1. Home
    2. /
  2. Manuals
    3. /
  3. NETGEAR
    4. /
  4. WNR2500
    5. /
  5. 18
Page 86 / 143 Scroll up to view Page 81 - 85
Advanced Settings
86
N450 Wireless Router WNR2500
This IP address must be in the same subnet as the base station, but different from the
LAN IP address of the base station.
5.
To prevent wireless clients from associating with the repeater and allow LAN client
associations only, select the
Disable Wireless Client Association
check box.
You can leave the check box cleared if you prefer wireless clients to be able to associate
with the repeater.
6.
In the Base Station MAC Address field, enter the MAC addresses for the access point that
will function as the base station.
7.
Click the
Apply
button.
8.
Verify connectivity across the LANs.
A computer on any wireless or wired LAN segment of the base station or a repeater can
connect to the Internet. Any computer that is connected to the base station can share files
and printers with any other wireless or wired computer or server that is connected to a
repeater.
Port Forwarding and Port Triggering Configuration
Concepts
By default, the router blocks inbound traffic from the Internet to your computers except replies
to your outbound traffic. You might need to create exceptions to this rule for these purposes:
•
To allow remote computers on the Internet to access a server on your local network
•
To allow certain applications and games to work correctly when your router does not
recognize their replies
Your router provides two features for creating these exceptions: port forwarding and port
triggering. The next sections provide background information to help you understand how
port forwarding and port triggering work, and the differences between the two.
Remote Computer Access Basics
When a computer on your network needs to access a computer on the Internet, your
computer sends your router a message containing the source and destination address and
process information. Before forwarding your message to the remote computer, your router
must modify the source information and create and track the communication session so that
replies can be routed back to your computer.
Here is an example of normal outbound traffic and the resulting inbound responses:
1.
You open a browser, and your operating system assigns port number 5678 to this
browser session.
2.
You type http://www.example.com into the URL field, and your computer creates a web page
request message and sends it to your router. The message contains the following address
and port information:
Page 87 / 143
Advanced Settings
87
N450 Wireless Router WNR2500
•
Source address
. Your computer’s IP address.
•
Source port number
. 5678, which is the browser session.
•
Destination address
. The IP address of www.example.com, which your computer
finds by asking a DNS server.
•
Destination port number
. 80, which is the standard port number for a web server
process.
3.
Your router creates an entry in its internal session table describing this communication
session between your computer and the web server at www.example.com. Before sending
the web page request message to www.example.com, your router stores the original
information and then modifies the source information in the request message, performing
Network Address Translation (NAT):
•
The source address is replaced with your router’s public IP address. This
replacement is necessary because your computer uses a private IP address that is
not globally unique and cannot be used on the Internet.
•
The source port number is changed to a number chosen by the router, such as
33333. This change is necessary because two computers could independently be
using the same session number.
Your router then sends this request message through the Internet to the web server at
www.example.com.
4.
The web server at www.example.com composes a return message with the requested web
page data. The web server then sends this reply message to your router. The return
message contains the following address and port information:
•
Source address
. The IP address of www.example.com.
•
Source port number
. 80, which is the standard port number for a web server
process.
•
Destination address
. The public IP address of your router.
•
Destination port number
. 33333.
5.
When your router receives the incoming message, it checks its session table for an active
session for port number 33333. Finding an active session, the router then modifies the
message to restore the original address information replaced by NAT. Your router sends
this reply message to your computer, which displays the web page from
www.example.com. The message now contains the following address and port information:
•
Source address
. The IP address of www.example.com.
•
Source port number
. 80, which is the standard port number for a web server
process.
•
Destination address
. Your computer’s IP address.
•
Destination port number
. 5678, which is the browser session that made the initial
request.
6.
When you finish your browser session, your router eventually detects a period of inactivity in
the communications. Your router then removes the session information from its session
table, and port number 33333 no longer accepts incoming traffic.
Page 88 / 143
Advanced Settings
88
N450 Wireless Router WNR2500
Port Triggering to Open Incoming Ports
In the preceding example, your router sends requests to a remote computer from a particular
service port number, and replies from the remote computer to your router are directed to that
port number. If the remote server sends a reply to a different port number, your router does
not recognize it and discards it. However, some application servers (such as FTP and IRC
servers) send replies to multiple port numbers. Using the port triggering function of your
router, you can tell the router to open more incoming ports when a particular outgoing port
originates a session.
An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at
destination port 6667. The IRC server not only responds to your originating source port, but
also sends an “identify” message to your computer on port 113. Using port triggering, you can
tell the router, “When you initiate a session with destination port 6667, you must also allow
incoming traffic on port 113 to reach the originating computer.”
Using steps similar to the preceding example, the following sequence shows the effects of
the port triggering rule you have defined:
1.
You open an IRC client program to start a chat session on your computer.
2.
Your IRC client composes a request message to an IRC server using a destination port
number of 6667, the standard port number for an IRC server process. Your computer then
sends this request message to your router.
