WeOS 5 now offers comprehensive layer 3 functionality

WeOS 5.9.2 was made available on October 26th, 2020 and focuses on enhancing quality and fixing bugs related to quality of service.

With the release of WeOS 5.9.0 in July 2020, WeOS 5 includes important layer 3 features enhancing the range of WeOS 5 Ethernet switches and routers, such as the RedFox 5528-E and Lynx 5512-E. With the release of WeOS 5.9.0, Stateful Inspection Firewall, NAT/NAPT (IP Masquerading) and Dynamic DNS functionality is available with the industrial network operating system. As of October 26th, WeOS 5.9.2 is released with focus on enhancing quality of features and fixing bugs related to quality of service.

A firewall enables network segregation and filtering of inbound and outbound traffic to ensure data can only flow between intended units. This is achieved by setting specific `allow’ and `deny’ rules to networks. A common firewall application is to allow anything to go out from a private network, but prevent almost everything to come in, unless related to the outbound traffic. An example of this might be a user on a private network trying to access a web server. The response to the request from the web server is obviously relevant and therefore permitted. Stateful Inspection Firewalls check the state of outbound traffic and dynamically allow specific traffic inbound. For a network to be secure it is very important to have a device that can limit unwanted inbound traffic.

To be able to set up local networks with private addresses and connect to a private network, IP masquerading or NAPT (network address and port translation) has been added. With IP masquerading, all internal addresses can share a global address, a common scenario for home or private networks that only have one uplink to the ISP (internet service provider).

Because the IP address of a VPN gateway is often dynamic, the new Dynamic DNS (domain name system) or DDNS functionality of WeOS 5 enhances VPN services. IP addresses often change, it is therefore desirable for the DNS to update itself. If the IP address of an interface changes, DDNS allows the VPN gateway to update the DNS server. This means that VPN clients do not have to perform this task and can simply use the domain name. When the connection takes place, a DNS lookup is performed, and the new IP address is provided.

In WeOS 5.9.2 Firewall enable/disable functionality has been added, which allows the firewall configuration to be fully completed before being activated, thereby reducing the risk for the manager being ‘locked out’ during the firewall configuration process. Support for firewall configuration via the WeOS web interface is also included.

Download the new version of WeOS 5