22

Chapter 5: Setting Up and Configuring the Router

Setup Tab - DMZ Host

10/100 8-Port VPN Router

Setup Tab - DMZ Host

The DMZ (Demilitarized Zone) Host feature opens the firewall for one of your network’s users so they can access

the Internet to use a special-purpose service such as Internet gaming or video conferencing. This user, however,

is unprotected by the firewall.

To open the firewall for one network user to access one website, and visa versa, utilize the One-to-One NAT

feature.

Enter the

DMZ Private IP Address

to access the DMZ Host settings. The Default value zero (0) will deactivate the

DMZ Host.

Click the

Save Settings

button to save the DMZ Host setting or click the

Cancel Changes

button to undo the

changes.

Setup Tab - Forwarding

Port forwarding can be used to set up public services on your network. When users outside your network (i.e.,

from the Internet) make certain requests on your network, the Router can forward those requests to the

appropriate computers equipped to handle the requests. If, for example, you set port number 80 (HTTP) to be

forwarded to IP Address 192.168.1.2, then all HTTP requests from outside users will be forwarded to 192.168.1.2.

You may use this function to establish a Web server or FTP server via an IP Gateway. Be sure that you enter a

valid IP Address. (You may need to establish a static IP address in order to properly run an Internet server.) For

added security, those outside your network (i.e., from the Internet) will be able to communicate with the server

but they will not actually be connected. Those packets will simply be forwarded through the Router.

Figure 5-14: Setup Tab - DMZ Host

Figure 5-15: Setup Tab - Forwarding

http:

the communications protocol used to

connect to servers on the World Wide Web.

23

Chapter 5: Setting Up and Configuring the Router

Setup Tab - Forwarding

10/100 8-Port VPN Router

Port Range Forwarding

1.

Select the Service from the pull-down menu, shown in Figure 5-15.

2.

If the Service you need is not listed in the menu, please click the

Service Management

button to add the

new Service Name, and enter the Protocol and Port Range. This will open the Service Management screen.

Click the

Add to List

button. Then, click the

Save Setting

button. Click the

Exit

button.

3.

Enter the IP Address of the server that you want the Internet users to access. Then enable the entry.

4.

Click the

Add to List

button, and configure as many entries as you would like. You also can

Delete selected

application

.

Port Triggering

Some Internet applications or games use alternate ports to communicate between server and LAN host. When

you want to use those applications, enter the triggering (outgoing) port and alternate incoming port in this table.

The Router will forward the incoming packets to the LAN host.

1.

Enter the application name, range of port numbers, and the incoming port range.

2.

You can click the

Add to List

button, shown in Figure 5-15, to add Port Triggering or

Delete selected

application

.

Click the

Save Settings

button to save the settings, click the

Cancel Changes

button to undo your changes, click

the Show Tables to see the details.

NOTE:

The Router’s WAN IP (NAT Public) Address may not be included in a range.

NOTE:

One-to-One NAT does not change the way the firewall functions work. Access to

machines on the LAN from the Internet will not be allowed unless Network Access Rules are set.

Figure 5-16: Port Range Forwarding -

Service Management

24

Chapter 5: Setting Up and Configuring the Router

Setup Tab - UPnP Page

10/100 8-Port VPN Router

Setup Tab - UPnP Page

UPnP forwarding can be used to set up public services on your network. Windows XP can modify those entries

via UPnP when UPnP function is enabled.

UPnP Function: Enable this function by selecting

Yes

. The default setting for this feature is

No

.

To add a UPnP function:

1.

Select the Service from the pull-down menu.

2.

If the Service you need is not listed in menu, please click the

Service Management

button to add the new

Service Name, and enter the Protocol and Port Range. Click the

Add to List

button. Then, click the

Save

Setting

button. Click the

Exit

button.

3.

Enter the Name or IP Address of the server that you want the Internet users to access. Then enable the entry.

Click the

Add to List

button, and configure as many entries as you would like. You also can

Delete selected

application

. You can also see the specifics of each service you’ve added by clicking the

Show Tables

button.

Setup Tab - One-to-One NAT

One-to-One NAT opens the firewall for one network user a lot like the DMZ host feature. In this feature, however,

the network user is restricted to a single website.

