08:46:39Z

WFilter:

File:Cloud clients1.png

2025-07-04T08:46:06Z

WFilter:

File:Cloud clients2.png

2025-07-04T08:44:19Z

WFilter:

File:Cloud clients3.png

2025-07-04T08:41:29Z

WFilter:

WSGCloud

2025-07-04T08:40:33Z

WFilter: /* User Registration */

{{DISPLAYTITLE:WFilter cloud service}}

= Overview =

The WFilter cloud service offers a centralized service for managing multiple wfilter devices. The following functions can be achieved:
* View device address, system version, IP address, and alert information
* Synchronize configurations
* Access the management interface via Internet

[[File:cloud_dashboard1.png|800px]]

The cloud service has following modules: Devices(management of wfilter devices), Configurations(create and synchronize configurations), and Operators(manage operators of the cloud service).

'''Please note: relaying of wfilter web UI is via our website wfilterngf.com, so the speed is not as fast as direct access.'''

= User Registration =

Click "Sign up" to create a new user. The username must be an email address, which can also be used to reset the password.

[[File:cloud_register.png|450px]]

[[File:cloud_register2.png|450px]]

In "Operators", multiple operators can be added. Operators can manage the devices and configurations under this account.

[[File:cloud_user1.png|800px]]

= Device management =
== WFilter side ==
In WFilter, the SDWAN service needs to be enabled, and the network ID displayed in the upper right corner of the cloud service should be joined.

[[File:cloud_clients3.png|800px]]

== Join WFilter device to the cloud service ==

In the "Devices" of the cloud service, click "New device" and enter the device's SDWAN ID, username, and password. The cloud service will retrieve information such as the status and configuration of the terminal device through WFilter API. So correct username and password shall be provided. If "Set as Template" is selected, you can also create configurations from the template in "Configurations".

[[File:cloud_clients2.png|600px]]

Click the query icon to open the web UI of wfilter device. Please note: Only one web UI can be opened at a time.

[[File:cloud_clients1.png|800px]]

= Configurations =

In "Configurations", click "New configure template" to create a configuration from a template device. As shown in the figure below:

[[File:cloud_settings1.png|800px]]

Click the "Deploy" icon to synchronize the configuration to other devices. As shown in the figure below:

[[File:cloud_settings3.png|800px]]

[[File:cloud_settings2.png|800px]]

'''Please note: synchronizing the network or firewall settings of a device may cause it to lose network connectivity. Use it with caution. You're recommended to test it locally before synchronizing to other terminals.'''

= Restricting login IPs =

If you have restricted the login IP addresses in Config - System - Operators, you need to add the cloud service's IP address (10.192.0.1) to the allowed IP list.

= Related Links =

* [http://cloud.wfilterngf.com/management WFilter Cloud Service]
* [http://cloud.imfirewall.com/management WSG Cloud Service(Chinese version)]
* [http://www.imfirewall.com/blog/post/604.html How to Perform Remote Management via the WSG Cloud Management Service?]

[[Category:Solutions]]

File:Cloud user1.png

2025-07-04T08:40:11Z

WFilter:

File:Cloud register2.png

2025-07-04T08:39:16Z

WFilter:

File:Cloud register.png

2025-07-04T08:38:44Z

WFilter:

File:Cloud dashboard1.png

2025-07-04T08:37:16Z

WFilter:

File:Ipv6 report.png

2025-07-04T08:30:04Z

WFilter:

IPv6

2025-07-04T08:29:51Z

WFilter:

{{DISPLAYTITLE:IPv6}}

= Overview =

IPv6 is now officially supported.

= Schedule =

We schedule WFilter's IPv6 support into three phases:
* Phase 1: IPv6 support of interfaces, routing and firewall settings. [completed]
* Phase 2: IPv6 support of access policy, bandwidth shaper and user authentication.[completed]
* Phase 3: IPv6 support of internet usage recording and statistics.[completed]

= Settings =

IPv6 is disabled in default. To enable IPv6 support, two options shall be enabled:
* Firewall Rules -> IPv6 -> IPv6 Settings
* Internet Usage -> Advanced Settings
* Reports -> Report List -> Settings

[[File:ipv6_firewall.png|900px]]

[[File:ipv6_record.png|900px]]

[[File:ipv6_report.png|900px]]

Upon enabled, you shall be able to see online IPv6 clients in "Real-time bandwidth".

[[File:ipv6_online.png|900px]]

IPv6

2025-07-04T08:27:56Z

WFilter:

{{DISPLAYTITLE:IPv6}}

= Overview =

IPv6 is now officially supported.

