13
Virtual Server Settings
Virtual Servers
are computers connected using the
DMZ
port. They act as servers to
provide services to your LAN ports or other Internet users on the WAN ports. The
Virtual Server setting page maps one global IP address
−
an IP address that is valid
on the Internet, usually assigned by your ISP
−
to one local IP address from the IP
address range assigned to the DFL-1500’s
DMZ
port. The default DMZ IP address is
10.1.1.254
, so the servers’ IP must range from
10.1.1.1
to
10.1.1.253
, with a subnet
mask of 255.255.255.0.
Figure 2 Internet host connects to the Virtual Server behind DFL-1500.
As the above Figure 2 illustrated, the server 10.1.1.5 provides FTP service and is
located on the DMZ region behind DFL-1500. By this way, DFL-1500 will act as a
Virtual Server role which redirects the packets to the real server 10.1.1.5. And you can
announce to the internet users that the ftp server ip/port is 61.2.1.1/44444. So, all of
the internet users can connect the 61.2.1.1/44444 to get ftp service.
An example virtual server:
Customize the rule name as the ftpServer. For any
packets with its destination IP equaling to the WAN1 IP (61.2.1.1) and destination port
equaling to 44444, ask DFL-1500 to translate the packet’s destination IP/port into
10.1.1.5/21. Check the Passive FTP at this port to maximize the compatibility of the
FTP protocol. This is useful if you want to provide connectivity to passive FTP clients.
For passive FTP clients, the server will return them the private IP address and the port
number for them to connect back to do data transmissions. Since the private IP from
them cannot be routed to our zone, the data connections would fail. After enabling this
feature, the DFL-1500 will translate the private IP/port into an IP/port of its own. Thus
the problem is gracefully solved. Click Apply to proceed.