Siemens E-110-I user manual

Models: E-110-I E-110

1 90
Download 90 pages 35.82 Kb
Page 59
Image 59

Chapter 4: Advanced Configuration

Bimap rules can be used to provide external access to a LAN device. They do not provide the same level of security as rdr rules, because rdr rules also reroute incoming packets based on the port ID. Bimap rules do not account for the port number, and therefore allow external access regardless of the destination port type specified in the incoming packet.

1.On the NAT Rule - Add page, select BIMAP from the Rule Flavor drop-down list.

2.Define the rule ID and select the interface.

3.In the Local Address field, type the private IP address of the computer to which you are granting external access.

4.In the Global Address field, type the address that you want to serve as the publicly known address for the LAN computer.

5.Complete as described for general procedure (steps 6 to 10).

The pass rule: Allowing specific addresses to pass through untranslated

You can create a pass rule to allow a range of IP addresses to remain untranslated when another rule would otherwise do so.

1.On the NAT Rule - Add page, select PASS from the Rule Flavor drop-down list.

2.Define the rule ID and select the interface.

The pass rule must be assigned a rule ID that is a lower number than the ID assigned to the rule it is intended to pass. In you want a specific IP address or range of addresses to not be subject to an existing rule, say rule ID #5, then you can create a pass rule with ID #1 through 4.

3.In the Local Address From/To fields, type the lowest and highest IP addresses that define the range of private address you want to be passed without translation.

If you want the pass rule to act on only one address, type that address in both fields.

4.Complete as described for general procedure (steps 6 to 10).

Rev:01_040220

53

Page 59
Image 59
Siemens E-110-I user manual