To enable One-to-One NAT, check the

Enable

box at the top of the screen.

To set this up, you must define internal and external address ranges of equal length. Set the beginning of the

Private Range - this will be a range of IP Addresses on your network. Then, set the beginning of the Public Range

- this is the range of IP Addresses on the Internet. Lastly, set the Range Length. For however long this length is,

each first address will correspond and connect, as will the second, third, forth, etc. Up to 64 ranges may be

added. To map a single address, use a Range Length of 1.

Click the

Save Settings

button to save the settings or click the

Cancel Changes

button to undo your changes.

Figure 5-17: Setup Tab - UPnP

Figure 5-18: Setup Tab - One-to-One NAT

NOTE:

One-to-One NAT does change the way the firewall functions work.

Access to machines on the LAN from the Internet will be allowed unless

Network Access Rules are set.

25

Chapter 5: Setting Up and Configuring the Router

Setup Tab - MAC Clone

10/100 8-Port VPN Router

Setup Tab - MAC Clone

Some ISPs require that you register a MAC address. The MAC Clone feature “clones” your network adapter's

MAC address onto the Router, and prevents you from having to call your ISP to change the registered MAC

address to the Router's MAC address. The Router's MAC address is a 12-digit code assigned to a unique piece of

hardware for identification.

Enter the MAC Address in the User Defined WAN1 or WAN2 MAC Address field or select

MAC Address from this

PC

.

Click

Save Settings

to save the MAC Cloning settings or click the

Cancel Changes

button to undo your changes.

Setup Tab - DDNS

DDNS (Dynamic DNS) service allows you to assign a fixed domain name to a dynamic WAN IP address. This

allows you to host your own Web, FTP or other type of TCP/IP server in your LAN.

Before configuring DDNS, you need to visit

www.dyndns.org

or

www.3322.org

and register a domain name. (The

DDNS service is provided by DynDNS.org).

DDNS Service

: The DDNS feature is disabled by default. To enable this feature, just select

DynDNS.org

or

3322.org

from the pull-down menu, and enter the User name, Password, and Host Name of the account you set

up with the DDNS service.

Your IP Address

: The current IP Address for the WAN port (1 or 2) is displayed here. Because it is dynamic, this

will change.

Status

: The status of the DDNS function and Internet status is displayed.

Click the

Save Settings

button to save the DDNS settings or click the

Cancel Changes

button to undo your

changes.

NOTE:

This Router is also capable of dynamic routing from the DHCP tab. In many

cases, it is better to use dynamic routing because the function will allow the Router to

automatically adjust to physical changes in the network's layout. In order to use static

routing, the Router's DHCP settings must be disabled.

Figure 5-20: Setup Tab - DDNS

Figure 5-19: Setup Tab - MAC Clone

26

Chapter 5: Setting Up and Configuring the Router

Setup Tab - Advanced Routing

10/100 8-Port VPN Router

Setup Tab - Advanced Routing

Dynamic Routing

The Router's dynamic routing feature can be used to automatically adjust to physical changes in the network's

layout. The Router uses the dynamic RIP protocol, which is a networking protocol to manage network

communications or communications between networks. It determines the route that the network packets take

based on the fewest number of hops between the source and the destination. The RIP protocol regularly

broadcasts routing information to other routers on the network.

Working Mode

: Select

Gateway

mode if the Router is hosting your network’s connection to the Internet. Select

Router

mode if the Router exists on a network with other routers, including a separate network gateway that

handles the Internet connection. When this Router is in Router Mode, you must have another router function as

the gateway in order for any computer connected to the Router to be able to connect to the Internet.

RIP

(Routing Information Protocol): The Router, using the RIP protocol, calculates the most efficient route for the

network’s data packets to travel between the source and the destination, based upon the shortest paths.

Receive RIP versions

: Choose the protocol for receiving data from the network. (None, RIPv1, RIPv2, Both RIPv1

and v2).

Transmit RIP versions

: Choose the protocol for transmitting data on the network. (None, RIPv1,

RIPv2-Broadcast, RIPv2-Multicast)

Figure 5-21: Setup Tab - Advanced Routing