Billion Electric Company 7402VL user manual Virtual Server “Port Forwarding”

Page 89

Virtual Server (“Port Forwarding”)

VoIP/(802.11g) ADSL2+ Router

Virtual Server (“Port Forwarding”)

In TCP/IP and UDP networks a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be delivered to. Some ports have numbers that are pre- assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred to as “well-known ports”. Servers follow the well-known port assignments so clients can locate them.

If you wish to run a server on your network that can be accessed from the WAN (i.e. from other machines on the Internet that are outside your local network), or any application that can accept incoming connections (e.g. Peer-to-peer/P2P software such as instant messaging applications and P2P file-sharing applications) and are using NAT (Network Address Translation), then you will usually need to configure your router to forward these incoming connection attempts using specific ports to the PC on your network running the application. You will also need to use port forwarding if you want to host an online game server.

The reason for this is that when using NAT, your publicly accessible IP address will be used by and point to your router, which then needs to deliver all traffic to the private IP addresses used by your PCs. Please see the WAN configuration section of this manual for more information on NAT.

The device can be configured as a virtual server so that remote users accessing services such as Web or FTP services via the public (WAN) IP address can be automatically redirected to local servers in the LAN network. Depending on the requested service (TCP/UDP port number), the device redirects the external service request to the appropriate server within the LAN network

