Crestron
NAT
2-Series
Feature
Only one IP address is required if NAT is employed. The touchpanels on the LAN
are recognized only by the single external IP address and distinguished by five
unique external port numbers – one for each touchpanel on the LAN. From the
“Crestron Viewport TCP/IP Connect” window, enter the single IP address, colon,
and external port number, as shown below.
<IP Address #1>:<external port # mapped for touchpanel #1>
<IP Address #1>:<external port # mapped for touchpanel #2>
<IP Address #1>:<external port # mapped for touchpanel #3>
<IP Address #1>:<external port # mapped for touchpanel #4>
<IP Address #1>:<external port # mapped for touchpanel #5>
NOTE:
Each unique external port number is arbitrarily assigned at the discretion of
the individual configuring the NAT.
Secure Ethernet
Bi-Directional NAT - connections initiated from hosts on the external network as
well as the internal network - are made possible by mapping specific ports on the
NAT router to services on an internal node via a portmap service. The NAT router
relays all matching requests from the external network to the specific internal node.
This enables nodes on an internal network to be configured as servers accessible by
the external network. Since all connections must be initiated from the internal
network or be registered with the portmap service, 2-Series NAT provides firewall-
like protection for the internal network. An intruder would have to first gain access
to the NAT router in order to infiltrate the internal network. Currently, the maximum
number of portmaps that can be assigned is 16.
For example, without the Crestron NAT, the creation of an internal or sub-network
within an existing network would require the purchase of a separate third-party
router and involve major participation from an IT administrator. Instead, the Crestron
NAT offers a built-in solution that permits an IT administrator or AV installer to
setup a sub-network of Crestron and IP enabled AV products with firewall-like
protection. The individual setting up the sub-network determines who and what gets
through to the LAN by reassigning its port numbers.
Simple Network Administration
Three built-in, user-friendly web pages are available through your browser. These
web pages let you configure the entire NAT feature, including setup of Host Name,
IP addressing, port mapping, and password.
Configuration of a sub-network can be a daunting task. However, the approach used
within the Crestron NAT provides familiarity for those with prior router
configuration experience and yet offers a degree of simplicity for the novice. Refer
to “Configuration” on page 8 for details.
Example Configuration
As shown in the illustration on the next page, the internal network 192.168.16.x is
hidden from the external network behind the PRO2. The PRO2 has one external
connection/port (68.42.78.12) used to communicate with the external network and to
protect the anonymity of the internal nodes. The PRO2 has one internal
connection/port (192.168.16.1) used to communicate with the internal network.
When a connection is initiated from the external side, the NAT router replaces the
TCP/UDP source port with the assigned external TCP/UDP source port. Normally,
outbound traffic (internal to external) does not need any configuration. Therefore,
Reference Guide – DOC. 6001
Network Address Translator: NAT
•
3
Содержание NAT
Страница 1: ...Crestron NAT Network Address Translator Reference Guide ...
Страница 4: ......
