Vigor2900 Series User’s Guide

60

Service Name

Enter the description of the specific network service.

Protocol

Select the transport layer protocol (TCP or UDP).

Public Port

Specify which port can be redirected to the specified

Private IP and

Port

of the internal host.

Private IP

Specify the private IP address of the internal host providing the

service.

Private Port

Specify the private port number of the service offered by the internal

host.

Active

Check this box to activate the port-mapping entry you have defined.

Note that the router has its own built-in services (servers) such as Telnet, HTTP and FTP etc.

Since the common port numbers of these services (servers) are all the same, you may need to

reset the router in order to avoid confliction.

For example, the built-in web configurator in the router is with default port 80, which may

conflict with the web server in the local network, http://192.168.1.13:80. Therefore, you need

to change the router’s

http port

to any one other than the default port

80

to avoid conflict,

such as 8080. This can be set by the

Management Setup

in the

System Management

group.

You then will access the admin screen of by suffixing the IP address with 8080, e.g.,

http://192.168.1.1:8080 instead of port 80.

Vigor2900 Series User’s Guide

61

3.4.2 DMZ Host Setup

As mentioned above,

Port Redirection

can redirect incoming TCP/UDP or other traffic on

particular ports to the specific private IP address/port of host in the LAN. However, other IP

protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor

router provides a facility

DMZ Host

that maps ALL unsolicited data on any protocol to a

single host in the LAN. Regular web surfing and other such Internet activities from other

clients will continue to work without inappropriate interruption.

DMZ Host

allows a defined

internal user to be totally exposed to the Internet, which usually helps some special

applications such as Netmeeting or Internet Games etc.

The inherent security properties of NAT are somewhat bypassed if you set up DMZ

host. We suggest you to add additional filter rules or a secondary firewall.

Click

DMZ Host

to open the following page:

If you previously have set up

WAN Alias

in

Internet Access>>PPPoE,

you will find them in

Aux. WAN IP list

for your selection.

Vigor2900 Series User’s Guide

62

Enable

Check to enable the DMZ Host function.

Private IP

Enter the private IP address of the DMZ host, or click Choose PC to

select one.

Choose PC

Click this button and then a window will automatically pop up, as

depicted below. The window consists of a list of private IP addresses

of all hosts in your LAN network. Select one private IP address in

the list to be the DMZ host.

When you have selected one private IP from the above dialog, the IP

address will be shown on the following screen. Click OK to save the

setting.

3.4.3 Open Ports Setup

Open Ports

allows you to open a range of

ports for the traffic of special applications.

Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella,

WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application

involved up-to-date to avoid falling victim to any security exploits.

Click

Open Ports

to open the following page:

Vigor2900 Series User’s Guide

63

Index

Indicate the relative number for the particular entry that you want to

offer service in a local host. You should click the appropriate index

number to edit or clear the corresponding entry.

Comment

Specify the name for the defined network service.

Aux. WAN IP

Display the private IP address of the local host that you specify in

WAN Alias. If you did not specify any IP address in WAN Alias, this

item will not be shown.

Local IP Address

Display the private IP address of the local host offering the service.

Status

Display the state for the corresponding entry. X or V is to represent

the

Inactive

or

Active

state.

To add or edit port settings, click one index number on the page. The index entry setup page

will pop up. In each index entry, you can specify

10

port ranges for diverse services.

Vigor2900 Series User’s Guide

64

However, if you previously have set up

WAN Alias

in

Internet Access>>PPPoE,

you will

find that

WAN IP

appeared

for your selection.

Enable Open Ports

Check to enable this entry.

Comment

Make a name for the defined network application/service.

Local Computer

Enter the private IP address of the local host or click Choose PC to

select one.

Choose PC

Click this button and, subsequently, a window having a list of

private IP addresses of local hosts will automatically pop up. Select

the appropriate IP address of the local host in the list.

Protocol

Specify the transport layer protocol. It could be

TCP

,

UDP

, or

-----

(none) for selection.

Start Port

Specify the starting port number of the service offered by the local

host.

End Port

Specify the ending port number of the service offered by the local

host.

Cancel

Exit this page without saving any change.

Clear All

Remove all the settings in this page.

OK

Save all the settings and exit this page.