Page 116 / 168 Scroll up to view Page 111 - 115
Configure Advanced Features
116
AC1900, N900, and N450 WiFi
Cable Data Gateways
The Wireless Settings screen displays (that is, the screen to configure advanced
settings).
6.
Click the
Set Up Access List
button.
The Wireless Card Access List screen displays.
7.
Select the access list for which you are changing the settings of a device:
Primary SSID
. The access list for the main WiFi network.
Guest Network SSID
. The access list for the guest WiFi network.
8.
In the table, select the radio button next to the device that you want to change.
9.
Click the
Edit
button.
The Edit Wireless Card screen displays.
10.
Change the device name or MAC address.
11.
Click the
Apply
button.
The settings are saved and display in the table on the Wireless Card Access List screen.
However, if you restart the cable data gateway, the changes are lost. You also must apply
the changes on the Wireless Card Access List screen.
12.
On the Wireless Card Access List screen, click the
Apply
button.
Your settings are saved.
Remove a Device From the WiFi Access List
You can remove a device from a WiFi access list if you no longer want to allow or deny
access to the device.
To remove a WiFi device from an access list:
1.
On your computer, launch an Internet browser such as Mozilla Firefox or Microsoft
Internet Explorer.
2.
In the address field of your browser, enter
http://routerlogin.net
.
You are prompted to enter a user name and password.
3.
Type
admin
for the user name and type your password.
If you did not yet personalize your password, type
password
for the password.
4.
Click the
OK
button.
The BASIC Home screen displays.
5.
Select
ADVANCED > Advanced Setup > Wireless Settings
.
The Wireless Settings screen displays (that is, the screen to configure advanced
settings).
6.
Click the
Set Up Access List
button.
The Wireless Card Access List screen displays.
Page 117 / 168
Configure Advanced Features
117
AC1900, N900, and N450 WiFi
Cable Data Gateways
7.
Select the access list from which you are removing a device:
Primary SSID
. The access list for the main WiFi network.
Guest Network SSID
. The access list for the guest WiFi network.
8.
In the table, select the radio button next to the device that you want to remove.
Note:
If you are connected to the cable data gateway over WiFi, make sure
that you do not remove your own device from an access list that allows
access. If you do, your device is denied access and you must
reconnect to the cable data gateway over an Ethernet cable.
9.
Click the
Delete
button.
The device is removed from the table on the Wireless Card Access List screen.
10.
Click the
Apply
button.
Your settings are saved.
Port Forwarding and Port Triggering Concepts
By default, the cable data gateway blocks inbound traffic from the Internet to your computers
except for replies to your outbound traffic. You might need to create exceptions to this rule for
these purposes:
To enable remote computers on the Internet to access a server on your local network
To enable certain applications and games to work correctly if the cable data gateway
does not recognize their replies
Your cable data gateway provides two features for creating these exceptions: port forwarding
and port triggering. For more information, see the following sections:
Remote Computer Access Basics
on page
117
Port Triggering to Open Incoming Ports
on page
119
Port Forwarding to Permit External Host Communications
on page
120
How Port Forwarding Differs from Port Triggering
on page
121
For information about how to configure port forwarding, see
Set Up Port Forwarding to Local
Computers
on page
121.
For information about how to configure port triggering, see
Set Up and Manage Port
Triggering
on page
127.
Remote Computer Access Basics
When a computer on your network must access a computer on the Internet, your computer
sends your cable data gateway a message containing the source and destination address
and process information. Before forwarding your message to the remote computer, your
cable data gateway must modify the source information and create and track the
communication session so that replies can be routed back to your computer.
Page 118 / 168
Configure Advanced Features
118
AC1900, N900, and N450 WiFi
Cable Data Gateways
Here is an example of normal outbound traffic and the resulting inbound responses:
1.
You open a browser, and your operating system assigns port number 5678 to this
browser session.
2.
You type http://www.example.com in the URL field, and your computer creates a web page
request message that it sends to your cable data gateway. The message contains the
following information:
Source address
. Your computer’s IP address
Source port number
. 5678, which is the browser session
Destination address
. The IP address of www.example.com, which your computer
finds by asking a DNS server
Destination port number
. 80, which is the standard port number for a web server
process
3.
Your cable data gateway creates an entry in its internal session table describing this
communication session between your computer and the web server at www.example.com.
Before sending the web page request message to www.example.com, your cable data
gateway stores the original information and then modifies the source information in the
request message, performing Network Address Translation (NAT):
The source address is replaced with your cable data gateway’s public IP address.
This requirement is necessary because your computer uses a private IP address that
is not globally unique and cannot be used on the Internet.
The source port number is changed to a number chosen by the cable data gateway,
such as 33333. This requirement is necessary because two computers might
independently be using the same port number.
Your cable data gateway then sends this request message through the Internet to the
web server at www.example.com.
4.
The web server at www.example.com composes a return message with the requested web
page data. The web server then sends this reply message to your cable data gateway.
The return message contains the following address and port information:
Source address
. The IP address of www.example.com
Source port number
. 80, which is the standard port number for a web server process
Destination address
. The public IP address of your cable data gateway
Destination port number
. 33333
5.
