ZyXEL Communications P-660R-T Series 177

P-660R-T Series User’s Guide

177	Chapter 21 Network Address Translation (NAT)

Contents

User’s Guide Disclaimer Trademarks Notice Certifications Page Note Page Page Page Wizard Setup Password Setup Page Remote Management Configuration Universal Plug-and-Play(UPnP) Maintenance Introducing the SMT Menu 1 General Setup Menu 2 WAN Backup Setup Menu 3 LAN Setup Internet Access Remote Node Configuration Static Route Setup Bridging Setup SNMP Configuration System Information and Diagnosis Firmware and Configuration File Maintenance Page Appendix A Product Specifications Appendix B Appendix C IP Subnetting Appendix E Appendix F Appendix G Appendix H Page Page Page Page Page Page Page Page Page Page About This User's Guide Syntax Conventions Related Documentation User Guide Feedback Graphics Icons Key Introduction to ADSL Page 1.1 Introducing the Prestige High Speed Internet Access Zero Configuration Internet Access Any IP Traffic Redirect Universal Plug and Play (UPnP) 10/100M Auto-negotiatingEthernet/Fast Ethernet Interface(s) Auto-Crossover (MDI/MDI-X)10/100 Mbps Ethernet Interface(s) Dynamic DNS Support Multiple PVC (Permanent Virtual Circuits) Support ADSL Standards Networking Compatibility Multiplexing Encapsulation Network Management Other PPPoE Features 1.2 Applications for the Prestige 1.3 Prestige Hardware Installation and Connection 1.4 Front Panel LEDs Page Page 2.1 Web Configurator Overview 2.2 Resetting the Prestige 2.3Navigating the Prestige Web Configurator Page 3.1 Introduction 3.1.1.1 ENET ENCAP 3.1.1.2 PPP over Ethernet 3.1.1.3PPPoA 3.1.1.4 RFC 3.1.2.1 VC-basedMultiplexing 3.1.2.2 LLC-basedMultiplexing 3.2 IP Address and Subnet Mask 3.2.1.1 IP Assignment with PPPoA or PPPoE Encapsulation 3.2.1.2 IP Assignment with RFC 1483 Encapsulation 3.2.1.3 IP Assignment with ENET ENCAP Encapsulation 3.2.1.4 Private IP Addresses Page Page Page 3.2.5.1 IP Pool Setup Change LAN Configuration Page 3.2.7.1 Test Your Internet Connection 4.1 Password Overview Page 5.1 LAN Overview 5.1.1LANs, WANs and the Prestige 5.2 DNS Server Address 5.3 DNS Server Address Assignment 5.4 LAN TCP/IP 5.5 Any IP 5.5.1 How Any IP Works 5.6 Configuring LAN Page Page 6.1 WAN Overview 6.2 Metric 6.3 PPPoE Encapsulation 6.4 Traffic Shaping 6.5 Zero Configuration Internet Access 6.6Configuring WAN Setup Page Page 6.7 Traffic Redirect 6.8 Configuring WAN Backup Figure 22 WAN Backup Check WAN IP Address Page 7.1 NAT Overview 7.1.2 What NAT Does 7.1.3 How NAT Works 7.1.4 NAT Application 7.1.5 NAT Mapping Types 7.2 SUA (Single User Account) Versus NAT 7.3SUA Server 7.4 Selecting the NAT Mode 7.5 Configuring SUA Server Page 7.6 Configuring Address Mapping 7.7 Editing an Address Mapping Rule Page Page 8.1 Dynamic DNS 8.2 Configuring Dynamic DNS Page 9.1 Configuring Time and Date Page 10.1 Remote Management Overview 10.2 Telnet 10.3 FTP 10.4 Web 10.5 Configuring Remote Management Page Page 11.1 Introducing Universal Plug and Play 11.2 UPnP and ZyXEL 11.3 Installing UPnP in Windows Example Add/Remove Programs Properties Installing UPnP in Windows XP 1Click Start and Control Panel 2Double-click Network Connections Network Connections Page 11.4Using UPnP in Windows XP Example Add Page Web Configurator Easy Access 1Click Start and then Control Panel 3Select My Network Places under Other Places Local Network Invoke Page Page 12.1 Maintenance Overview 12.2 System Status Screen Page 12.2.1 System Statistics Show Statistics Poll