Configuring Mulitple Static IP Addresses
For devices using the Public Network addresses, simply configure the device to use the IP address (subnet mask and default gateway) as assigned by the ISP. The gateway will automatically detect the usage of a broadband IP address on the LAN network and correctly route the return traffic to the appropriate LAN device. Once a broadband IP address has been detected by the gateway as being statically coded on the device, its entry in the Address Allocation page will no longer be displayed.
Note: The ability to use DHCP in assigning WAN addresses to LAN devices is different from how some other routers operate. These other routers usually require that the address be hard coded on the LAN device.
Upon successful configuration of the gateway, refresh the IP address of the network device (this may require restarting that device). It should now have the desired public, or private, IP address assigned by the
Figure 2
Step 3: Configure Firewall Rules
LAN devices using addresses from the Public Network are still protected by the gateway firewall. To allow unsolicited inbound traffic to any of these LAN devices, you must modify the firewall settings specified for that device. That is, a LAN device can receive inbound traffic associated with outbound traffic (e.g., web browsing) but needs to have a firewall rule established to function as a server.
To change the firewall settings, access the Firewall - Settings page of the MDC or the Firewall Settings page of the standard web pages to configure the Hosted applications allowed for each device to be used with unsolicited traffic.
Note: This is different from how some other routers operate. These other routers automatically allow all traffic to pass through from the WAN to the LAN devices configured with WAN IP addresses.
The type of traffic to be received by the device determines the type of firewall configuration required:
•If the device only requires the public IP address then no rules need to be established.
•In some cases, all broadband traffic destined for a device is the
to be passed to that device. In this case, for the specific device.
•In other cases, only the traffic associated with a specific application (e.g., ftp server) is to be passed to a device. In this case, the “hosted application” feature of the
Note: The 2Wire firewall only allows traffic for a public network IP address to be directed to a local LAN device with the same public network IP address. That is, except for traffic sent to the single broadband IP address assigned to the router and shared through NAPT, traffic sent to other specific broadband IP addresses associated with the connection cannot be directed to local LAN devices that may be using private IP addresses.
70