Chapter 4: Web Configuration

91

Virtual Server – Port Forwarding

The Router implement s NAT to make y our entire local network appear as a single
machine to the Internet. The typical situation is that you have local servers for
different services and you want to make them publicly accessible. With NAT applied,
it will translate the internal IP addresses of these servers to a single IP address that
is unique on the Internet. NAT function not only eliminates the ne ed for multiple
public IP addresses but also provides a measure of security for your LAN.
When the router receive s a n incoming IP packet requesting for accessi ng your local
server, the router will recognize the service type according to the port number in this
packet (e.g., port 80 indica tes HTTP service and p ort 21 indicates FTP service). By
specifying the port number, the router knows which service sho uld be forwarded to
the local IP a ddress that you sp ecified.
After setting the virtual server, you should modify the filter rule about the port an d
service information which you set on the virtual server. Because the firewall protects
the router by filter rule, you should update the filter rule after you set up the virtual
server.
Virtual Serve r function allows you to make servers on your LAN accessible to
Internet users. Normally, Internet users would not be able to access a server on your
LAN because:
Your server does not have a valid external IP Address.
Attempts to connect to devices on your LAN are blo c ked by the firewall in this
device.
The Virtual Server feature solves these problems and allows Internet use rs to
connect to your servers, as illustrated below:
IP Address seen by Internet Users
Once configured, anyone on the Internet can connect to your Virtual Servers.
Please note that, in the above picture, both Internet users are connecting to the
same IP address, but using different protocols, such as Http://203.70.212.52 and
Ftp://203.70.212.52.
To Internet users, all virtual servers on your LAN have the same IP Address. This IP
Address is allocated by your ISP. This address should be static, rather than dynamic,
to make it easier for Internet users to connect to your Servers. However, you can
use Dynamic DNS feature to allow u se rs to connect to your virtual servers by using
a URL, instead of an IP address.