Page 66 / 118 Scroll up to view Page 61 - 65
NETGEAR RangeMax™ NEXT Wireless Router WNR834B User Manual
6-2
Fine-Tuning Your Network
v1.2, January 2007
How Your Computer Communicates With A Remote Computer Through Your
Router
When a computer on your network needs to access a computer on the Internet, your computer
sends your router a message containing source and destination address and process information.
Before forwarding your message to the remote computer, your router must modify the source
information and must create and track the communication session so that replies can be routed
back to your computer.
Here is an example of normal outbound traffic and the resulting inbound responses:
a.
You open Internet Explorer, beginning a browser session on your computer. Invisible to
you, your operating system assigns a service number (port number) to every
communication process running on your computer. In this example, let’s say Windows
assigns port number 5678 to this browser session.
b.
You ask your browser to get a Web page from the Web server at
www.example.com.
Your
computer composes a Web page request message with the following address and
port information:
The source address is your computer’s IP address.
The source port number is 5678, the browser session.
The destination address is the IP address of
www.example.com
, which your computer
finds by asking a DNS server.
The destination port number is 80, the standard port number for a Web server process.
Your computer then sends this request message to your router.
c.
Your router creates an entry in its internal session table describing this communication
session between your computer and the Web server at
www.example.com
. Before sending
the Web page request message to
www.example.com
, your router stores the original
information and then modifies the source information in the request message, performing
Network Address Translation (NAT):
The source address is replaced with your router’s public IP address.
This is necessary because your computer uses a private IP address that is not globally
unique and cannot be used on the Internet.
The source port number is changed to a number chosen by the router, such as 33333.
This is necessary because two computers could independently be using the same
session number.
Your router then sends this request message through the Internet to the Web server at
www.example.com
.
Page 67 / 118
NETGEAR RangeMax™ NEXT Wireless Router WNR834B User Manual
Fine-Tuning Your Network
6-3
v1.2, January 2007
d.
The Web server at
www.example.com
composes a return message with the requested Web
page data. The return message contains the following address and port information:
The source address is the IP address of
www.example.com
.
The source port number is 80, the standard port number for a Web server process.
The destination address is the public IP address of your router.
The destination port number is 33333.
The Web server then sends this reply message to your router.
e.
Upon receiving the incoming message, your router checks its session table to determine
whether there is an active session for port number 33333. Finding an active session, the
router then modifies the message, restoring the original address information replaced by
NAT. The message now contains the following address and port information:
The source address is the IP address of
www.example.com
.
The source port number is 80, the standard port number for a Web server process.
The destination address is your computer’s IP address.
The destination port number is 5678, the browser session that made the initial request.
Your router then sends this reply message to your computer, which displays the Web page
from
www.example.com
.
f.
When you finish your browser session, your router eventually senses a period of inactivity
in the communications. Your router then removes the session information from its session
table, and incoming traffic is no longer accepted on port number 33333.
How Port Triggering Changes the Communication Process
In the preceding example, requests are sent to a remote computer by your router from a particular
service port number and replies from the remote computer to your router are directed to that port
number. If the remote server sends a reply back to a different port number, your router will not
recognize it and will discard it. However, some application servers (such as FTP and IRC servers)
send replies back to multiple port numbers. Using the Port Triggering function of your router, you
can tell the router to open additional incoming ports when a particular outgoing port originates
a session.
An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at destination
port 6667. The IRC server not only responds to your originating source port, but also sends an
“identify” message to your computer on port 113. Using Port Triggering, you can tell the router,
“When you initiate a session with destination port 6667, you must also allow incoming traffic on
port 113 to reach the originating computer.” Using steps similar to the preceding example, the
following sequence shows the effects of the Port Triggering rule you have defined:
Page 68 / 118
NETGEAR RangeMax™ NEXT Wireless Router WNR834B User Manual
6-4
Fine-Tuning Your Network
v1.2, January 2007
a.
You open an IRC client program, beginning a chat session on your computer.
b.
Your IRC client composes a request message to an IRC server using a destination port
number of 6667, the standard port number for an IRC server process. Your computer then
sends this request message to your router.
c.
Your router creates an entry in its internal session table describing this communication
session between your computer and the IRC server. Your router stores the original
information, performs Network Address Translation (NAT) on the source address and
port, and sends this request message through the Internet to the IRC server.
d.
Noting your Port Triggering rule, and having observed the destination port number
of 6667, your router creates an additional session entry to send any incoming port
113 traffic to your computer.
e.
The IRC server sends a return message to your router using the NAT-assigned source port
(as in the previous example, let’s say port 33333) as the destination port. The IRC server
also sends an “identify” message to your router with destination port 113.
f.