= Schedule =

We schedule WFilter's IPv6 support into three phases:
* Phase 1: IPv6 support of interfaces, routing and firewall settings. [completed]
* Phase 2: IPv6 support of access policy, bandwidth shaper and user authentication.[completed]
* Phase 3: IPv6 support of internet usage recording and statistics.[completed]

= Settings =

IPv6 is disabled in default. To enable IPv6 support, two options shall be enabled:
* Firewall Rules -> IPv6 -> IPv6 Settings
* Internet Usage -> Advanced Settings

[[File:ipv6_firewall.png|900px]]

[[File:ipv6_record.png|900px]]

Upon enabled, you shall be able to see online IPv6 clients in "Real-time bandwidth".

[[File:ipv6_online.png|900px]]

WSGCloud

2025-07-04T08:26:05Z

WFilter:

{{DISPLAYTITLE:WFilter cloud service}}

= Overview =

The WFilter cloud service offers a centralized service for managing multiple wfilter devices. The following functions can be achieved:
* View device address, system version, IP address, and alert information
* Synchronize configurations
* Access the management interface via Internet

[[File:cloud_dashboard1.png|800px]]

The cloud service has following modules: Devices(management of wfilter devices), Configurations(create and synchronize configurations), and Operators(manage operators of the cloud service).

'''Please note: relaying of wfilter web UI is via our website wfilterngf.com, so the speed is not as fast as direct access.'''

= User Registration =

Click "Sign up" to create a new user. The username must be an email address, which can also be used to reset the password.

[[File:cloud_register.png|600px]]

[[File:cloud_register2.png|400px]]

In "Operators", multiple operators can be added. Operators can manage the devices and configurations under this account.

[[File:cloud_user1.png|800px]]

= Device management =
== WFilter side ==
In WFilter, the SDWAN service needs to be enabled, and the network ID displayed in the upper right corner of the cloud service should be joined.

[[File:cloud_clients3.png|800px]]

== Join WFilter device to the cloud service ==

In the "Devices" of the cloud service, click "New device" and enter the device's SDWAN ID, username, and password. The cloud service will retrieve information such as the status and configuration of the terminal device through WFilter API. So correct username and password shall be provided. If "Set as Template" is selected, you can also create configurations from the template in "Configurations".

[[File:cloud_clients2.png|600px]]

Click the query icon to open the web UI of wfilter device. Please note: Only one web UI can be opened at a time.

[[File:cloud_clients1.png|800px]]

= Configurations =

In "Configurations", click "New configure template" to create a configuration from a template device. As shown in the figure below:

[[File:cloud_settings1.png|800px]]

Click the "Deploy" icon to synchronize the configuration to other devices. As shown in the figure below:

[[File:cloud_settings3.png|800px]]

[[File:cloud_settings2.png|800px]]

'''Please note: synchronizing the network or firewall settings of a device may cause it to lose network connectivity. Use it with caution. You're recommended to test it locally before synchronizing to other terminals.'''

= Restricting login IPs =

If you have restricted the login IP addresses in Config - System - Operators, you need to add the cloud service's IP address (10.192.0.1) to the allowed IP list.

= Related Links =

* [http://cloud.wfilterngf.com/management WFilter Cloud Service]
* [http://cloud.imfirewall.com/management WSG Cloud Service(Chinese version)]
* [http://www.imfirewall.com/blog/post/604.html How to Perform Remote Management via the WSG Cloud Management Service?]

[[Category:Solutions]]

WSGCloud

2025-07-04T08:07:58Z

WFilter: Created page with "{{DISPLAYTITLE:WSG Cloud Service}} = Overview of the Cloud Service = The WSG Cloud Service offers a centralized service for managing multiple WSG devices. The following func..."

{{DISPLAYTITLE:WSG Cloud Service}}

= Overview of the Cloud Service =

The WSG Cloud Service offers a centralized service for managing multiple WSG devices. The following functions can be achieved:
* View device address, system version, IP address, and alarm information
* Synchronize configurations
* Remotely access the management interface

[[File:cloud_dashboard1.png|800px]]

The cloud service encompasses the following modules: Device List (management of terminal devices), Configuration Management (create and synchronize configurations), and Operator Management (manage operators of the cloud service).

'''Please note: The cloud service is accessed via our website imfirewall.com, so the speed is not as fast as direct access. If your device is located overseas, it is recommended to use the English version of the cloud service [http://cloud.wfilterngf.com/management WFilter Cloud Service].'''

= User Registration and Operator Management =

Click "Register" to create a new user. The username must be an email address, which can be used to reset the password.

