RX3141 User’s Manual

Chapter 11. System Management

5.For security concerns, the RX3141 denies all the access requests from the external users unless a proper inbound ACL rule is setup for each virtual server to allow external users to access the internal servers set up in the Virtual Server configuration page. For example, if you want to allow any one in the external network to access the FTP server, define an inbound ACL rule as configured in Figure 10.4. Note that the destination IP address is the IP address entered in the “To IP Address” and the destination port is the port numbers entered in the “Redirect Port Range” in the Virtual Server configuration page. If you want to restrict access to the FTP server from particular IP addresses, change the settings for the source IP in the inbound ACL rule. For example, if source IP in the inbound ACL rule is configured as 198.175.2.10, the RX3141 will deny all the external access to the FTP server except those from this particular IP address. For detail information about configuring an inbound ACL rule, please refer to the section 9.4 Configuring Inbound ACL Rules.

Same as “ToIP Address”Same as “RedirectPort Range”

Figure 10.4. Virtual Server Example – Inbound ACL RuleConfigure Special Application

Some applications use multiple TCP/UDP ports to transmit data. Due to the NAT operation, these applications cannot work with the router. Special Application setting allows some of these applications to work properly.

Only one PC can use one particular special application at any time.

Note

10.2.3 Special Application Configuration Parameters

Table 10.1 describes the configuration parameters available for Special Application configuration.

Table 10.3. Special Application Configuration Parameters

Setting

Enable

Description

Select an application from the list of pre-configured applications. The corresponding protocol and the redirect port range will be automatically selected. Select “Manual Setting” if you want to configure the settings yourself. To activate the policy, make sure the check box is checked.

67