FVS338 ProSafe VPN Firewall 50 Reference Manual

Allowing Videoconference from Restricted Addresses

If you want to allow incoming videoconferencing to be initiated from a restricted range of outside IP addresses, such as from a branch office, you can create an inbound rule. In the example shown to the right, CU-SeeMe connections are allowed only from a specified range of external IP addresses.

Figure 4-7

Setting Up One-to-One NAT Mapping

In this example, we will configure multi-NAT to support multiple public IP addresses on one WAN interface. By creating an inbound rule, we will configure the firewall to host an additional public IP address and associate this address with a Web server on the LAN.

Tip: If your ISP allows you to have more than one public IP address for your use, you can use the additional public IP addresses to map to servers on your LAN. One of these public IP addresses will be used as the primary IP address of the router. This address will be used to provide Internet access to your LAN PCs through NAT. The other addresses are available to map to your servers.

To configure the FVS338 for additional IP addresses:

1.Select Security from the main menu and Firewall Rules from the submenu.

2.Click Add under the Inbound Services table. The Add LAN WAN Inbound Service screen will display.

Firewall Protection and Content Filtering

4-13

v1.0, September 2006

Page 71
Image 71
NETGEAR FVS338 manual Allowing Videoconference from Restricted Addresses, Setting Up One-to-One NAT Mapping