Zyxel P324 Router Manual PDF (Setup & Configuration Guide)

Page 126 / 285 Scroll up to view Page 121 - 125

Prestige 324 Intelligent Broadband Sharing Gateway

NAT

11-11

Table 11-4 SUA Address Mapping Rules

FIELD

DESCRIPTION

EXAMPLE

Global Start IP

This is the starting global IP address (IGA). If you

have a dynamic IP, enter 0.0.0.0 as the

Global

Start IP

.

0.0.0.0

Global End IP

This is the ending global IP address (IGA).

N/A

Type

These are the mapping types discussed above

(see

Table 11-2

).

Server

allows you to specify

multiple servers of different types behind NAT to

this machine. See later

for some

examples.

Server

Type

These are the mapping types discussed above

(see

Table 11-2

).

Server

allows you to specify

multiple servers of different types behind NAT to

this machine. See later

for some

examples.

Server

Once you have finished configuring a rule in this menu, press [ENTER] at the message “Press

ENTER to Confirm…” to save your configuration, or press [ESC] to cancel.

User-Defined Address Mapping Sets

Now let’s look at Option 1 in menu 15.1. Enter 1 to bring up this menu. We’ll just look at the differences

from the previous menu. Note the extra

Action

and

Select Rule

fields mean you can configure rules in this

screen. Note also that the [?] in the

Set Name

field means that this is a required field and you must enter a

name for the set.

If the

Set Name

field is left blank, the entire set will be deleted.

Page 127 / 285

11-12

NAT

Figure 11-8 Menu 15.1.1 — First Set

The Type, Local and Global Start/End IPs are configured in menu 15.1.1.1

(described later) and the values are displayed here.

Ordering Your Rules

Ordering your rules is important because the Prestige applies the rules in the order that you specify. When a

rule matches the current packet, the Prestige takes the corresponding action and the remaining rules are

ignored. If there are any empty rules before your new configured rule, your configured rule will be pushed

up by that number of empty rules. For example, if you have already configured rules 1 to 6 in your current

set and now you configure rule number 9. In the set summary screen, the new rule will be rule 7, not 9.

Now if you delete rule 4, rules 5 to 7 will be pushed up by 1 rule, so as old rule 5 becomes rule 4, old rule 6

becomes rule 5 and old rule 7 becomes rule 6.

Table 11-5 Fields in Menu 15.1.1

FIELD

DESCRIPTION

EXAMPLE

Set Name

Enter a name for this set of rules. This is a required field. If this

field is left blank, the entire set will be deleted.

NAT_SET

Menu 15.1.1 - Address Mapping Rules

Set Name= ?

Idx Local Start IP

Local End IP

Global Start IP Global End IP

Type

--- --------------- --------------- --------------- --------------- ------

1.

2

3.

4.

5.

6.

7.

8.

9.

10.

Action= None

Select Rule= N/A

Press ENTER to Confirm or ESC to Cancel:

Page 128 / 285

Prestige 324 Intelligent Broadband Sharing Gateway

NAT

11-13

Table 11-5 Fields in Menu 15.1.1

FIELD

DESCRIPTION

EXAMPLE

Action

The default is

Edit

.

Edit

means you want to edit a selected

rule (see following field).

Insert Before

means to insert a rule

before the rule selected. The rules after the selected rule will

then be moved down by one rule.

Delete

means to delete the

selected rule and then all the rules after the selected one will

be advanced one rule.

None

disables the

Select Rule

item.

Edit

Select Rule

When you choose

Edit

,

Insert Before

or

Delete

in the

previous field the cursor jumps to this field to allow you to

select the rule to apply the action in question.

1

You must press [ENTER] at the bottom of the screen to save the whole set. You

must do this again if you make any changes to the set – including deleting a rule.

No

changes to the set take place until this action is taken.

Selecting

Edit

in the

Action

field and then selecting a rule brings up the following menu,

Menu 15.1.1.1

-

Address Mapping Rule

in which you can edit an individual rule and configure the

Type

,

Local

and

Global Start/End IPs

.

An End IP address must be numerically greater than its corresponding IP Start

address.

Page 129 / 285

11-14

NAT

Figure 11-9 Menu 15.1.1.1 — Editing/Configuring an Individual Rule in a Set

Table 11-6 Menu 15.1.1.1 — Editing/Configuring an Individual Rule in a Set

FIELD

DESCRIPTION

EXAMPLE

Type

Press the [SPACE BAR] to select one of five types. These are the mapping

types discussed in

Table 11-2

.

Server

allows you to specify multiple

servers of different types behind NAT to this computer. See

section 11.4.3

below

for an

example.

One-to-One

Type

Press the [SPACE BAR] to select one of five types. These are the mapping

types discussed in

Table 11-2

.

Server

allows you to specify multiple

servers of different types behind NAT to this computer. See

section 11.4.3

below

for an

example.

One-to-One

Local IP

Only local IP fields are

N/A

for server; Global IP fields MUST be set for

Server

.

Start

This is the starting local IP address (ILA).

0.0.0.0

End

This is the ending local IP address (ILA). If the rule is for all local IPs, then

put the Start IP as 0.0.0.0 and the End IP as 255.255.255.255. This field is

N/A

for One-to-One and Server types.

N/A

Global IP

Start

This is the starting global IP address (IGA). If you have a dynamic IP, enter

0.0.0.0 as the

Global IP Start

. Note that

Global IP Start

can be set to

0.0.0.0 only if the types are

Many-to-One

or

Server

.

0.0.0.0

End

This is the ending global IP address (IGA). This field is

N/A

for

One-to-

One

,

Many-to-One

and

Server types

.

N/A

Menu 15.1.1.1 Address Mapping Rule

Type= One-to-One

Local IP:

Start=

End = N/A

Global IP:

Start=

End = N/A

Press ENTER to Confirm or ESC to Cancel:

Press Space Bar to Toggle.

Page 130 / 285

Prestige 324 Intelligent Broadband Sharing Gateway

NAT

11-15

Table 11-6 Menu 15.1.1.1 — Editing/Configuring an Individual Rule in a Set

FIELD

DESCRIPTION

EXAMPLE

Once you have finished configuring a rule in this menu, press [ENTER] at the message “Press ENTER to

Confirm…” to save your configuration, or press [ESC] to cancel.

When you configure

One-to-One

and

Many-One-to-One

mapping rules, the firewall

automatically allows traffic originating from the WAN to be forwarded to the LAN

IP address(es) of the computers specified in those rules. These computers do

not

have firewall protection in this case.

11.3.2 Port Forwarding Setup

A NAT server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you

can make visible to the outside world even though NAT makes your whole inside network appear as a

single machine to the outside world.

Use

Menu 15 - NAT Setup

to forward incoming service requests to the server(s) on your local network.

You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of

the desired server.

The port number identifies a service; for example, web service is on port 80 and FTP on

port 21. In some cases, such as for unknown services or where one server can support more than one

service (for example both FTP and web service), it might be better to specify a range of port numbers.

Entry 12 (port 1026) is non-editable (see

Figure 11-10

).

In addition to the servers for specified services, NAT supports a default server. A service request that does

not have a server explicitly designated for it is forwarded to the default server. If the default is not defined,

the service request is simply discarded.

When you configure NAT port forwarding rules, the firewall automatically allows

traffic originating from the WAN to be forwarded to the LAN IP address(es) of the

computers specified. These computers do

not

have firewall protection in this

case.

The most often used port numbers are shown in the following table. Please refer to

RFC 1700

for further

information about port numbers and refer to the included disk for more examples and details on NAT.

Rate

Popular Zyxel Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share