BB005x Installation and Configuration Guide
translates the IP header but not the payload, IP packets may appear to contain
errors and can be discarded at their arrival at destination.
Firewall triggers are one possible solution. A trigger allows an application to
automatically open or close a secondary port when required and, at the same
time, it can search packets for the embedded IP address so NAT can translate
that properly.
To configure a trigger:
►
1. Click on
Advanced Configuration
and then on
Security.
2. Make sure that the Firewall option is ticked as Enabled and click on
Change State
3. Go to
Policies, Triggers and Intrusion
section and Click on F
irewall
Trigger Configuration
. The
Firewall Trigger Configuration
page
appears.
4. Click on
New Trigger
link.
5. Configure the following items:
Transport type
Select TCP or UDP from the drop down list.
Port number start
Start point of the trigger port range.
Port number end
End point of the trigger port range.
Allow multiple hosts
Select allow to permit initiation to/from different
remote hosts or select block to permit only
initiation from same remote hosts.
Max activity interval
Type max interval time for the secondary port
sessions.
Enable session
chaining
Select allow or block depending on whether you
want to allow multi-level TCP session chaining.
Enable UDP session
chaining
Select allow or block depending on whether you
want multi-level UDP and TCP session chaining.
Binary address
replacement
Select allow or block depending on whether you
want to use Binary address replacement.
Address translation
type
Select address replacement on a particular trigger.
52
