Telindus 1031, User And Reference Manual

Page: 227 / 394

Telindus 1031 Router Chapter 10
Reference manual Configuration attributes
217
telindus1031/router/defaultNat/tcpSocketTimeOut
Use this attribute to define the time-out for TCP sessions that are not closed
by the application.
Such sessions, whether PAT or NAT is in use, remain active for one day by default. Only decrease this
attribute if some TCP applications do not close properly, filling up the available translation sessions.
telindus1031/router/defaultNat/udpSocketTimeOut
Use this attribute to define the time-out for UDP sessions that are not closed
by the application.
Such sessions, whether PAT or NAT is in use, remain active for 3 minutes by default. Only decrease this
attribute if some UDP applications do not close properly, filling up the available translation sessions.
telindus1031/router/defaultNat/tcpSockets
Use this attribute to set the maximum number of TCP session that may be
used simultaneously for address translation.
telindus1031/router/defaultNat/udpSockets
Use this attribute to set the maximum number of UDP session that may be
used simultaneously for address translation.
telindus1031/router/defaultNat/dmzHost
Use this attribute to set the address of the DMZ (demilitarised zone) host.
What is a DMZ host?
In computer networks, a DMZ (demilitarised zone) is a computer host or small network inserted as a
"neutral zone" between a company's private network and the outside public network. It prevents outside
users from getting direct access to a server that has company data. A DMZ is an optional and more
secure approach to a firewall and effectively acts as a proxy server as well.
In a typical DMZ configuration for a small company, a separate computer receives requests from users
within the private network for access to Web sites or other companies accessible on the public network.
The DMZ host then initiates sessions for these requests on the public network. However, the DMZ host
is not able to initiate a session back into the private network. It can only forward packets that have
already been requested.
Users of the public network outside the company can access only the DMZ host. The DMZ may typically
also have the company's Web pages so these could be served to the outside world. However, the DMZ
provides access to no other company data. In the event that an outside user penetrated the DMZ host's
security, the Web pages might be corrupted but no other company information would be exposed.
Default:00001d 00h 00m 00s
Range: 00000d 00h 00m 00s -
24855d 03h 14m 07s
Default:00000d 00h 03m 00s
Range: 00000d 00h 00m 00s -
24855d 03h 14m 07s
Default:1024
Range: 500 … 4500
Default:1024
Range: 500 … 4500
Default:0.0.0.0
Range: up to 255.255.255.255