Wireless-G Router WGR614v9 Reference Manual

5-4

Fine-Tuning Your Network

v1.1, May 2008

“When you initiate a session with destination port 6667, you must also allow incoming traffic on

port 113 to reach the originating computer.” Using steps similar to the preceding example, the

following sequence shows the effects of the port triggering rule you have defined:

1.

You open an IRC client program, beginning a chat session on your computer.

2.

Your IRC client composes a request message to an IRC server using a destination port number

of 6667, the standard port number for an IRC server process. Your computer then sends this

request message to your router.

3.

Your router creates an entry in its internal session table describing this communication session

between your computer and the IRC server. Your router stores the original information,

performs Network Address Translation (NAT) on the source address and port, and sends this

request message through the Internet to the IRC server.

4.

Noting your port triggering rule, and having observed the destination port number of 6667,

your router creates an additional session entry to send any incoming port 113 traffic to your

computer.

5.

The IRC server sends a return message to your router using the NAT-assigned source port (as

in the previous example, let’s say port 33333) as the destination port. The IRC server also

sends an “identify” message to your router with destination port 113.

6.

Upon receiving the incoming message to destination port 33333, your router checks its session

table to determine whether there is an active session for port number 33333. Finding an active

session, the router restores the original address information replaced by NAT and sends this

reply message to your computer.

7.

Upon receiving the incoming message to destination port 113, your router checks its session

table and learns that there is an active session for port 113, associated with your computer. The

router replaces the message’s destination IP address with your computer’s IP address and

forwards the message to your computer.

8.

When you finish your chat session, your router eventually senses a period of inactivity in the

communications. The router then removes the session information from its session table, and

incoming traffic is no longer accepted on port numbers 33333 or 113.

To configure port triggering, you need to know which inbound ports the application needs. Also,

you need to know the number of the outbound port that will trigger the opening of the inbound

ports. You can usually determine this information by contacting the publisher of the application, or

user groups or newsgroups.

Note:

Only one computer at a time can use the triggered application.

Wireless-G Router WGR614v9 Reference Manual

Fine-Tuning Your Network

5-5

v1.1, May 2008

How Port Forwarding Changes the Communication Process

In both of the preceding examples, your computer initiates an application session with a server

computer on the Internet. However, you might need to allow a client computer on the Internet to

initiate a connection to a server computer on your network. Normally, your router ignores any

inbound traffic that is not a response to your own outbound traffic. You can configure exceptions

to this default rule by using the port forwarding feature.

A typical application of port forwarding can be shown by reversing the client-server relationship

from our previous Web server example. In this case, a remote computer’s browser needs to access

a Web server running on a computer in your local network. Using port forwarding, you can tell the

router, “When you receive incoming traffic on port 80 (the standard port number for a Web server

process), forward it to the local computer at 192.168.1.123.” The following sequence shows the

effects of the port forwarding rule you have defined:

1.

The user of a remote computer opens Internet Explorer and requests a Web page from

www.example.com, which resolves to the public IP address of your router. The remote

computer composes a Web page request message with the following destination information:

•

The destination address is the IP address of www.example.com, which is the address of

your router.

•

The destination port number is 80, the standard port number for a Web server process.

The remote computer then sends this request message through the Internet to your router.

2.

Your router receives the request message and looks in its rules table for any rules covering the

disposition of incoming port 80 traffic. Your port forwarding rule specifies that incoming port

80 traffic should be forwarded to local IP address 192.168.1.123. Therefore, your router

modifies the destination information in the request message:

The destination address is replaced with 192.168.1.123.

Your router then sends this request message to your local network.

3.

Your Web server at 192.168.1.123 receives the request and composes a return message with

the requested Web page data. Your Web server then sends this reply message to your router.

4.

Your router performs Network Address Translation (NAT) on the source IP address, and sends

this request message through the Internet to the remote computer, which displays the Web

page from www.example.com.

To configure port forwarding, you need to know which inbound ports the application needs. You

usually can determine this information by contacting the publisher of the application or user

groups or newsgroups.

Wireless-G Router WGR614v9 Reference Manual

5-6

Fine-Tuning Your Network

v1.1, May 2008

How Port Forwarding Differs from Port Triggering

The following points summarize the differences between port forwarding and port triggering:

•

Port triggering can be used by any computer on your network, although only one computer can

use it at a time.

•

Port forwarding is configured for a single computer on your network.

•

Port triggering does not need to know the computer’s IP address in advance. The IP address is

captured automatically.

•

Port forwarding requires that you specify the computer’s IP address during configuration, and

the IP address must never change.

•

Port triggering requires specific outbound traffic to open the inbound ports, and the triggered

ports are closed after a period of no activity.

•

Port forwarding is always active and does not need to be triggered.

Configuring Port Forwarding to Local Servers

Using the port forwarding feature, you can allow certain types of incoming traffic to reach servers

on your local network. For example, you might make a local Web server, FTP server, or game

server visible and available to the Internet.

Use the Port Forwarding screen to configure the router to forward specific incoming protocols to

computers on your local network. In addition to servers for specific applications, you can also

specify a default DMZ server to which all other incoming protocols are forwarded. The DMZ

server is configured in the WAN Setup screen, as discussed in

“Setting Up a Default DMZ Server”

on page 4-6

.

Before starting, you need to determine which type of service, application, or game you will

provide, and the local IP address of the computer that will provide the service. Be sure the

computer’s IP address never changes.

Tip:

To ensure that your server computer always has the same IP address, use the

reserved IP address feature of your Wireless-G Router. See

“Using Address

Reservation” on page 4-3

for instructions on how to use reserved IP addresses.

Wireless-G Router WGR614v9 Reference Manual

Fine-Tuning Your Network

5-7

v1.1, May 2008

To configure port forwarding to a local server:

1.

Select

Port Forwarding/Port Triggering

under Advanced in the main menu.

2.

From the

Service Name

list, select the service or game that you will host on your network.

If the service does not appear in the list, see the following section,

“Adding a Custom

Service

.”

3.

In the corresponding

Server IP Address

box, enter the last digit of the IP address of your local

computer that will provide this service.

4.

Click

Add

. The service appears in the list in the screen.

Adding a Custom Service

To define a service, game, or application that does not appear in the Service Name list, you must

first determine which port number or range of numbers is used by the application. You can usually

determine this information by contacting the publisher of the application or user groups or

newsgroups. When you have the port number information, follow these steps:

1.

Select

Port Forwarding/Port Triggering

under Advanced in the main menu.

Figure 5-1

Wireless-G Router WGR614v9 Reference Manual

5-8

Fine-Tuning Your Network

v1.1, May 2008

2.

Click

Add Custom Service

.

3.

In the

Service Name

field, enter a descriptive name.

4.

In the

Service Type

field, select the protocol. If you are unsure, select

TCP/UDP

.

5.

In the

Starting Port

field, enter the beginning port number.

•

If the application uses only a single port, enter the same port number in the

Ending Port

field.

•

If the application uses a range of ports, enter the ending port number of the range in the

Ending Port

field.

6.

In the

Server IP Address

field, enter the IP address of your local computer that will provide

this service.

7.

Click

Apply

. The service appears in the list in the Port Forwarding/Port Triggering screen.

Editing or Deleting a Port Forwarding Entry

To edit or delete a port forwarding entry:

1.

In the table, select the button next to the service name.

2.

Click

Edit Service

or

Delete Service

.

Application Example: Making a Local Web Server Public

If you host a Web server on your local network, you can use port forwarding to allow Web requests

from anyone on the Internet to reach your Web server.

Figure 5-2