Netopia 2200 manual 341, Netopia Advanced Features for NAT, Internal Servers, Pinholes

Security

☛NOTE:

1.The default setting for NAT is ON.

2.Netopia uses Port Address Translation (PAT) to implement the NAT facility.

3.NAT Pinhole traffic (discussed below) is always initiated from the WAN side.

Netopia Advanced Features for NAT

Using the NAT facility provides effective LAN security. However, there are user applications that require methods to selectively by-pass this security function for certain types of Inter- net traffic.

Netopia Gateways provide special pinhole configuration rules that enable users to estab- lish NAT-protected LAN layouts that still provide flexible by-pass capabilities.

Some of these rules require coordination with the unit’s embedded administration ser- vices: the internal Web (HTTP) Port (TCP 80) and the internal Telnet Server Port (TCP 23).

Internal Servers

The internal servers are the embedded Web and Telnet servers of the Gateway. You would change the internal server ports for Web and Telnet of the Gateway if you wanted to have these services on the LAN using pinholes or the Default server.

Pinholes

This feature allows you to:

•Transparently route selected types of network traffic using the port forwarding facility. FTP requests or HTTP (Web) connections are directed to a specific host on your LAN.

•Setup multiple pinhole paths. Up to 32 paths are supported

•Identify the type(s) of traffic you want to redirect by port number.

341