Page 66 / 173
Scroll up to view Page 61 - 65
Vigor2900 Series User’s Guide
60
Service Name
Enter the description of the specific network service.
Protocol
Select the transport layer protocol (TCP or UDP).
Public Port
Specify which port can be redirected to the specified
Private IP and
Port
of the internal host.
Private IP
Specify the private IP address of the internal host providing the
service.
Private Port
Specify the private port number of the service offered by the internal
host.
Active
Check this box to activate the port-mapping entry you have defined.
Note that the router has its own built-in services (servers) such as Telnet, HTTP and FTP etc.
Since the common port numbers of these services (servers) are all the same, you may need to
reset the router in order to avoid confliction.
For example, the built-in web configurator in the router is with default port 80, which may
to change the router’s
http port
to any one other than the default port
80
to avoid conflict,
such as 8080. This can be set by the
Management Setup
in the
System Management
group.
You then will access the admin screen of by suffixing the IP address with 8080, e.g.,
Page 67 / 173
Vigor2900 Series User’s Guide
61
3.4.2 DMZ Host Setup
As mentioned above,
Port Redirection
can redirect incoming TCP/UDP or other traffic on
particular ports to the specific private IP address/port of host in the LAN. However, other IP
protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor
router provides a facility
DMZ Host
that maps ALL unsolicited data on any protocol to a
single host in the LAN. Regular web surfing and other such Internet activities from other
clients will continue to work without inappropriate interruption.
DMZ Host
allows a defined
internal user to be totally exposed to the Internet, which usually helps some special
applications such as Netmeeting or Internet Games etc.
The inherent security properties of NAT are somewhat bypassed if you set up DMZ
host. We suggest you to add additional filter rules or a secondary firewall.
Click
DMZ Host
to open the following page:
If you previously have set up
WAN Alias
in
Internet Access>>PPPoE,
you will find them in
Aux. WAN IP list
for your selection.
Page 68 / 173
Vigor2900 Series User’s Guide
62
Enable
Check to enable the DMZ Host function.
Private IP
Enter the private IP address of the DMZ host, or click Choose PC to
select one.
Choose PC
Click this button and then a window will automatically pop up, as
depicted below. The window consists of a list of private IP addresses
of all hosts in your LAN network. Select one private IP address in
the list to be the DMZ host.
When you have selected one private IP from the above dialog, the IP
address will be shown on the following screen. Click OK to save the
setting.
3.4.3 Open Ports Setup
Open Ports
allows you to open a range of
ports for the traffic of special applications.
Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella,
WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application
involved up-to-date to avoid falling victim to any security exploits.
Click
Open Ports
to open the following page:
Page 69 / 173
Vigor2900 Series User’s Guide
63
Index
Indicate the relative number for the particular entry that you want to
offer service in a local host. You should click the appropriate index
number to edit or clear the corresponding entry.
Comment
Specify the name for the defined network service.
Aux. WAN IP
Display the private IP address of the local host that you specify in
WAN Alias. If you did not specify any IP address in WAN Alias, this
item will not be shown.
Local IP Address
Display the private IP address of the local host offering the service.
Status
Display the state for the corresponding entry. X or V is to represent
the
Inactive
or
Active
state.
To add or edit port settings, click one index number on the page. The index entry setup page
will pop up. In each index entry, you can specify
10
port ranges for diverse services.
Page 70 / 173
Vigor2900 Series User’s Guide
64
However, if you previously have set up
WAN Alias
in
Internet Access>>PPPoE,
you will
find that
WAN IP
appeared
for your selection.
Enable Open Ports
Check to enable this entry.
Comment
Make a name for the defined network application/service.
Local Computer
Enter the private IP address of the local host or click Choose PC to
select one.
Choose PC
Click this button and, subsequently, a window having a list of
private IP addresses of local hosts will automatically pop up. Select
the appropriate IP address of the local host in the list.
Protocol
Specify the transport layer protocol. It could be
TCP
,
UDP
, or
-----
(none) for selection.
Start Port
Specify the starting port number of the service offered by the local
host.
End Port
Specify the ending port number of the service offered by the local
host.
Cancel
Exit this page without saving any change.
Clear All
Remove all the settings in this page.
OK
Save all the settings and exit this page.
19216811.live