Interval(s) 12.3 DHCP Table Screen 12.4 Any IP Table Screen 12.5 Diagnostic Screens 12.5.2 Diagnostic DSL Line Screen DSL Line 12.6 Firmware Screen Firmware Upload in Process Back 13.1 SMT Introduction 13.1.3 Prestige SMT Menu Overview 13.2 Navigating the SMT Interface Page 13.3 Changing the System Password Retype to confirm 14.1 General Setup 14.2 Procedure To Configure Menu 14.2.1 Procedure to Configure Dynamic DNS Edit Dynamic DNS Menu 1.1— Configure Dynamic DNS Page Page 15.1 Introduction to WAN Backup Setup 15.2 Configuring Dial Backup in Menu 15.2.1 Traffic Redirect Setup Menu 2.1 — Traffic Redirect Setup Page Page 16.1 LAN Setup 16.3CP/IP Ethernet Setup and DHCP Page Page 17.1 Internet Access Overview 17.2 IP Policies 17.3IP Alias 17.4 IP Alias Setup 17.5 Route IP Setup 17.6 Internet Access Configuration Page Page 18.1 Remote Node Setup Overview 18.2.1Remote Node Profile 18.2.2.1 Scenario 1: One VC, Multiple Protocols 18.2.2.2 Scenario 2: One VC, One Protocol (IP) 18.2.2.3 Scenario 3: Multiple VCs Menu 11.1 – Remote Node Profile 18.2.3 Outgoing Authentication Protocol 18.3 Remote Node Network Layer Options 18.3.1 My WAN Addr Sample IP Addresses My WAN Addr Rem IP Addr 18.4 Remote Node Filter 18.4.1 Web Configurator Internet Security Filter Rules protocol filters Input Filter Sets Internet Security 18.4.2 Web Configurator Filter Sets Page 18.5 Editing ATM Layer Options 18.5.3 Advance Setup Options PPPoE Edit Advance Options Menu 11.8 – Advance Setup Options Page 19.1 IP Static Route Overview 19.2 Configuration Menu 12.1 — IP Static Route Setup Menu 12.1.1 – Edit IP Static Route Setup Page 20.1 Bridging in General 20.2.1Remote Node Bridging Setup Edit IP/Bridge Yes and press [ENTER] to edit Menu 11.3 – Remote Node Network Layer Options 20.2.2 Bridge Static Route Setup Edit Bridge Static Route Page 21.1 SUA (Single User Account) Versus NAT 21.2Applying NAT Menu 11.3 - Remote Node Network Layer Options 21.3 NAT Setup 21.3.1Address Mapping Sets 21.3.1.1SUA Address Mapping Set 21.3.1.2 User-DefinedAddress Mapping Sets 21.3.1.3 Ordering Your Rules 21.4 Configuring a Server behind NAT 3Enter 1 to go to Menu 15.2.1 NAT Server Setup as follows Start Port No End Port No 21.5 General NAT Examples Network Address Translation Many-to-One 21.5.2 Example 2: Internet Access with an Inside Server 21.5.3 Example 3: Multiple Public IP Addresses With Inside Servers 1 : Many : Address Mapping Set Menu 15.1 - Address Mapping Sets Full Feature Network Address Translation Address Mapping Sets 2Enter 2 in Menu 15 - NAT Setup 21.5.4 Example 4: NAT Unfriendly Application Programs One-to-One Page Page 22.1 About Filtering Execute Filter Rule 22.1.1 The Filter Structure of the Prestige 22.2 Configuring a Filter Set for the Prestige 22.3 Filter Rules Summary Menus 22.4 Configuring a Filter Rule Page Page 22.4.2 Generic Filter Rule Offset Length Mask Value Generic Filter Rule Menu 21.5.1 – Generic Filter Rule Generic Filter Rule 22.5 Filter Types and NAT 22.6 Example Filter Menu 21 — Filter Set Configuration Menu 21.6 — Filter Rules Summary A = Y Type = IP Pr DP M = N 22.7 Applying Filters and Factory Defaults Page 23.1 About SNMP 23.2Supported MIBs 23.3 SNMP Configuration 23.4 SNMP Traps Page 24.1 Overview 24.2 System Status Menu 24.1 — System Maintenance — Status 24.3 System Information 24.3.2 Console Port Speed Menu 24.2.2 – System Maintenance – Console Port Speed 24.4 Log and Trace 24.4.2 Syslog and Accounting Menu 24.3.2 — System Maintenance — UNIX Syslog Page 24.5 Diagnostic Page Page 25.1 Filename Conventions 25.2 Backup Configuration 25.2.2 Using the FTP Command from the Command Line 25.2.3Example of FTP Commands from the Command Line 25.2.4 GUI-basedFTP Clients 25.2.5 TFTP and FTP over WAN Management Limitations 25.2.6 Backup Configuration Using TFTP 25.2.7 TFTP Command Example 25.2.8 GUI-basedTFTP Clients 25.3 Restore Configuration 25.3.2Restore Using FTP Session Example 25.4 Uploading Firmware and Configuration Files 25.4.3 FTP File Upload Command from the DOS Prompt Example 25.4.4 FTP Session Example of Firmware File Upload 25.4.5 TFTP File Upload 25.4.6 TFTP Upload Command Example Page 26.1 Command Interpreter Mode 26.2 Call Control Support 26.3 Time and Date Setting 26.3.1 Resetting the Time Page Page 27.1 Remote Management Overview 27.2 Remote Management 27.2.2 Remote Management Limitations 27.3 Remote Management and NAT 27.4System Timeout Page 28.1 IP Policy Routing Overview 28.2 Benefits of IP Policy Routing 28.3 Routing Policy 28.4 IP Routing Policy Setup Menu 25.1.1 – IP Routing Policy Page 28.5 Applying an IP Policy 28.6 IP Policy Routing Example Menu 25.1.1 — IP Routing Policy Menu 25.1 — IP Routing Policy Setup Page Page 29.1 Introduction Menu 26.1 — Schedule Set Setup Duration Main Menu PPPoA Page 30.1 Problems Starting Up the Prestige 30.2 Problems with the LAN LED 30.3 Problems with the Password 30.4 Problems with the DSL LED 30.5 Problems with the LAN Interface 30.6 Problems with the WAN Interface 30.7 Problems with Internet Access 30.8 Problems with Remote Management 30.9 Problems with the Web Configurator 30.9.1.1 Internet Explorer Pop-upBlockers Tools Pop-up Blocker Turn Off Privacy 2Select Settings…to open the Pop-upBlocker Settings screen Allowed sites 30.9.1.2JavaScripts Custom Level Scripting Active scripting Enable Scripting of Java applets 30.9.1.3 Java Permissions 2make sure that Use Java 2 for <applet> under Java (Sun) is selected Figure 173 Java (Sun) Appendix A Product Specifications Specification Tables Table 85 Firmware Page Page Appendix B Setting up Your Computer’s IP Address Windows 95/98/Me Installing Components Adapter Protocol Microsoft manufacturers Configuring Obtain an IP address automatically Specify an IP address Subnet Mask DNS Windows 2000/NT/XP 3Right-click Local Area Connection and then click Properties Internet Protocol (TCP/IP) Use the following IP Address IP address Subnet mask Default gateway •Click Advanced IP Settings TCP/IP Address Default gateways TCP/IP Gateway Address Use the following DNS server addresses Preferred DNS server Alternate DNS server Macintosh OS 8/9 2Select Ethernet built-in from the Connect via list Using DHCP Server Configure: Macintosh OS Linux Using the K Desktop Environment (KDE) System Setting Ethernet Device General Automatically obtain IP address settings with dhcp Using Configuration Files Page Page Appendix C IP Subnetting IP Addressing IP Classes Subnet Masks Subnetting Example: Two Subnets Page Example: Four Subnets Example Eight Subnets Subnetting With Class A and Class B Networks Page Appendix D Splitters and Microfilters Connecting a POTS Splitter Telephone Microfilters Prestige With ISDN Page Page Appendix E Command Interpreter Command Syntax Command Usage Page Appendix F Log Descriptions Page Table 103 CDR Logs Table 104 PPP Logs Page Appendix G PPPoE PPPoE in Action Benefits of PPPoE Traditional Dial-upScenario How PPPoE Works Prestige as a PPPoE Client Page Page Numerics