BinTec X4000, Руководство пользователя

Страница: 331 / 498

X4000 User’s Guide 331
Access Security
10
10.2.7 NAT (Network Address Translation)
➤➤
NAT is a simple-to-operate procedure that can be used for several
purposes in the BinTec implementation:
■
Hiding the internal host addresses of a LAN by remapping to one or more
external addresses.
■
Controlling external to internal access. In the external direction, the router
forwards all
➤➤
data packets (forward NAT) and connections from
external callers are only allowed if explicitly enabled.
Figure 10-1: Forward NAT
■
Permanent monitoring of the connections via the router with indication of
the source and destination addresses and
➤➤
ports . See your syslog
messages for this purpose!
NAT always refers to an interface. X4000 ’s LAN side is always referred to as
"internal", the WAN partner as "external".
You will find more information on NAT in the Software Reference .
B
IA
N
C A
/B
R
IC
K -X
M
ISDN
192.168.1.1
192.168.1.2
192.168.1.3
ISDN IP
16.0.0.30
LAN IP
192.168.1.254
X4000D
Bin Tec
4000
X4000
Forward NAT
16.0.0.30
?
Your Local Area Network
Network of your
WAN Partner
inside outside
Access only
when explicitly
allowed