Siemens SL2-141 Router Manual PDF (Setup & Configuration Guide)

Page 101 / 144 Scroll up to view Page 96 - 100

Chapter 5:Connection Mode

IP Address seen by Internet Users

Please note that, in the above picture, both Internet users are connecting to the same IP address, but

using different protocols.

To Internet users, all virtual servers on your LAN have the same IP Address. This IP Address is

allocated by your ISP. This address should be static, rather than dynamic, to make it easier for

Internet users to connect to your Servers. However, you can use Dynamic DNS feature to allow

users to connect to your virtual servers by using a URL, instead of an IP address.

To set a virtual server, please open the

Virtual Servers

item from the

Advanced

Setup -

NAT

menu.

Add New Port Forwarding

To add a new Port Forwarding, please click

Add

from the Port Forwarding web page.

Pre-defined

Choose one of the services type from the

first drop down list, such as Audio/Video,

Games and so on. In the second drop down

list, choose the name of the application that

you want to use with the type that you select

in the first list.

User defined:

Type a new service name for building a

customized service for specific reason.

93

Page 102 / 144

ADSL Router User Manual

From Internet Host IP Address:

Select the initial place for port forwarding. If

you choose SINGLE, a box will appear for

you to fill in the IP address for the specific

host. And, if you choose SUBNET, the boxes

of IP and Subnet will appear for you to fill in

the IP address and subnet mask for the

specific host as the start point.

Forwarded to Internet Host IP Address:

Type in the address for the host used as the

place that information will be forwarded.

IP addresses can be automatically redirected to local servers configured with private IP addresses. In

other words, depending on the requested service (TCP/UDP port number), the router redirects the

external service request to the appropriate server (located at another internal IP address).

After adding a new virtual server, click

Apply

.

The following screen will be shown to

display the status for new ones.

If you do not want the new server that you

added, please check the

Delete

box of that

one and click the

Delete

button to discard it.

Or if you want to add another one again,

click

Add

to add a new one.

Connecting to the Virtual Servers

Once configured, anyone on the Internet can connect to your Virtual Servers. They must use the

Internet IP Address (the IP Address allocated to you by your ISP.)

For example,

Http://203.70.212.52

Ftp://203.70.212.52

It is more convenient if you are using a Fixed IP Address from your ISP, rather than Dynamic.

However, you can use the Dynamic DNS feature to allow users to connect to your Virtual Server

through a URL, rather than an IP Address.

Virtual Server-Port Triggering

When the router detects outbound traffic on

a specific port, it will set up the port

forwarding rules temporarily on the port

ranges that you specify to allow inbound

traffic. It is supposed to increase the support

for Internet gaming, video conferencing, and

Internet telephony due to the applications

require multiple connection.

To add a new port triggering, click

Add

to

open this web page. Than choose an

application name from the Pre-defined list

box. The system provides 9 items for your

choice.

94

Page 103 / 144

Chapter 5:Connection Mode

Or define by yourself by typing the words

into the field of User defined.

Click

Apply

to complete the setting.

Virtual Server - DMZ Host

Direct Mapping Zone (DMZ) uses a technology that makes Router forwarding all incoming packet

to internal specific server.

To close the function of DMZ Host, please

click Discarded.

To activate a DMZ host, please click

Forwarded to the DMZ host radio button and

type the IP Address into the field of IP

address of DMZ host, then click

Apply

.

This feature allows one computer on your LAN to be exposed to all users on the Internet, allowing

unrestricted 2-way communication between the specified IP address and other Internet users or

Servers.

±

This allows almost any application to be used on the specified IP address.

±

The specified IP address will receive all “Unknown” connections and data.

±

If the DMZ feature is enabled, you must type in numbers to specify an IP address.

±

The DMZ feature can be Enabled and Disabled on the NAT setting screen.

95

Page 104 / 144

ADSL Router User Manual

Virtual Server - Dynamic DNS

The Dynamic DNS (Dynamic Domain Nasme System) combines both functions of DNS and DHCP

to map a dynamic IP into a fixed domain name. This page allows you to access into virtual servers

with a domain name and password.

Dynamic DNS

：

Selects Enable to enable DDNS; select

Disabled to disable this function.

Internet Connection

：

Selects the interface that you want to use for

connecting Internet.

User Name

：

Type in the user name that you registered in

www.dyndns.org.

Password

：

Type in the password that you registered in

www.dyndns.org.

Domain Name

：

Type in the domain name that you registered

in www.dyndns.org. You can use letters and

dash for naming, yet other characters are not

allowed to use for preventing from making

troubles.

Status

：

It displays current status.

96

Page 105 / 144

Chapter 5:Connection Mode

Firewall

The firewall is a software that interrupts the data between the Internet and your computer. It is the

TCP/IP equivalent of a security gate at the entrance to your company. All data must pass through it,

and the firewall (functions as a security guard) will allow only authorized data to be passed into the

LAN.

What the firewall can do? It can:

±

deny or permit any packet from passing through explicitly

±

distinguish between various interfaces and match on the following fields:

´

source and destination IP address

´

port

To keep track of the performance of IP Filter, a logging device is used which supports logging of the

TCP/UDP and IP packet headers and the first 129 bytes of the packet (including headers) when a

packet is successfully

passed

through, a packet is

blocked

from passing through and it matches a

rule setup to look for suspicious packets

Filtering by IP address

An example for firewall setup:

This picture is the most common and easiest way to employ the firewall. Basically, you can install a

packet-filtering router at the Internet gateway and then configures the filter rule in the router to block

or filter protocols and addresses. The systems behind the router usually have a direct access to the

Internet, however some dangerous services such as NIS and NFS are usually blocked.

For the security of your router, set the firewall is an important issue.

Choose

Disabled

to disable the firewall

function. Click

Enabled

to invoke the

settings that you set in this web page.

To open the IP Filtering, please click the

Enabled

radio button. The web page will be

shown as the right picture.

Select the direction to filter packets:

The way of the data transmission. In Bound

means the data is transferred from outside

onto your computer. Out Bound means the

data is transferred from your computer onto

outside through Internet. Please choose

Outbound traffic

or

Inbound traffic

as the

direction for filtering packets.

97

Rate

Popular Siemens Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share