3.
Your router creates an entry in its internal session table describing this communication
session between your computer and the IRC server. Your router stores the original
information, performs Network Address Translation (NAT) on the source address and port,
and sends this request message through the Internet to the IRC server.
4.
Noting your port triggering rule and having observed the destination port number of 6667,
your router creates an additional session entry to send any incoming port 113 traffic to your
computer.
5.
The IRC server sends a return message to your router using the NAT-assigned source port
(as in the previous example, say port 33333) as the destination port. The IRC server also
sends an “identify” message to your router with destination port 113.
6.
When your router receives the incoming message to destination port 33333, it checks its
session table for an active session for port number 33333. Finding an active session, the
router restores the original address information replaced by NAT and sends this reply
message to your computer.
7.
When your router receives the incoming message to destination port 113, it checks its
session table and finds an active session for port 113 associated with your computer. The
router replaces the message’s destination IP address with your computer’s IP address and
forwards the message to your computer.
8.
When you finish your chat session, your router eventually senses a period of inactivity in the
communications. The router then removes the session information from its session table,
and incoming traffic is no longer accepted on port numbers 33333 or 113.
To configure port triggering, you must know which inbound ports the application needs. Also,
you must know the number of the outbound port that triggers the opening of the inbound
ports. You can usually find this information by contacting the publisher of the application or
user groups or newsgroups.
Page 89 / 143
Advanced Settings
89
N450 Wireless Router WNR2500
Note:
Only one computer at a time can use the triggered application.
Port Forwarding to Permit External Host Communications
In both of the preceding examples, your computer initiates an application session with a
server computer on the Internet. However, you might need to allow a client computer on the
Internet to initiate a connection to a server computer on your network. Normally, your router
ignores any inbound traffic that is not a response to your own outbound traffic. You can
configure exceptions to this default rule by using the port forwarding feature.
A typical application of port forwarding can be shown by reversing the client-server
relationship from the previous web server example. In this case, a remote computer’s
browser must access a web server running on a computer in your local network. Using port
forwarding, you can tell the router, “When you receive incoming traffic on port 80 (the
standard port number for a web server process), forward it to the local computer at
192.168.1.123.” The following sequence shows the effects of the port forwarding rule you
have defined:
1.
The user of a remote computer opens a browser and requests a web page from
www.example.com, which resolves to the public IP address of your router. The remote
computer composes a web page request message with the following destination
information:
•
Destination address
. The IP address of www.example.com, which is the address of
your router.
•
Destination port number
. 80, which is the standard port number for a web server
process.
The remote computer then sends this request message through the Internet to your
router.
2.
Your router receives the request message and looks in its rules table for any rules covering
the disposition of incoming port 80 traffic. Your port forwarding rule specifies that incoming
port 80 traffic should be forwarded to local IP address 192.168.1.123. Therefore, your router
modifies the destination information in the request message:
The destination address is replaced with 192.168.1.123.
Your router then sends this request message to your local network.
3.
Your web server at 192.168.1.123 receives the request and composes a return message
with the requested web page data. Your web server then sends this reply message to your
router.
4.
Your router performs Network Address Translation (NAT) on the source IP address and
sends this request message through the Internet to the remote computer, which displays the
web page from www.example.com.
To configure port forwarding, you must know which inbound ports the application needs. You
can usually find this information by contacting the publisher of the application or the relevant
user groups and newsgroups.
Page 90 / 143
Advanced Settings
90
N450 Wireless Router WNR2500
How Port Forwarding Differs from Port Triggering
The following points summarize the differences between port forwarding and port triggering:
•
Any computer on your network can use port triggering, although only one computer can
use it at a time.
•
Port forwarding is configured for a single computer on your network.
•
Port triggering does not require that you know the computer’s IP address in advance. The
IP address is captured automatically.
•
Port forwarding requires that you specify the computer’s IP address during configuration,
and the IP address can never change.
•
Port triggering requires specific outbound traffic to open the inbound ports, and the
triggered ports are closed after a period of no activity.
•
Port forwarding is always active and does not need to be triggered.
Set Up Port Forwarding to Local Servers
Using the port forwarding feature, you can allow certain types of incoming traffic to reach
servers on your local network. For example, you might want to make a local web server, FTP
server, or game server visible and available to the Internet.
To configure the router to forward specific incoming protocols to computers on your local
network, use the Port Forwarding screen. In addition to servers for specific applications, you
can also specify a default DMZ server to which all other incoming protocols are forwarded.
Before starting, you must determine which type of service, application, or game you want to
provide, and the local IP address of the computer that should provide the service. The server
computer must always have the same IP address.
Tip:
To ensure that your server computer always has the same IP address,
use the reserved IP address feature (see
Set Up Address Reservation
on
page
53) of your router.
To set up port forwarding:
1.
Select
Advanced Setup > Port Forwarding / Port Triggering
.

Rate

4.5 / 5 based on 2 votes.

Popular NETGEAR Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top