www.netcommlimited.com

NF1ADV User Guide

41

YML38

NAT

Network address translation (NAT) is the process of modifying IP address information in IP packet headers while in transit through

the router.

Port Forwarding

Port Forwarding allows you to direct incoming traffic from the Internet side (identified by Protocol and External port) to the internal

server with a private IP address on the LAN side. The Internal port is required only if the external port needs to be converted to a

different port number used by the server on the LAN side. A maximum of 32 entries can be configured.

Figure 44: Advanced - NAT - Virtual Server

To add a Virtual Server, click the Add button. The following screen will display.

Figure 45: Advanced - NAT - Add Virtual Server

FIELD

DESCRIPTION

Select a Service or custom

Server

Select a pre-configured port forwarding rule or choose custom server to create your own port

forwarding rule.

Server IP Address

Enter the IP address of the local server.

External Port Start

Enter the starting external port number (when custom server is selected). When a service is connected

this field will be completed automatically.

External Port End

Enter the ending external port number (when custom server is selected). When a service is connected

this field will be completed automatically.

Protocol

Options include TCP, UDP or TCP/UDP.

Internal Port Start

Enter the starting internal port number (when custom server is selected). When a service is connected

this field will be completed automatically.

Internal Port End

Enter the ending internal port number (when custom server is selected). When a service is connected

this field will be completed automatically.

Table 20: Advanced - NAT - Add Virtual Server Settings

42

NF1ADV User Guide

www.netcommlimited.com

YML27

WiFi Data and VoIP Gateway

NF1ADV

Port Triggering

Some applications require specific ports in the Router’s firewall to be open for access by remote parties. Port Triggering op

ens up

the ‘Open Ports’ in the firewall when an application on the LAN initiates a TCP/UDP connection to a remote party using the

‘Triggering Ports’.

The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using

the ‘Open Ports’. A maximum 32 entries can be configured.

Figure 46: Advanced - NAT - Port Triggering Setup

To add a Trigger Port, press the Add button. The following screen will be displayed.

Figure 47: Advanced - NAT - Add Port Trigger

FIELD

DESCRIPTION

Select an Application or Custom

Application

A user can select a pre-configured application from the list or select the Custom Application option to

create custom application settings.

Trigger Port Start

Enter the starting trigger port number (when you select Custom Application). When an application is

selected the port range values are automatically entered.

Trigger Port End

Enter the ending trigger port number (when you select Custom Application). When an application is

selected the port range values are automatically entered

.

Trigger Protocol

Options include TCP, UDP or TCP/UDP.

Open Port Start

Enter the starting open port number (when you select Custom Application). When an application is

selected the port range values are automatically entered.

Open Port End

Enter the ending open port number (when you select Custom Application). When an application is

selected the port range values are automatically entered.

Open Protocol

Options include TCP, UDP or TCP/UDP.

www.netcommlimited.com

NF1ADV User Guide

43

YML38

DMZ Host

The NF1ADV will forward IP packets from the Wide Area Network (WAN) that do not belong to any of the applications configured in

the Virtual Servers table to the DMZ host computer.

Enter the computer’s IP address and click Apply to activate the DMZ host. To deactivate the DMZ Host function clear the IP

address field and press the Save/Apply button.

Figure 48: Advanced - NAT - DMZ Host

IP Address Mapping

This feature allows the one or many LAN devices to be mapped to one or many WAN IP addresses.

Figure 49: Advanced - NAT - IP Address Mapping

OPTION

DEFINITION

Select a Service

Options include: One to One, Many to One, Many to Many(overload), Many to Many(no overload)

Local Start IP

The start IP address of a local IP address range.

Local End IP

The end IP address of a local IP address range. If you wish to use a single local IP address only, enter the same

IP address as the Local Start IP field into this field.

Public Start IP

The start IP address of a public/WAN IP address range.

Public End IP

The send IP address of a public/WAN IP address range. If you wish to use a single public IP address, enter the

same IP address as the Local Start IP field into this field.

Figure 50: Advanced - NAT - IP Address Mapping Settings

44

NF1ADV User Guide

www.netcommlimited.com

YML27

WiFi Data and VoIP Gateway

NF1ADV

Security

IP Filtering

The IP Filtering function sets filter rules that limit incoming and outgoing IP traffic. Multiple filter rules can be set with at least one

limiting condition. All conditions must be fulfilled for individual IP packets to pass through the filter.

Outgoing IP Filter

The default setting for Outgoing traffic is ACCEPTED. Under this condition, all outgoing IP packets that match the filter rules will be

BLOCKED.

Figure 51: Advanced - Security - IP Filter

–

Outgoing

To add an outgoing IP filtering rule, click the Add button. The following screen will be displayed.

Figure 52: Advanced - Security - IP Filter - Add Outgoing

FIELD

DESCRIPTION

Filter Name

The filter rule descriptive name.

IP Version

Select the IP Address protocol (IPv4 or IPv6).

Protocol

Options include TCP, UDP, TCP/UDP or ICMP Source IP Address.

Source IP Address

Enter the local source IP address from where the data originates.

Source Port (port or port:port)

Enter the source port number or port range for the filter rule.

Destination IP Address

Enter the destination IP address.

Destination Port (port or

port:port)

Enter the destination port number or port range for the filter rule.

Table 21: Advanced - Security - IP Filter - Add Outgoing IP Filter Settings

www.netcommlimited.com

NF1ADV User Guide

45

YML38

Incoming IP Filter

The default setting for all Incoming traffic is BLOCKED. Under this condition only those incoming IP packets that match the filter

rules will be ACCEPTED.

Figure 53: Advanced

–

Security

–

IP Filter

–

Incoming

To add an incoming IP filtering rule, click the Add button. The following screen will display.

Figure 54: Advanced - Security - IP Filter - Add Incoming IP Filter

Please refer to the Outgoing IP Filter table for field descriptions.

Click the Apply/Save button to save and activate the filter.