39

information on NAT.

The device can be configured as a virtual server so that remote users accessing services

such as Web or FTP services via the public (WAN) IP address can be automatically

redirected to local servers in the LAN network. Depending on the requested service

(TCP/UDP port number), the device redirects the external service request to the appropriate

server within the LAN network.

Rule Index:

Choose the rule number.

Application:

Start Port Number:

Enter a port number in this field.

End Port Number:

Enter a port number in this field.

Local

IP Address:

Enter your server IP address in this field.

40

IP Address Mapping

Rule Index:

Choose the rule number.

Rule Type:

One-to-one: This is the mode maps one local IP address to one global IP address. Note that

port numbers do not change for the One-to-one NAT mapping type.

Many-to-One: This is the mode maps multiple local IP addresses to one global IP address.

This is equivalent to Many to One (i.e., PAT, port address translation).

Many-to-Many Overload: This is mode maps multiple local IP addresses to shared global IP

addresses.

Many-to-Many No Overload: This is the mode maps each local IP address to unique global

IP addresses.

Server: This type allows you to specify inside servers of different services behind the NAT to

be accessible to the outside world.

Local Start IP:

This is the starting Inside Local IP Address (ILA). Local IP addresses are

N/A

for Server

port mapping.

Local End IP:

This is the end Inside Local IP Address (ILA). If your rule is for all local IP

addresses, then enter 0.0.0.0 as the Local Start IP address and 255.255.255.255 as the

41

Local End IP

address. This field is N/A

for One-to-one

and Server mapping types.

Public Start IP:

This is the starting Inside Public IP Address. Enter 0.0.0.0 here if you

have a dynamic IP address from your ISP.

Public End IP:

This is the ending Inside Public IP Address. This field is N/A for

One-to-one, Many-to-One

and Server mapping types.

Using port forwarding does have security implications, as outside users

will be able to connect to PCs on your network. For this reason you are

advised to use specific Virtual Server entries just for the ports your

application requires, instead of using DMZ. As doing so will result in all

connections from the WAN attempt to access to your public IP of the

DMZ PC specified

.

If you have disabled the NAT option in the WAN-ISP section, the

Virtual Server function will hence be invalid.

If the DHCP server option is enabled, you have to be very careful in

assigning the IP addresses of the virtual servers in order to avoid

conflicts. The easiest way of configuring Virtual Servers is to manually

assign static IP address to each virtual server PC, with an address that

does not fall into the range of IP addresses that are to be issued by the

DHCP server. You can configure the virtual server IP address

manually, but it must still be in the same subnet as the router.

Attention

42

4.3.4 ADSL

ADSL Mode:

The default setting is

Auto Sync-UP

. This mode will automatically detect

your ADSL, ADSL2+, ADSL2, G.dmt, G.lite, and T1.413. But in some area, multimode

cannot detect the ADSL line code well. If it is the case, please adjust the ADSL line code to

G.dmt or T1.413 first. If it still fails, please try the other values such as ALCTL, ADI, etc.

ADSL Type:

There are five modes “Open Annex Type and Follow DSLAM’s

Setting”, ”Annex A”, ”Annex I”, “Annex A/L”, ”Annex M” and “Annex A/I/L/M” that user can

select for this connection.

43

4.4 Access Management

4.4.1 ACL

Access Control Listing allows you to determine which services/protocols can access which

H6300 Series interface from which computers.

You can configure the router for remote Telnet access or upload and download router

firmware and configuration files using FTP. To use this feature, your computer must have an

FTP client. And can use the H6300 Series’s embedded web configurator for configuration

and file management.

ACL Rule Index:

This is item number

Secure IP Address:

The default 0.0.0.0 allows any client to use this service to remotely

manage the H6300 Series. Type an IP address to restrict access to a client with a matching

IP address.

Application:

Choose a service that you may use to remotely manage the H6300 Series.

Interface:

Select the access interface. Choices are

LAN

,

WAN

and

Both

.

4.4.2 Filter

You may use telnet or Web to remotely manage the ADSL2+ Router. User just needs to