ETIC 1230 Manual do Utilizador descarregar pdf (Página 52)

CONFIGURATION

Page 52 User guide ref. 9015909-03 Industrial router IPL-E

12.3 Advanced network address and port translation

12.3.1 Principle

This function is available in IPL-E-1400B, IPL-E-1220B, IPL-E-1230B

routers only.

That function consists in replacing the source port and IP address and the

destination port and IP address of particular frames received by the router

on its interfaces according to configured rules.

It applies to all the frames received by the router on any of its two

interfaces except to the IP packets contained in a remote user PPTP or

TLS connection.

It applies as well to frames the destination address of which is the IPL-E

router itself or to frames the destination IP address is a device belonging

to the LAN subnet, or to the WAN subnet or to another network.

One brings out

the DNAT function which consists in replacing the destination port number and IP

address.

the SNAT function which consists in replacing the destination port number and the

source IP address.

Because the DNAT and SNAT functions modify the IP addresses of the IP

packets processed by the IPL-E router, and because the firewall filters that

frames, it is very important to understand in which order that different

functions are carried out :

Direction

WAN to LAN

LAN to WAN

DNAT

FIREWALL

SNAT

WAN LAN

Router

LAN

SNAT

DNAT

WAN

FIREWALL

Router

1 2 ... 47 48 49 50 51 52 53 54 55 56 57 ... 105 106

Sem comentários

ETIC 1230 Manual do Utilizador Página 52