88

Chapter 4: Configuration

Image 89

Contents BiPAC 7402VL/VGL/VGP Version ReleaseVoIP/802.11g ADSL2+ Router User’s ManualCHAPTER 3 BASIC INSTALLATION CHAPTER 2 INSTALLING THE ROUTERCHAPTER 4 CONFIGURATION CHAPTER 1 INTRODUCTIONAPPENDIX A PRODUCT SUPPORT AND CONTACT INFORMATION CHAPTER 5 TROUBLESHOOTINGFirewall and Access Control QoS Quality of ServiceChapter 1 Introduction FeaturesIntroduction to your Router ModelsQuality of Service QoS Quick Installation WizardMulti-Protocol to Establish A Connection Universal Plug and Play UPnP and UPnP NAT TraversalFirmware Upgradeable Dynamic Host Configuration Protocol DHCP client and serverRich Packet Filtering Static and RIP1/2 RoutingImportant note for using this router Chapter 2 Installing the RouterPackage Contents Do not use the same power source for this router as other equipmentMeaning The Front LEDsRJ-45 connector RJ-11 connector7402VL The Rear Ports7402VGL 7402VGP5 CONSOLE Phone 6 1X 2X RJ-11 connector 7 ADSL Port 1 Power Switch 2 PWR 3 RESET LAN 4 1X - 3X RJ-45 connector8 Antenna 7402VGL/VGP only MeaningCabling Chapter 3 Basic Installation Chapter 3 Basic Installation7402VGP Connecting your router7402VL/VGL Figure 3.3 TCP / IP Figure 3.4 IP Address & DNS Configuration Configuring PCs in Windows in Window XP2. Double-click Local Area Connection. See Figure 4. Select Internet Protocol TCP/IP and click Properties. See FigureFigure 3.8 IP Address & DNS Configuration Configuring PCs in Windows2. Double-click Local Area “LAN” Connection. See Figure Figure 3.5 LAN Area Connection5. Then select the DNS Configuration tab. See Figure Configuring PC in Windows 95/98/MEFigure 3.11 DNS Configuration 3. Click Properties Figure 3.9 TCP / IP2. Select TCP/IP Protocol and click Properties. See Figure Configuring PC in Windows NT4.0Figure 3.12 TCP / IP Figure 3.13 IP AddressWeb Interface Username and Password Factory Default SettingsLAN Device IP Settings ISP setting in WAN sitePPPoE PPPoA RFC1483 Bridged RFC1483 Routed IPoA Information from your ISPFigure 3.14 User name & Password Prompt Widonw Configuring with your Web BrowserSave Config to FLASH Chapter 4 ConfigurationQuick Start Configuration ARP Table Wireless Association Table 7402VGL/VGP onlyStatus RIP Routing Table Routing TableRouting Table Leased Table DHCP TableExpired Table Permanent TableEvent Log Email StatusVoIP Status UPnP Portmap Error LogNAT Sessions Quick Start VoIP/802.11g ADSL2+ Router Ethernet ConfigurationLAN Local Area Network Ethernet Client Filter Ethernet Client Filter Default setting is set to DisableActive PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router Parameters EnableWireless Distribution System WDS Wireless Security 7402VGL/VGP only WPA Pre-Shared KeyPage →Associated Wireless Clients Wireless Client MAC Address Filter 7402VGL/VGP onlyAssociate Wireless Client displays a list of individual wireless device’s MAC Address that currently connects to the router DHCP Server WAN Wide Area Network RFC 1483 Routed Connections Pppoe RFC 1483 Bridged ConnectionsPPPoA Routed Connections Advanced Options PPPoA ConnectionGive DNSto DHCP Server Similar to the above, but gives the DNS server address to the DHCP server IPoA Routed Connections PPPoE Connections Advanced Options PPPoE VoIP/802.11g ADSL2+ Router Chapter 4ConfigurationPage ADSL Time Zone SystemRemote Access Firmware Upgrade Backup / Restore Restart Router User Management Firewall and Access Control General Settings Packet Filter Table 1 Predefined Port Filter Example Predefined Port Filters RulesApplication ProtocolPacket Filter - Add TCP/UDP Filter Packet Filter - Add Raw IP Filter Page Click Add TCP/UDP Filter Click DeleteConfiguring Packet Filter 3. Click Add TCP/UDP Filter5. The new port filter rule for HTTP is shown below Block Duration Intrusion DetectionIntrusion Name Table 2 Hacker attack types recognized by the IDSDetect Parameter Ascend KillURL Filter Domains Filtering This function checks the domain name only, not the IP address, in URLs accessed against your list of domains to block or allow. If it is matched, the URL request will be sent Trusted or dropped Forbidden. For this function to be activated, both check-boxes must be checked. The checking procedure is Restrict URL Features This function enhances the restriction to your URL rules Log information can be seen in the Status - Event Log after enabling Firewall LogPSTN Dial Plan VoIP Voice over Internet ProtocolPlease refer to the description of “Setting for Phone Port 1” Authentication Username Same as Phone NumberSetting for Phone Port WizardSIP Device Parameters General ConfigurationRegistrar Port from VoIP device Authentication Username Same as Phone Number Phone ConfigurationLogin Account Configuration For examples Codec PreferenceSpeed Dial Dial without Prefix Dial only the Number of Digits and not the prefix ActionFor Example Internet Service fail Power downSIP service is not available automaticallyDescription OptionFlash-hook 74xnumber#QoS Quality of Service High PrioritizationTable 4 DSCP Mapping Table Wireless ADSL RouterStandard DSCP DSCP Mapping TableOutbound IP Throttling LAN to WAN Inbound IP Throttling WAN to LAN VoIP Normal PCs Restricted Example QoS for your NetworkConnection Diagram Information and SettingsRestricted Application Mission-critical applicationVoice application Advanced setting by using IP throttling Virtual Server “Port Forwarding” Add Virtual Server IP Address Application HTTPSever Time Schedule Always On Protocol tcpEdit DMZ Host Global IP Address Edit One-to-One NAT Network Address TranslationSelect the Apply button to apply your changes Table 5 Well-known and registered Ports Example List of some well-known and registered port numbersPort Number ProtocolTime Schedule Delete a Time Slot Edit a Time SlotClick Edit Configuration of Time ScheduleStatic Route AdvancedDynamic DNS Check Email Embedded Web Server Device ManagementUniversal Plug and Play UPnP SNMP Version SNMPv2c and SNMPv3SNMP V1 and SNMPFrom RFC1650 EtherLike-MIB From RFC 1213 MIB-IIFrom RFC 1493 Bridge MIB From RFC 1471 PPP/LCP MIBFrom RFC 1474 PPP/Bridge MIB From RFC 1473 PPP/IP MIBFrom RFC1573 IfMIB From RFC1695 atmMIBIGMP Save Configuration to Flash Logout Problems starting up the router Chapter 5 TroubleshootingProblems with the WAN Interface ProblemCan’t ping any PCs on the LAN Problems with the LAN InterfaceWORLDWIDE APPENDIX A Product Support and Contact InformationContact Billion AUSTRALIA