D-Link DRO-210i manual 11.6 NAT

Page 75

Frequently Asked Questions

Ans: The router can only block messengers based on Domain names, URL Keywords, IP Addresses or Port numbers used for communication. Blocking of messengers (like skype) which cannot be identified by any of these methods is not supported by the router.

11.6 NAT

Q18. How do I make my web server accessible from the internet?

Ans: The following steps will guide you through this setup:

￿Connect your Web Servers to the DMZ Port and configure DMZ Systems in a specific private subnet (e.g 192.178.1.0/24).

￿Go to NAT Virtual Server/NAPT and add an entry to redirect your Server traffic (eg. HTTP, FTP) from the Global IP to the DMZ Internal Server IP Address.

￿Instead of Virtual Server configuration, you can also use One-To-One NAT. Go to NAT NAT Configuration, and configure a One-To-One NAT entry mapping the global IP Address to the Internal Server IP Address.

￿If Firewall is enabled, go to Firewall Policy and click on In. Add Port Filter and Permitted IP Rules to allow the Server traffic from WAN to LAN.

Q19. I am unable to access my server in the DMZ Port. What could be the problem?

Ans: To troubleshoot this issue, follow the below steps:

￿Ensure that Virtual Server or One-To-One NAT has been configured to access the DMZ Server. Specifically verify the global IP Address, private IP Address and Port Number configuration.

￿If Firewall is enabled, ensure that inbound firewall policy rules have been added to allow the DMZ traffic. In the IP Permitted Rule Page, if specific IP Address has been configured, ensure that Private IP Address and not Public IP Address has been configured to allow access.

￿If everything is proper but still not working, then verify Status Log Tables Blocking Log to see the reason why the traffic has been blocked from entering inside.

Q20. I am using SIP-ALG for VoIP Calls between my branch offices. But I am not able to register my phones to the SIP Server. What could be the problem?

Ans: Follow the steps below to troubleshoot this issue:

￿Verify the phone network configurations for default gateway and dns server

￿Verify the phone sip configurations for user name, password and proper registration port

￿If firewall is enabled, ensure that the SIP signaling port is not blocked.

￿Ensure that the SIP Server IP Address is reachable by pinging to it.

Dlink DRO-210i User Guide

75

Image 75
Contents DRO-210i Table Of Contents Virtual Private Network Bold About This ManualProduct Overview Product OverviewDlink DRO-210i User Guide Hardware Details DRO-210i Package ContentsFront Panel Rear Panel Routing Software FeaturesVPN Tools Interfaces Port ConfigurationOptional Port Configuration Disabled WAN2/DMZForgot LAN IP ? LAN SettingsLAN Interface DMZ InterfaceDMZ Settings WAN InterfaceMaximum Transmission Unit Dhcp Settings for WAN1 Interface Static ModeDynamic Mode IP Settings for WAN1 InterfaceUnnumbered Interfaces PPPoE ModePPPoE Settings for WAN1 Interface DHCP, DNS and Time DHCP, DNS and TimeDhcp Dhcp ServerDhcp Static Mapping Dhcp Static MappingDhcp Relay Dhcp RelayDNS Proxy DNS Proxy SettingsTime System Time SettingsRouting RoutingStatic Routing Dynamic RoutingStatic Routing RIP Settings Policy Based Routing Routing TablePolicy Based Routing Routing TableTo the same destination High Availability Auto BackupBackup Configuration High AvailabilityLoad Balancing Configuration Load BalancingEthernet Link Detection Ethernet WAN Link Detection NAT NAT Interface ConfigurationNAT Interface Configuration Network Address TranslationNAT Configuration NAT ConfigurationNAT Exception Virtual Server NAT ExceptionVirtual Server/NAPT SIP-ALG SIP ALG ConfigurationNAT Session Table NAT TableFirewall Policies Interface ConfigurationFirewall Interface Configuration FirewallPolicy Rules Policy RulesInbound Policies Permitted ServicesInbound Policies Permitted Services Inbound PoliciesOutbound Policies IP Permitted RulesAdd Permitted IP Rule Outbound Policies Outbound PoliciesAdd Blocked IP Rule Blocked ServicesOutbound Policies Service Blocked Rule IP Blocked RulesTrusted Domain Domain FilterUntrusted Domain Outbound Policies Untrusted DomainActiveX Filter Web FilterJava Filter Cookie FilterKeyword Filter Keyword ExceptionFile Extension Filter Blocking Log Table MAC FilterBlocking Log Add Blocked MAC AddressIntrusion Detection IDS ConfigurationIDS Configuration Black List Table Intrusion LogBlack List Intrusion Log TableVirtual Private Network Virtual Private NetworkIPSec Tunnel IPSec Tunnel or PassthroughPeer-To-Peer IPSec PassthroughVirtual Private Network Same IKE Encryption algorithm on both ends of a VPN tunnel IPSec Server IPSec Server ConfigurationsMaximum life duration is 86400 seconds Tunnel Remote ID Configuration Tunnel TableLimitation IPSec Status IPSec StatusIPSec Log Table IPSec LogHTB QoS Configurations Quality of ServiceClass Configuration Quality of ServiceQuality of Service QoS Filter Configurations Filter ConfigurationTOS/DiffServ Type Of Service/DiffServQuality of Service Device Info AdministrationAdministration Device InformationTraffic Statistics Session LogTraffic Statistics System Log Password ChangeSysLog Session LogSystem Change PasswordPassword Recovery SystemUpload/Download Update Firmware/ConfigurationPing Test Remote AccessRemote Access Ping TestAdministration Dlink DRO-210i User Guide Frequently Asked Questions Frequently Asked QuestionsGeneral DHCP, DNS Q6. What is the purpose of Dhcp Server Auto Configuration? High Availability RoutingFirewall Frequently Asked Questions 11.6 NAT 11.7 VPN Q21. What are the call features supported by SIP-ALG?11.8 QoS Frequently Asked Questions