Billion Electric Company 6404VP, 6404VGP user manual Virtual Server “Port Forwarding”

Page 86

Virtual Server (“Port Forwarding”)

VoIP/(802.11g) Broadband Firewall Router

Virtual Server (“Port Forwarding”)

In TCP/IP and UDP networks a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be delivered to. Some ports have numbers that are pre-assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred to as “well-known ports”. Servers follow the well-known port assignments so clients can locate them.

If you wish to run a server on your network that can be accessed from the WAN (i.e. from other machines on the Internet that are outside your local network), or any application that can accept incoming connections (e.g. Peer-to-peer/P2P software such as instant messaging applications and P2P file-sharing applications) and are using NAT (Network Address Translation), then you will usually need to configure your router to forward these incoming connection attempts using specific ports to the PC on your network running the application. You will also need to use port forwarding if you want to host an online game server.

The reason for this is that when using NAT, your publicly accessible IP address will be used by and point to your router, which then needs to deliver all traffic to the private IP addresses used by your PCs. Please see the WAN configuration section of this manual for more information on NAT.

The device can be configured as a virtual server so that remote users accessing services such as Web or FTP services via the public (WAN) IP address can be automatically redirected to local servers in the LAN network. Depending on the requested service (TCP/UDP port number), the device redirects the external service request to the appropriate server within the LAN network

85

Chapter 4: Configuration

Image 86

Contents User’s Manual BiPAC 6404VP / 6404VGPVoIP/802.11g Broadband Firewall Router Version Release 5.08aTable of Contents CHAPTER 5 TROUBLESHOOTING Firewall and Access ControlQoS Quality of Service VoIP Voice over Internet ProtocolIntroduction to your Router FeaturesChapter 1 Introduction 802.11g Wireless AP with WPA SupportNetwork Address Translation NAT Quality of Service QoSDynamic Host Configuration Protocol DHCP client and server SOHO Firewall Security with DoS and SPIFirmware Upgradeable Rich Management InterfacesPackage Contents Chapter 2 Installing the RouterImportant note for using this router Do not use the same power source for this router as other equipmentWireless Router Only The Front LEDsRJ-45 connector RJ-11 connectorWAN LAN The Rear PortsPort Power Switch PWR RESET Phone 1XCabling Chapter 3 Basic Installation Chapter 3 Basic InstallationConnecting Your Router ATA Mode Broadband Router Mode4. Select Internet Protocol TCP/IP and click Properties. See Figure Configuring PCs in Windows in Window XP2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties See Figure Configuring PCs in Windows2. Double-click Local Area “LAN” Connection. See Figure 3. Click Properties Configuring PC in Windows 95/98/ME5. Then select the DNS Configuration tab. See Figure Configuring PC in Windows NT4.0 2. Select TCP/IP Protocol and click Properties. See FigureDevice LAN IP settings Factory Default SettingsWeb Interface Username and Password ISP setting in WAN sitePPPoE Information from your ISPDHCP Obtain an IP Address Automatically Static IP Fixed IP Address Configuring with your Web Browser Save Config to FLASH Chapter 4 ConfigurationATA / Router Mode Configuration StatusARP Table Wireless Association Table Wireless Router OnlyStatus Routing TableLeased Table DHCP TableRIP Routing Table Expired TableEmail Status VoIP StatusError Log Event LogDiagnostic NAT SessionsUPnP Portmap ATA / Router Mode Time Schedule Advanced FunctionsLAN NAT DHCP Server Device IP WAN System Firewall QoS Virtual Server VoIP RouterEthernet ConfigurationLAN Local Area Network Primary IP AddressIP Alias Ethernet Client Filter → Active PC in LANEthernet Client Filter Default setting is set to Disable Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Wireless Wireless Router Only ParametersWireless Distribution System WDS Wireless Security Wireless Router Only WPA-PSK TKIP / WPA-PSK AES Pre-Shared KeyPage →Associated Wireless Clients Wireless Client / MAC Address Filter Wireless Router OnlyWireless Client Filter Default setting is set to Disable DHCP Server System Time ZoneRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Application Example Predefined Port Filters RulesTable 1 Predefined Port Filter ProtocolUDP17 Packet Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Example Click DeleteClick Add TCP/UDP Filter Configuring Packet Filter5. The new port filter rule for HTTP is shown below Intrusion Detection Block DurationDetect Parameter Table 2 Hacker attack types recognized by the IDSIntrusion Name Ascend KillURL Filter Always Ondropped IM / P2P Blocking Instant Message Blocking The default is set to DisabledPeer to Peer Blocking The default is set to Disabled Firewall Log Log information can be seen in the Status - Event Log after enablingVoIP Voice over Internet Protocol VoIP Broadband Firewall RouterVoice QoS Setting for Phone PortWizard NOTE User defined profiles are limited to 8 only Authentication Username Same as Phone NumberUser-defined Profiles SIP Device Parameters How to register to SIP Server Advanced - ParametersAdvanced - PSTN Environment Adjustment Note ONHOOK means hung upLogin Account Configuration Phone PortCodec Preference For examplesVolume Control Speed DialPSTN Dial Plan 4 Dial at Timeout no Prefix PSTN Dial Plan Examples3 Dial at Timeout 1 Dial with PrefixChapter 4 Configuration VoIP Dial Plan Dial Plan Rules List Prefix ProcessingSpecial Dial Plan Examples Dial-Plan ExamplesDescription ## xxLocalcheap.com is the default VoIP provider I set on phone port 1. When I call out any number start with 1 or 2 or 3 and plus rest of the phone number for local call, 03 is always prepended in front of these number. If 23295 are dialed, 03-2-32935 is the actual phone number called out via localcheap.com provider Mobilecheap.com is the default VoIP provider I set on phone port 2. When I call out 123-39-45678 for a mobile call, 123 is replaced with 09. Therefore, 09-39-45678 is the actual phone number called out via Mobilecheap.com provider Ring Parameters Ring & ToneCountry Specific Ring & Tone Tone ParametersFlash-hook Special Dial CodesOption Prioritization QoS Quality of ServiceClick Clear HighWireless Router Device Table 4 DSCP Mapping TableDSCP Mapping Table Standard DSCPOutbound IP Throttling LAN to WAN Inbound IP Throttling WAN to LAN Information and Settings VoIP Normal PCs Restricted PCConnection Diagram Example QoS for your NetworkVoice application Advanced setting by using IP throttlingMission-critical application Restricted ApplicationChapter 4 Configuration Virtual Server “Port Forwarding” Add Virtual Server Internal IPExample IP AddressEdit DMZ Host Edit One-to-One NAT Network Address Translation Global IP AddressSelect the Apply button to apply your changes Port Number Table 5 Well-known and registered PortsExample List of some well-known and registered port numbers ProtocolTime Schedule Edit a Time Slot Click EditConfiguration of Time Schedule Delete a Time SlotAdvanced Management and IGMP Static RouteDynamic DNS Check Email Device Management Embedded Web Server 2 Management IP accountsSNMP Universal Plug and Play UPnPSNMP V1 and SNMP Version SNMPv2c and SNMPv3From RFC 1471 PPP/LCP MIB From RFC1650 EtherLike-MIBFrom RFC 1493 Bridge MIB From RFC 1472 PPP/Security MIBIGMP Save Configuration to FlashLogout Problems with the LAN Interface Chapter 5 TroubleshootingProblems starting up the router ProblemAPPENDIX A Product Support and Contact Information Contact Billion WORLDWIDE