Page 86 / 198 Scroll up to view Page 81 - 85
ZXDSL 931WII Operation manual
F
IGURE
106 WAN S
ERVICE
O
VERVIEW
By default, system preset WAN Interface is
atm0
and
ptm0_1
.
5.
Click
Add
to display the interface as shown in
F
i
g
u
r
e
1
0
7
, and
select PTM interface the Layer 2 interface.
F
IGURE
107 S
ELECT
L
AYER
2 I
NTERFACE
6.
Click
Next
to enter the interface as shown in
F
i
g
u
r
e
1
0
8
.
80
Confidential and Proprietary Information of ZTE CORPORATION
Page 87 / 198
Chapter 7 VLAN Trunking Configuration
F
IGURE
108 S
ELECT
WAN S
ERVICE
T
YPE
7.
Select
Bridging
.
8.
Select the
Enable VLAN Mux
checkbox and enter the value of
the 802.1q VLAN tag and priority.
9.
Click
Next
to enter the interface as shown in
F
i
g
u
r
e
1
0
9
.
F
IGURE
109 PTM I
NTERFACE
B
RIDGE
WAN C
ONNECTION
S
ETUP
S
UMMARY
10. Click
Save/Apply
to
save
the
configuration
so
that
the
changes can take effect, as shown in
F
i
g
u
r
e
1
1
0
.
Confidential and Proprietary Information of ZTE CORPORATION
81
Page 88 / 198
ZXDSL 931WII Operation manual
F
IGURE
110 PTM I
NTERFACE
B
RIDGE
WAN C
ONNECTION
C
ONFIGURATION
C
OMPLETED
11. Go back to
vlan Trunk Setting
interface, select the
LAN in-
terface select
and
vlan Trunk Enable
checkbox to display
the interface as shown in
F
i
g
u
r
e
1
1
1
.
F
IGURE
111 VLAN T
RUNKING
C
ONFIGURATION
12. Enter the
Supported VLAN Number
,
Vlan ID
and
PVID
.
Note:
PVID CANNOT be the same as the VLAN trunk Id.
If PVID is set to ’N/A’, then UNTAGED packets though this
interface will be BLOCKED.
13. Click
Save/Apply
to
save
the
configuration
so
that
the
changes can take effect.
82
Confidential and Proprietary Information of ZTE CORPORATION
Page 89 / 198
C
h
a
p
t
e
r
8
NAT Configuration
Table of Contents
Overview
..........................................................................
83
Virtual Servers Setup
.........................................................
84
Port Triggering
..................................................................
87
DMZ Host
.........................................................................
89
Overview
Setting up the NAT
function
The 931WII is equipped with the
NAT
function. With address map-
ping, several users in the local network can access the Internet via
one or more public IP addresses. All the local IP addresses are as-
signed to the public IP address of the 931WII by default.
One of the characteristics of NAT is that data from the Internet is
not allowed into the local network unless it is explicitly requested
by one of the PCs in the network. Most Internet applications can
run behind the NAT firewall without any problems.
For example,
if you request Internet pages or send and receive e-mails, the
request for data from the Internet comes from a PC in the local
network, and so the 931WII allows the data to pass through. The
931WII opens one specific port for the application. A port in this
context is an internal PC address, via which the data is exchanged
between the Internet and a client on a PC in the local network.
Communicating via a port is subject to the rules of a particular
protocol (
TCP
or
UDP
).
If an external application tries to send a call to a PC in the local
network, the 931WII blocks it.
There is no open port via which
the data could enter the local network.
Some applications, such
as games on the Internet, require several links (that is.
several
ports), so that players can communicate with each other. In addi-
tion, these applications must also be permitted to send requests
from other users on the Internet to users in the local network.
These applications cannot be run if NAT is activated.
Using port forwarding (the forwarding of requests to particular
ports) the 931WII is forced to send requests from the Internet for
a certain service, for example, a game, to the appropriate port(s)
on the PC on which the game is running. Port triggering is a spe-
cial variant of port forwarding. Unlike port forwarding, the 931WII
forwards the data from the port block to the PC which has pre-
viously sent data to the Internet via a certain port (trigger port).
This means that approval for the data transfer is not tied to one
specific PC in the network, but rather to the port numbers of the
required Internet service.
Confidential and Proprietary Information of ZTE CORPORATION
83
Page 90 / 198
ZXDSL 931WII Operation manual
Configuring Port
Triggering
Define a trigger port for the application and the protocol (
TCP
or
UDP
) that this port uses. You then assign the public ports that are
to be opened for the application to this trigger port.
The 931WII checks all outgoing data for the port number and pro-
tocol.
If it identifies a match of port and protocol for a defined
trigger port, then it opens the assigned public ports and notes the
IP address of the PC that sent the data. If data comes back from
the Internet via one of these public ports, the 931WII allows it to
pass through and directs it to the appropriate PC. A trigger event
always comes from a PC within the local network. If a trigger port
is addressed from outside, the 931WII simply ignores it.
Note:
An application that is configured for port triggering can only be
run by one user in the local network at a time.
After public ports are open, they can be used by unauthorized
persons to gain access to a PC in the local network.
When the 931WII is supplied, the NAT is activated, i.e.
all
IP addresses of PCs in the local network are converted to the
public IP address of the 931WII when accessing the Internet.
IP addresses of the PCs must remain unchanged.
If the IP
addresses of the PCs are assigned via the DHCP server of the
931WII, you must select Never expires as the settings in the
local network menu entry for the lease time or assign static IP
addresses for the PCs.
You can activate or deactivate the NAT function.
By default, the
NAT function is activated.
Virtual Servers Setup
Background
By default, the 931WII blocks all external users from connecting
to or communicating with your network.
Therefore, the system
is safe from hackers who may try to intrude on the network and
damage it, as shown in
F
i
g
u
r
e
1
1
2
.
84
Confidential and Proprietary Information of ZTE CORPORATION

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top