Perle Systems 1700 manual Network Address Translation and Port Translation

Page 58

Applications





Network Address Translation and Port Translation

The P1705 & P1730 provide support for Network Address Translation (NAT). Network Address Translation is a technique that translates private IP address on a private network to valid global IP addresses for access to the Internet. Network Address Port Translation (NAPT) translates both the IP address and the port number. The advantage of port translation is that more than one private IP address can be translated to the same global IP address. Port translation allows data exchanges initiated from hosts with private IP addresses to be sent to the Internet via the router using a single global IP address. A global IP address must be assigned to the WAN link upon which NAPT is enabled for port translation to work. The global IP address will be assigned by the ISP.

To use NAPT, the private network addresses of the services that will be available globally must be assigned:

NAT Exports

Location: Main

ªConfiguration

ªApplications Set-up

ªNAT Exports

ªEdit Services

ªenter the private network IP address of each service offered

Then NAT (Network Address Translation) is enabled:

NAT Enable

Location: Main

ªConfiguration

ªWAN Set-up

ªRemote Site Set-up

ªEdit Remote Site

ªProtocol Set-up

ªIP Parameters

ªNAT Enabled Enabled

Configuration: When running frame relay RAW 1490, the local IP address and peer router IP Note address must be set in the IP parameters menu.

52

Image 58
Contents Bridge / Routers User And System Administration Guide Federal Communications Commission FCC Using This Manual Contents Introduction to Filtering Appendix D Interface Pinouts Unpack the Router Select a SiteIdentify the Reset Switch Location of the Reset Hole on RouterP1705 Identify the ConnectorsP1730 Connect to the Console Make the Link ConnectionsPower Up the Bridge/Router Managing the P1705 & P1730 Using the MenusConventions Option NameLogin to Bridge/Router and Enter the Required Configuration PasswordT1 or E1 56/64 kbpsNumber of channels As specifedFirst channel ReservedMandatory Configuration Isdn U Isdn S/T PPP IsdnIdentify the Status LEDs OffTypical Applications & How to Configure Them Bridging and Routing Should You Bridge or Route? Bridging Networks Bridged across a WAN linkIP Routing IP Address / Size of Subnet MaskIP Addressing Masks IP SubnetsDefining an IP Subnet Mask IP Default Gateway IP Static RouteIPX Routing Novell Servers in Both LocationsNovell Servers in One Location Only IPX Routed Local Area Networks Servers on one sideRAW 802.3 Frames IPX RoutingEthernet-II Frames Ieee 802.2 FramesIPX Forwarding Novell Server with Dual LANsSelect LAN1 or LAN2 Numbered Links PPP Link ConfigurationPPP Overview Link IP addressUnnumbered Links Peer IP addressMultilink Operation Basic WAN Configurations Basic Isdn ConnectionsDirectory Number Switch TypeSpid Soft Reset Console after a full resetPPP Isdn Manual Call Quick Connections Manual Call IP Address / Subnet mask sizeBasic Frame Relay Configuration Frame Relay configurationAuto Learning the Frame Relay Configuration Link SpeedManual Configuration LMI Type LMI TypeQuick Start Frame Relay PPP EnabledIP Address / mask size Basic Leased Line Configuration Quick Start PPP Leased Line ConnectionsBridge Connection Configure Remote Site Profiles Configure Remote Site Profiles for Isdn PPP Isdn NumberEnabled Remote Site Alias Configure Remote Site Profile for Frame RelayªConfiguration WAN Set up Remote Site Set-up DlciPrimary Link CIRDisabled EIRConfigure Remote Site Profiles for Leased Line PPP Site profile Recovery Scheduleªenabled Configure Remote Site Profiles for PPPoELAN ªTCP mss value ª1452 ªISP provided username ªPPPoE remote site aliasªServer Advanced FeaturesConfigure Dynamic Host Configuration Protocol ªIP Address / number of addressesIP address local DNS server IP address external DNS serverEnter the private network IP address of each service offered Network Address Translation and Port Translation11 Napt Configuration Security Configure PPP SecuritySecurity Level Outgoing PAP Password Incoming PAP PasswordIncoming Chap Secret Outgoing Chap Secret Configure Firewall 13 Sample Firewall ApplicationID# 1 for ISP remote site Enter ID# 1 for ISP remote siteInbound FTP ServerSource Address Filter ID # Destination AddressDestination Mask Source MaskNetwork Address Translation CompressionFilters Enable Bandwidth On DemandQOS Priority Queuing Location MainªPriority ªPriority List Number ªenable Simple Network Time Protocol SntpªIP Address ªTimeIntroduction to Filtering MAC Address FilteringPattern Filtering NotBridge NetBIOS &NetBEUI Windows For WorkgroupsPopular Filters IP & Related TrafficBanyan NetBIOS over TCPIP Router Other interesting TCP PortsAppendix a Menu Trees Menu Tree Menu Tree Appendix B Octet Locations on Ethernet Frames Octet Locations on a Bridged TCP/IP FrameConfiguration Pages Octet Locations Octet Locations on a Bridged XNS Frame Appendix C Servicing Information Opening the caseIdentifying the Internal Components Changing LAN or WAN Interfaces To Clear a Lost PasswordSelecting MDI or MDI-X LAN Interface Installing the Isdn Link Modules Processor settings for the Isdn Link ModulesConnecting to the ISDN-U Link Module Changing the Termination Straps on the Isdn S/T InterfacePerforming a Software Upgrade PC used for Tftp transfers Router a Router B Router C Link Clocking Information Pinout InformationATL-CSU/DSU Link Module Information Switches Console Pinouts DB25 Female DCE24 & RS232C Link Pinouts DB25 Female DTE11/X.21 Link Pinouts DB15 Female DTERS442 & RS530 Link Pinouts DB25 Female DTELink Pinouts DCERS232 Null-Modem Cable Configuration Figure D-9 RS232 Null-Modem CableNull-Modem Cable Configuration Figure D 10 V-35 Null-Modem CableRS530 Null-Modem Cable Configuration Figure D-11 RS530 Null-Modem CableRS530 To RS449 Conversion Cable Figure D-12 RS530 to RS449 Conversion Cable11/X.21 Null-Modem Cable Configuration Figure D-13 V.11/X.21 Null-Modem Cable