4 Configuring Advanced Functions
EchoLife BM635
User Guide
4-4
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd
Issue 01 (2008-06-15)
Functions of each certificate are as follows:
z
Personal certificate: It indicates the certificate uploaded to the Authorization,
Authentication and Accounting (AAA) server when the BM635 is authenticated.
z
Personal private key: It indicates the personal private key allocated by the server to a
BM635. This key is used together with a personal certificate.
z
CA root certificate: It indicates the root certificate that is used to verify the AAA
server at the front end.
Click
Browse
to select the correct corresponding certificate, and upload to the BM635.
4.2 Configuring the NAT
NAT is used to convert an IP address and a port so that the device on the LAN side uses
an IP address of the same public network to access the network at the WAN side.
4.2.1 Configuring the ALG
Application layer gateway (ALG) is used to convert the specified data carried in IP
packets, thus supporting LAN applications in the process of transmitting the packets on
the LAN side and the packets at the WAN side.
In the navigation tree, choose
Advanced
>
NAT
, and then click the
ALG
tab.
Parameter
Description
Enable L2TP ALG
It indicates whether to enable L2TP ALG.
Enable IPSec ALG
It indicates whether to enable IPSec ALG.
Enable H.323
ALG
It indicates whether to enable H.323 ALG.
Enable RTSP ALG
It indicates whether to enable RTSP ALG.
Enable SIP ALG
It indicates whether to enable SIP ALG. After SIP ALG is
enabled, enter the SIP port number.
Note:
L2TP = Layer 2 Tunneling Protocol; IPSec = IP Security Protocol; RTSP = Real-Time
Streaming Protocol
4.2.2 Configuring the DMZ
Demilitarized zone (DMZ) is used to forward the packets from the WAN without port
mapping to the host defined in the DMZ.
In the navigation tree, choose
Advanced
>
NAT
, and then click the
DMZ
tab.
Parameter
Description
Host Address
It indicates the host IP address.