Asentria SiteBoss 530, Руководство пользователя

Страница: 80 / 140

Asentria SiteBoss 530 User Manual
74
IP Routing
Description
When you connect to the S530 via PPP you can make the unit act as a router between you and devices on one of
the unit's local networks. This allows you to communicate IP traffic between you and devices you wish to remotely
access. IP routing can also route traffic that originates on the remote site's network to you. By
traffic
we mean
ICMP, TCP, UDP.
Benefit
IP Routing allows you remote network access (as opposed to remote RS-232 access) to devices at the unit's site.
Configuration
IP Routing is configured with the following settings.
All Products:
•
net.ppprouting.enable
This setting controls whether the unit routes IP traffic from PPP to any Ethernet interface.
•
net.ethrouting.enable
This setting controls whether the unit routes IP traffic from the specified routing interface to PPP.
•
net.ethrouting.nat.enable
This setting controls whether the unit does NAT on routed frames egressing the unit on the PPP interface.
•
sec.user.ppptype
This is a per-user setting which controls whether the user under which the PPP session was
authenticated can actually route frames to one of the unit's local networks. It is for added security.
Multihomed units only (S530):
•
net.eth.nat
This setting controls whether the unit does NAT on routed frames egressing the unit on this interface.
•
net.routing.if
This setting controls to which network interface the unit routes PPP traffic.
Example
You want to remotely access the SSH CLI of some piece of equipment at a remote site. SSH rides on TCP so it
can be routed and NATted. Install a S530 at the remote site with the following configuration and connect the first
Ethernet adapter to the network that has your equipment.
// set up ppp user
sec.user[1].name =pppuser
sec.user[1].password =ppppassword
sec.user[1].ppptype =routing
// set up ppp hosting
net.ppphost.enable =on
// set up routing
net.ppprouting.enable =on
// set up nat
net.eth[1].nat =on
// set up routing interface
net.routing.if =ETH1
Now connect to the unit via PPP and then connect to your eqiupment via your SSH client.