[[File:cloud_register.png|600px]]

[[File:cloud_register2.png|400px]]

In "Operator Management", multiple operators can be added. Operators can manage the terminals and configurations under this account.

[[File:cloud_user1.png|800px]]

= Device Addition and Management =
== WSG Device Side ==
On the WSG terminal device, the SDWAN service needs to be enabled, and the network ID displayed in the upper right corner of the cloud service should be joined.

[[File:cloud_clients3.png|800px]]

== Adding a WSG Device to the Cloud Service ==

In the "Device List" of the cloud service, click "Add New Device". After entering information such as the device's SDWAN ID, username, and password, the device can be managed. The cloud service retrieves information such as the status and configuration of the terminal device through the API. Therefore, the correct username and password must be provided. If "Set as Template" is selected, you can also create configurations from the template in "Configuration Management".

[[File:cloud_clients2.png|600px]]

Click the "Magnifying Glass" icon to open the management interface of the terminal. Please note: Only one terminal's management interface can be opened at a time.

[[File:cloud_clients1.png|800px]]

= Configuration Synchronization =

In "Configuration Management", click "Create Configuration Template" to create a configuration from a template device. As shown in the figure below:

[[File:cloud_settings1.png|800px]]

Click the "Deploy" icon to synchronize the configuration to other terminals. As shown in the figure below:

[[File:cloud_settings3.png|800px]]

[[File:cloud_settings2.png|800px]]

'''Please note: Modifying the network settings or firewall settings of a terminal may cause the terminal to lose network connectivity. Modifications must be made with caution. It is recommended to test locally first and then synchronize to other terminals.'''

= Restricting Login IPs =

If you have restricted the login IP addresses in Configuration - System - Remote Access, you need to add the cloud service's IP address (10.191.0.1) to the allowed IP list.

= Related Links =

* [http://cloud.wfilterngf.com/management WFilter Cloud Service]
* [http://cloud.imfirewall.com/management WSG Cloud Service(Chinese version)]
* [http://www.imfirewall.com/blog/post/604.html How to Perform Remote Management via the WSG Cloud Management Service?]

[[Category:Solutions]]

Pptpvpn

2024-09-11T03:21:31Z

WFilter: /* PPTP / L2TP Settings */

{{DISPLAYTITLE:PPTP / L2TP Server}}
== PPTP / L2TP Server ==

PPTP / L2TP server can provide PPTP / L2TP VPN service for external users to connect.
* You can check VPN clients ip addresses and usernames in "Real-time Bandwidth".
* VPN users are not be applied by [[Access_Policy]].
* Activity of VPN users won't be recorded by [[wfquery|Internet Usage]].

== PPTP / L2TP Settings ==
Description of PPTP / L2TP server settings:
* Service: whether to enable the vpn service.
* MPPE: when enabled, the VPN server will require 128bit MPPE stateless encryption.
* IP Range: the ip addresses to be assigned to VPN clients. (Must be a LAN subnet)
* Protocols: supported auth protocols, which shall be consistence with VPN client settings.
* Authtype:
** "Local Auth": authenticate with username and password of local accounts. Only "local users" with "VPN" priviledge have VPN access.
** "Email Auth": send credentials to a pop/imap email server for authentication.
** "Ldap Auth": send credentials to a ldap server for authentication.
** "Radius Auth": send credentials to a remote radius server for authentication.
** For "LDAP Auth" and "Email Auth", only "pap" protocol is supported.
* VPN type: choose L2TP or PPTP vpn type.

[[File:faq_pptp001.png|900px]]

* If you want to assign static ip and limit bandwidth to PPP clients, you need to setup "PPPoE Property" in "Accounts" settings.

[[File:faq_pptp002.png|600px]]

== Online Users ==

[[File:faq_pptp004.png|900px]]

You can click "online users" to check the live VPN clients, including IP address, RX & tx bandwidth... Move your mouse over the "kill" icon to terminate a session.

== Multiple Subnets ==
PPTP / L2TP clients can only belongs to one subnet. If your network has multiple subnets, you need to add route in client pc to access other subnets. For example, the server side has two subnets 192.168.10.x and 192.168.11.x. PPTP works in 192.168.10.x. To access another subnet, you need to execute below command in client:

<code>
route add 192.168.11.0 mask 255.255.255.0 192.168.10.1
</code>

== Firewall Rules ==

When pptp / l2tp is enabled, a firewall ACL rule will be added automatically. PPTP is on tcp port 1723, L2tp is on udp port 1701.

== FAQ ==

[[Category:VPN]]

File:Faq pptp001.png

2024-09-11T03:20:49Z

WFilter: WFilter uploaded a new version of "File:Faq pptp001.png"