Nortel BSR252, Configuration - Basics

Page: 236 / 460

236 Chapter 13 VPN
NN47923-500
Port forwarding server
A NAT server set is a list of inside (behind NAT on the LAN) servers, for
example, web or FTP, that you can make visible to the devices using the VPN
branch NAT tunnel (from behind the remote IPSec router) even though NAT
makes your inside network appear as a single machine. The servers must be using
the VPN branch NAT tunnel (from behind the Business Secure Router).
You can enter a single port or a range of ports to be forwarded and then the local
IP address of the desired inside servers.
Configuring a port forwarding server
Select one of the IP Policies in the VPN Branch Office screen and click Edit to
display the Branch Office – IP Policy setup screen. For the Mapping Rule Type,
select Many-to-One , enter the private and virtual IP addresses and click the Port
Forwarding Server button to display the screen shown in Figure 73 .
Ending IP Address /
Subnet Mask
When the Address Type field is configured to Single Address ,
this field is N/A. When the Address Type field is configured to
Range Address , enter the end (static) IP address, in a range of
computers on the LAN behind your Business Secure Router.
When the Address Type field is configured to Subnet Address ,
this is a subnet mask on the LAN behind your Business Secure
Router.
Port By default, 0 signifies any port. Type a port number from 0 to 65
535. Some of the most common IP ports are: 21, FTP; 53, DNS;
23, Telnet; 80, HTTP; 25, SMTP; 110, POP3.
Apply Click Apply to save your changes to the Business Secure Router.
Cancel Click Cancel to return to the VPN Branch Office screen without
saving your changes.
Table 55 VPN Branch Office — IP Policy
Label Description