16

of

72

ADVANCED HELP

•

Virtual Server

•

Special Applications

•

Gaming

•

Traffic Shaping

•

Routing

•

Access Control

•

Web Filter

•

MAC Address Filter

•

Firewall Settings

•

Inbound Filter

•

Advanced Wireless

•

WISH

•

Wi-Fi Protected Setup

•

Advanced Network

•

Failover

VIRTUAL SERVER

The Virtual Server option gives Internet users access to services on your LAN. This feature is

useful for hosting online services such as FTP, Web, or game servers. For each Virtual Server,

you define a public port on your router for redirection to an internal LAN IP Address and LAN port.

Example:

You are hosting a Web Server on a PC that has LAN IP Address of 192.168.0.50 and

your ISP is blocking Port 80.

1.

Name the Virtual Server (for example:

Web Server

)

2.

Enter the IP Address of the machine on your LAN (for example:

192.168.0.50

3.

Enter the Private Port as [80]

4.

Enter the Public Port as [8888]

5.

Select the Protocol (for example

TCP

).

6.

Ensure the schedule is set to

Always

7. Click

Save

to add the settings to the Virtual Servers List

8.

Repeat these steps for each Virtual Server Rule you wish to add.

With this Virtual Server entry, all Internet traffic on Port 8888 will be redirected to your

internal web server on port 80 at IP Address 192.168.0.50.

Add/Edit Virtual Server

Enable

Specifies whether the entry will be active or inactive.

Name

Assign a meaningful name to the virtual server, for example

Web Server

. Several well-

known types of virtual server are available from the "Application Name" drop-down list.

Selecting one of these entries fills some of the remaining parameters with standard

values for that type of server.

17

of

72

IP Address

The IP address of the system on your internal network that will provide the virtual service,

for example

192.168.0.50

. You can select a computer from the list of DHCP clients in the

"Computer Name" drop-down menu, or you can manually enter the IP address of the

server computer.

Protocol

Select the protocol used by the service. The common choices -- UDP, TCP, and both

UDP and TCP -- can be selected from the drop-down menu. To specify any other

protocol, select "Other" from the list, then enter the corresponding protocol number (

as

assigned by the IANA

) in the

Protocol

box.

Private Port

The port that will be used on your internal network.

Public Port

The port that will be accessed from the Internet.

Schedule

Select a schedule for when the service will be enabled. If you do not see the schedule

you need in the list of schedules, go to the

Tools

→

Schedules

screen and create a new

schedule.

Inbound Filter

Select a filter that controls access as needed for this virtual server. If you do not see the

filter you need in the list of filters, go to the

Advanced

→

Inbound Filter

screen and create

a new filter.

Save/Update

Record the changes you have made into the following list.

Clear

Re-initialize this area of the screen, discarding any changes you have made.

Virtual Server List

This is a list of the defined Virtual Servers. Click the Enable checkbox at the left to

directly activate or de-activate the entry. An entry can be changed by clicking the Edit

icon or can be deleted by clicking the Delete icon. When you click the Edit icon, the item

is highlighted, and the "Edit Virtual Servers" section is activated for editing.

18

of

72

Note:

You might have trouble accessing a virtual server using its public identity (WAN-side IP-

address of the gateway or its dynamic DNS name) from a machine on the LAN. Your requests

may not be looped back or you may be redirected to the "Forbidden" page.

The requests from the LAN machine will not be looped back if Internet access is blocked at the

time of access. To work around this problem, access the LAN machine using its LAN-side

identity.

Requests may be redirected to the "Forbidden" page if web access for the LAN machine is

restricted by an Access Control Rule. Add the WAN-side identity (WAN-side IP-address of the

router or its dynamic DNS name) on the

Advanced

→

Web Filter

screen to work around this

problem.

GAMING

Multiple connections are required by some applications, such as internet games, video

conferencing, Internet telephony, and others. These applications have difficulties working through

NAT (Network Address Translation). This section is used to open multiple ports or a range of

ports in your router and redirect data through those ports to a single PC on your network. You can

enter ports in various formats:

Range (50-100)

Individual (80, 68, 888)

Mixed (1020-5000, 689)

Example:

Suppose you are hosting an online game server that is running on a PC with a private IP

Address of 192.168.0.50. This game requires that you open multiple ports (6159-6180,

99) on the router so Internet users can connect.

Add/Edit Gaming Rule

Use this section to add a Gaming Rule to the following list or to edit a rule already in the

list.

Enable

Specifies whether the entry will be active or inactive.

Name

Give the rule a name that is meaningful to you, for example

Game Server

. You can also

select from a list of popular games, and many of the remaining configuration values will

be filled in accordingly. However, you should check whether the port values have

changed since this list was created, and you must fill in the IP address field.

IP Address

Enter the local network IP address of the system hosting the server, for example

192.168.0.50

. You can select a computer from the list of DHCP clients in the "Computer

Name" drop-down menu, or you can manually enter the IP address of the server

computer.

19

of

72

TCP Ports

Enter the TCP ports to open (for example

6159-6180, 99

).

UDP Ports

Enter the UDP ports to open (for example

6159-6180, 99

).

Schedule

Select a schedule for the times when this rule is in effect. If you do not see the schedule

you need in the list of schedules, go to the

Tools

→

Schedules

screen and create a new

schedule.

Inbound Filter

Select a filter that controls access as needed for this rule. If you do not see the filter you

need in the list of filters, go to the

Advanced

→

Inbound Filter

screen and create a new

filter.

Save/Update

Record the changes you have made into the following list.

Clear

Re-initialize this area of the screen, discarding any changes you have made.

With the above example values filled in and this Gaming Rule enabled, all TCP and UDP

traffic on ports 6159 through 6180 and port 99 is passed through the router and

redirected to the Internal Private IP Address of your Game Server at 192.168.0.50.

Note that different LAN computers cannot be associated with Gaming rules that contain

any ports in common; such rules would contradict each other.

Gaming Rules

This is a list of the defined Gaming Rules. Click the Enable checkbox at the left to directly

activate or de-activate the entry. An entry can be changed by clicking the Edit icon or can

be deleted by clicking the Delete icon. When you click the Edit icon, the item is

highlighted, and the "Edit Gaming Rule" section is activated for editing.

APPLICATION RULES

An application rule is used to open single or multiple ports on your router when the router senses

data sent to the Internet on a "trigger" port or port range. An application rule applies to all

computers on your internal network.

20

of

72

Add/Edit Application Rule

Example:

You need to configure your router to allow a software application running on any

computer on your network to connect to a web-based server or another user on the

Internet.

Enable

Specifies whether the entry will be active or inactive.

Name

Enter a name for the Special Application Rule, for example

Game App

, which will help

you identify the rule in the future. Alternatively, you can select from the

Application

list of

common applications.

Application

Instead of entering a name for the Special Application rule, you can select from this list of

common applications, and the remaining configuration values will be filled in accordingly.

Trigger Port

Enter the outgoing port range used by your application (for example

6500-6700

).

Trigger Traffic Type

Select the outbound protocol used by your application (for example

Both

).

Firewall Port

Enter the port range that you want to open up to Internet traffic (for example

6000-6200

).

Firewall Traffic Type

Select the protocol used by the Internet traffic coming back into the router through the

opened port range (for example

Both

).

Schedule

Select a schedule for when this rule is in effect. If you do not see the schedule you need

in the list of schedules, go to the

Tools

→

Schedules

screen and create a new schedule.

Save/Update

Record the changes you have made into the following list.