TW100-BRV304 User Guide

48

Virtual Servers

This feature allows you to make Servers on your LAN accessible to Internet users. Normally,

Internet users would not be able to access a server on your LAN because:

•

Your Server does not have a valid external IP Address.

•

Attempts to connect to devices on your LAN are blocked by the firewall in this device.

The "Virtual Server" feature solves these problems and allows Internet users to connect to your

servers, as illustrated below.

Figure 31: Virtual Servers

IP Address seen by Internet Users

Note that, in this illustration, both Internet users are connecting to the same IP Address, but

using different protocols.

To Internet users, all virtual Servers on your LAN have the same IP Address.

This IP Address is allocated by your ISP.

This address should be static, rather than dynamic, to make it easier for Internet users to

connect to your Servers.

However, you can use the

DDNS (Dynamic DNS)

feature to allow users to connect to your

Virtual Servers using a URL, instead of an IP Address.

Internet Features

49

Using the DMZ port for Virtual Servers

You should connect your Virtual Servers to the DMZ port, for the following reasons:

•

Traffic passing between the DMZ and LAN passes through the firewall. The firewall will

protect your LAN if your Server is compromised and used to launch an attack on your

LAN.

•

For each enabled Virtual Server, a firewall rule to allow incoming traffic from the Internet

(WAN) to the DMZ is automatically created. If the Server is connected to the LAN (hub)

ports, you must add the firewall rule manually.

Note that the DMZ port is a normal port, not an "uplink" port. If connecting to a hub, connect

to the standard port on the hub.

Virtual Servers Screen

The

Virtual Servers

screen is reached by the

Virtual Servers

link on the

Internet

menu. An

example screen is shown below.

Figure 32: Virtual Servers Screen

This screen lists a number of pre-defined Servers,. providing a quick and convenient method to

set up the common server types.

Data - Virtual Servers Screen

Servers

This lists a number of pre-defined Servers, plus any Servers you

have defined. Details of the selected Server are shown in the

"Properties" area.

Enable

Use this to Enable or Disable support for this Server, as required.

•

If Enabled, any incoming connections will be forwarded to the

selected PC.

•

If Disabled, any incoming connection attempts will be blocked.

PC (Server)

Select the PC for this Server. The PC must be running the appro-

priate Server software.

TW100-BRV304 User Guide

50

Defining your own Virtual Servers

If the type of Server you wish to use is not listed on the

Virtual Servers

screen, you can use the

Firewall Rules to allow particular incoming traffic and forward it to a specified PC (Server).

Connecting to the Virtual Servers

Once configured, anyone on the Internet can connect to your Virtual Servers. They must use

the Internet IP Address (the IP Address allocated to you by your ISP).

e.g.

http://203.70.212.52

ftp://203.70.212.52

It is more convenient if you are using a Fixed IP Address from your ISP, rather than Dynamic.

However, you can use the

Dynamic DNS

feature, described in the following section, to allow

users to connect to your Virtual Servers using a URL, rather than an IP Address.

Options

This screen allows advanced users to enter or change a number of settings. For normal opera-

tion, there is no need to use this screen or change any settings.

Figure 33: Options Screen

Data - Options Screen

IP Address

Enter the IP Address of the DNS (Domain Name Servers) here. These

DNS will be used only if the primary DNS is unavailable.

Internet Features

51

MTU size

MTU (Maximum Transmission Unit) value should only be changed if

advised to do so by Technical Support.

•

Enter a value between 1 and 1500.

•

This device will still auto-negotiate with the remote server, to set

the MTU size. The smaller of the 2 values (auto-negotiated, or en-

tered here) will be used.

•

For direct connections (not PPPoE or PPTP), the MTU used is

always 1500.

52

Chapter 7

Security Configuration

This Chapter explains the settings available via the security configuration

section of the "Security" menu.

Overview

The following advanced configurations are provided.

•

Admin Login

•

Access Control

•

Firewall Rules

•

Logs

•

Security Options

•

Scheduling

•

Services

Admin Login

The Admin Login screen allows you to assign a user name and password to the TW100-

BRV304 .

Figure 34: Admin Login Screen

1.

The default login name is "admin". Change this to the desired value.

2.

The default password is blank (no password). Enter the desired password in the

New

Password

and

Verify Password

fields.

3.

Save your changes.

You will see a login prompt when you connect to the TW100-BRV304, as shown below.

7