When your cable data gateway receives the incoming message, it checks its session table
for an active session for port number 33333. Finding an active session, the cable data
gateway then modifies the message to restore the original address information replaced by
NAT. Your cable data gateway sends this reply message to your computer, which
displays the web page from www.example.com. The message now contains the following
address and port information:
Source address
. The IP address of www.example.com
Source port number
. 80, which is the standard port number for a web server process
Destination address
. Your computer’s IP address
Page 119 / 168
Configure Advanced Features
119
AC1900, N900, and N450 WiFi
Cable Data Gateways
Destination port number
. 5678, which is the browser session that made the initial
request
6.
When you finish your browser session, your cable data gateway eventually detects a period
of inactivity in the communications and removes the session information from its session
table. Incoming traffic is no longer accepted on port number 33333.
Port Triggering to Open Incoming Ports
Some application servers (such as FTP and IRC servers) send replies to multiple port
numbers. Using the port triggering function of your cable data gateway, you can tell the cable
data gateway to open more incoming ports when a particular outgoing port originates a
session.
An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at
destination port 6667. The IRC server not only responds to your originating source port but
also sends an “identify” message to your computer on port 113. Using port triggering, you can
tell the cable data gateway, “When you initiate a session with destination port 6667, you must
also allow incoming traffic on port 113 to reach the originating computer.” The following
sequence shows the effects of this port triggering rule:
1.
You open an IRC client program to start a chat session on your computer.
2.
Your IRC client composes a request message to an IRC server using a destination port
number of 6667, the standard port number for an IRC server process. Your computer then
sends this request message to your cable data gateway.
3.
Your cable data gateway creates an entry in its internal session table describing this
communication session between your computer and the IRC server. Your cable data
gateway stores the original information, performs Network Address Translation (NAT) on the
source address and port, and sends this request message through the Internet to the IRC
server.
4.
When the cable data gateway detects the port triggering rule and the destination port
number of 6667, it creates an additional session entry to send any incoming port 113 traffic
to your computer.
5.
The IRC server sends a return message to your cable data gateway using the
NAT-assigned source port (for example, port 33333) as the destination port and sends an
“identify” message to your cable data gateway with destination port 113.
6.
When your cable data gateway detects the incoming message to destination port 33333, it
checks its session table for an active session for port number 33333. Finding an active
session, the cable data gateway restores the original address information replaced by NAT
and sends this reply message to your computer.
7.
When your cable data gateway detects the incoming message to destination port 113, it
checks its session table and learns that an active session for port 113 is associated with
your computer. The cable data gateway replaces the message’s destination IP address
with your computer’s IP address and forwards the message to your computer.
8.
When you finish your chat session, your cable data gateway eventually detects a period of
inactivity in the communications. The cable data gateway then removes the session
information from its session table and incoming traffic is no longer accepted on port numbers
33333 or 113.
Page 120 / 168
Configure Advanced Features
120
AC1900, N900, and N450 WiFi
Cable Data Gateways
To configure port triggering, you must know which inbound ports the application needs. Also,
you must know the number of the outbound port that will trigger the opening of the inbound
ports. You can usually find this information by contacting the publisher of the application or
the user groups or news groups.
Note:
Only one computer at a time can use the triggered application.
Port Forwarding to Permit External Host Communications
In the examples in
Remote Computer Access Basics
on page
117 and
Port Triggering to
Open Incoming Ports
on page
119, your computer initiates an application session with a
server computer on the Internet. However, you might need to allow a client computer on the
Internet to initiate a connection to a server computer on your network. Normally, your cable
data gateway ignores any inbound traffic that is not a response to your own outbound traffic.
You can configure exceptions to this default rule by using the port forwarding feature.
A typical application of port forwarding can be shown by reversing the client-server
relationship from the web server example in
Port Triggering to Open Incoming Ports
on
page
119. In this case, a remote computer’s browser must access a web server running on a
computer in your local network. Using port forwarding, you can tell the cable data gateway,
“When you receive incoming traffic on port 80 (the standard port number for a web server
process), forward it to the local computer at 192.168.0.123.”
The following sequence shows the effects of this port forwarding rule:
1.
The user of a remote computer opens a browser and requests a web page from
www.example.com, which resolves to the public IP address of your cable data gateway.
The remote computer composes a web page request message with the following
destination information:
Destination address
. The IP address of www.example.com, which is the address of
your cable data gateway
Destination port number
. 80, which is the standard port number for a web server
process
The remote computer then sends this request message through the Internet to your cable
data gateway.
2.
Your cable data gateway receives the request message and looks in its rules table for any
rules covering the disposition of incoming port 80 traffic. Your port forwarding rule specifies
that incoming port 80 traffic must be forwarded to local IP address 192.168.0.123. Therefore,
your cable data gateway modifies the destination information in the request message.
The destination address is replaced with 192.168.0.123.
Your cable data gateway then sends this request message to your local network.
3.
Your web server at 192.168.0.123 receives the request and composes a return message
with the requested web page data and sends this reply message to your cable data
gateway.

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top