Upon receiving the incoming message to destination port 33333, your router checks its
session table to determine whether there is an active session for port number 33333.
Finding an active session, the router restores the original address information replaced by
NAT and sends this reply message to your computer.
g.
Upon receiving the incoming message to destination port 113, your router checks its
session table and learns that there is an active session for port 113, associated with
your computer. The router replaces the message’s destination IP address with your
computer’s IP address and forwards the message to your computer.
h.
When you finish your chat session, your router eventually senses a period of inactivity in
the communications. The router then removes the session information from its session
table, and incoming traffic is no longer accepted on port numbers 33333 or 113.
To configure Port Triggering, you need to know which inbound ports the application needs. Also,
you need to know the outbound port number that will trigger the opening of the inbound ports.
This information can usually be determined by contacting the publisher of the application or from
user groups or newsgroups..
Note:
Only one computer at a time can use the triggered application.
Page 69 / 118
NETGEAR RangeMax™ NEXT Wireless Router WNR834B User Manual
Fine-Tuning Your Network
6-5
v1.2, January 2007
How Port Forwarding Changes the Communication Process
In both of the preceding examples, your computer initiates an application session with a server
computer on the Internet. However, you may need to allow a client computer on the Internet to
initiate a connection to a server computer on your network. Normally, your router will ignore any
inbound traffic that is not a response to your own outbound traffic. You can configure exceptions
to this default rule by using the Port Forwarding feature.
A typical application of Port Forwarding can be shown by reversing the client/server relationship
from our previous Web server example. In this case, a remote computer’s browser needs to access
a Web server running on a computer in your local network. Using Port Forwarding, you can tell the
router, “When you receive incoming traffic on port 80 (the standard port number for a Web server
process), forward it to the local computer at
192.168.1.123
.” The following sequence shows
the effects of the Port Forwarding rule you have defined:
a.
The user of a remote computer opens Internet Explorer and requests a Web page from
www.example.com
, which resolves to the public IP address of your router. The remote
computer composes a Web page request message with the following
destination information:
The destination address is the IP address of
www.example.com
, which is the address of
your router.
The destination port number is 80, the standard port number for a Web server process.
The remote computer then sends this request message through the Internet to your router.
b.
Your router receives the request message and looks in its rules table for any rules covering
the disposition of incoming port 80 traffic.
Your Port Forwarding rule specifies that
incoming port 80 traffic should be forwarded to local IP address
192.168.1.123.
Therefore, your router modifies the destination information in the request message:
The destination address is replaced with
192.168.1.123
.
Your router then sends this request message to your local network.
c.
Your Web server at
192.168.1.123
receives the request and composes a return
message with the requested Web page data. Your Web server then sends this reply message
to your router.
d.
Your router performs Network Address Translation (NAT) on the source IP address, and
sends this request message through the Internet to the remote computer, which displays the
Web page from
www.example.com
.
To configure Port Forwarding, you need to know which inbound ports the application needs. This
information can usually be determined by contacting the publisher of the application or from user
groups or newsgroups.
Page 70 / 118
NETGEAR RangeMax™ NEXT Wireless Router WNR834B User Manual
6-6
Fine-Tuning Your Network
v1.2, January 2007
How Port Forwarding Differs From Port Triggering
Port Triggering can be used by any computer on your network, although only one computer
may use it at a time.
Port Forwarding is configured for a single computer on your network.
Port Triggering does not need to know the computer’s IP address in advance. The IP address
will be captured automatically.
Port Forwarding requires that you specify the computer’s IP address during configuration, and
the IP address must never change.
Port Triggering requires specific outbound traffic to open the inbound ports, and the triggered
ports will be closed after a period of no activity.
Port Forwarding is always active and does not need to be triggered.
Configuring Port Forwarding to Local Servers
Using the Port Forwarding feature, you can allow certain types of incoming traffic to reach servers
on your local network. For example, you may make a local Web server, FTP server, or game server
visible and available to the Internet.
Use the Port Forwarding menu to configure the router to forward specific incoming protocols to
computers on your local network. In addition to servers for specific applications, you can also
specify a Default DMZ Server to which all other incoming protocols are forwarded. The DMZ
Server is configured in the WAN Setup menu as discussed in
“Setting Up a Default DMZ Server”
on page 5-7
.
Before starting, you need to determine which type of service, application or game you will
provide, and the local IP address of the computer that will provide the service. Be sure the
computer’s IP address never changes.
To configure port forwarding to a local server:
Tip:
To ensure that your server computer always has the same IP address, use the
reserved IP address feature of your WNR834B router. See
“Using Address
Reservation” on page 5-4
for instructions on how to use reserved IP addresses.

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top