manualshive.com logo in svg

peplink Balance 380, Руководство пользователя, Страница: 102 / 111

Поделиться
Скачать
peplink Balance 380 Скачать руководство пользователя страница 102

 

PePLink Balance Series v4.0 User Manual 

 

 

Page 102 

C.3

 

Bypassing the Firewall to Access Hosts on LAN 

C.3.1

 

Scenario 

There  are  times  when  remote  access  to  computers  on  the  LAN  is  desirable;  for  example, 
when hosting web sites, online businesses and FTP download and upload areas, etc. 

In such cases, it may be appropriate to create an inbound NAT mapping for the network to 
allow some hosts on the LAN to be accessible from outside of the firewall.

 

C.3.2

 

Solution 

Web Administration Interface can be used for adding an inbound NAT mapping to a host and 
to bind the host to the WAN connections, via 

Network > NAT Mappings > Add NAT Rule

  

For  example,  the  following  settings  add  the  host,  with  IP  address  192.168.1.102,  to  an 
Inbound Mapping and bind the host to the default IP and 12.23.34.3 of WAN1: 

 

Содержание Balance 380

Страница 1: ...007 PePLink Ltd All Rights Reserved PePLink and the PePLink logo are trademarks of PePLink Ltd Other brands or products mentioned may be trademarks or registered trademarks of their respective owners...

Страница 2: ...WITH SETUP WIZARD 22 7 3 ADVANCED SETUP 23 8 CONFIGURATION OF LAN INTERFACE S 24 9 DROP IN MODE 27 10 CONFIGURATION OF WAN INTERFACE S 30 10 1 DHCP CONNECTION 30 10 2 STATIC IP CONNECTION 33 10 3 PPPO...

Страница 3: ...APPENDIX A RESTORATION OF FACTORY DEFAULTS 97 APPENDIX B ROUTING UNDER DHCP STATIC IP AND PPPOE 98 B 1 ROUTING VIA NETWORK ADDRESS TRANSLATION NAT 98 B 2 ROUTING VIA IP FORWARDING 98 APPENDIX C CASE...

Страница 4: ...firmware version v4 0 x PePLink Balance 380 firmware version v4 0 x PePLink Balance 700 firmware version v4 0 x The manual presents how to set up PePLink Balance and provides a collection of case stud...

Страница 5: ...rg 3 1 2 LAN DHCP server on LAN Static routing rules Local DNS 3 1 3 Firewall Outbound LAN to WAN firewall rules Inbound WAN to LAN firewall rules per WAN connection Specification of NAT mappings 3 1...

Страница 6: ...only with PePLink Balance 200 300 380 and 700 Time server synchronization SNMP Email notification Syslog SIP pass through PPTP packet pass through Web Logging Link Status Active Sessions 4 Package Co...

Страница 7: ...us Indicators Power OFF Power off Green Power on Status OFF System initializing Red Booting up or busy Orange Power on self test Green Ready LAN Indicators Activity OFF Port is not connected Green Por...

Страница 8: ...ing use WAN Ports Supports up to two 10 100BaseT WAN connections typically connected to broadband modems LAN Ports Supports up to four 10 100BaseT LAN connections typically connected to client PCs Pow...

Страница 9: ...ower OFF Power off Green Power on Status OFF System initializing Red Booting up or busy Orange Power on self test Green Ready state LAN Indicators Activity OFF Port is not connected Green Port is conn...

Страница 10: ...up to three 10 100BaseT WAN connections typically connected to broadband modems LAN Ports Supports up to four 10 100BaseT LAN connections typically connected to client PCs Power Connector DC 9V power...

Страница 11: ...nd Status Indicators Power LED OFF Power off Green Power on RS 232 Port RS 232 Port Reserved for Engineering Use LAN and WAN Indicators Green LED ON 100 Mbps OFF 10 Mbps Yellow LED Solid Port is conne...

Страница 12: ...k shows LAN subnet mask Link status shows Connected Disconnected IP address list WAN1 WAN2 WAN3 Link usage Throughput in shows transfer rate in Kbps WAN1 WAN2 WAN3 Throughput out shows transfer rate i...

Страница 13: ...served for engineering use Power Connector AC input 110 220V Switch Power Switch To hold pressing the key for 4 secs will power down the unit When the unit is powered off press it will power on the un...

Страница 14: ...bps OFF 100 10 Mbps Yellow LED Solid Port is connected without traffic Blinking Data is transferring OFF Port is not connected Note They are auto MDI MDI X ports WAN Ports 4 to 7 Fast Ethernet Green L...

Страница 15: ...LAN subnet mask Link status shows Connected Disconnected IP address list WAN1 WAN2 WAN7 Link usage Throughput in shows transfer rate in Kbps WAN1 WAN2 WAN7 Throughput out shows transfer rate in Kbps...

Страница 16: ...g use Power Connector AC input 110 220V Switches Power Switch To hold pressing the key for 4 secs will power down the unit When the unit is powered off press it will power on the unit Reset Switch Pre...

Страница 17: ...to the following steps 1 With a network cable connect a computer to one of the LAN ports on the PePLink Balance For PePLink Balance 30 200 and 300 repeat with different cables for up to 4 computers to...

Страница 18: ...ePLink Balance will automatically provide a suitable IP Address and related information to each computer connected to its LAN interface Please refer to Section 8 Configuration of LAN Interface s for f...

Страница 19: ...e New Connection Wizard screen click Next 6 Select Connect to the Internet and click Next 7 Select Set up my connection manually and click Next 8 Select the following checkbox Connect using a broadban...

Страница 20: ...lose the TCP IP Control Panel 6 2 5 UNIX DHCP Client Configuration Depending on the flavor of UNIX the procedure may vary The following steps are for Red Hat Enterprise Linux 3 1 Login to the system a...

Страница 21: ...e is 192 168 1 1 3 When prompted for User Name and Password to access the Web Administration Interface enter the following as User Name and Password to proceed User Name admin Password admin The defau...

Страница 22: ...eck box es to select the WAN connection s to be configured Select the connection type from the following screen Depending on the selection of connection type further configuration may be needed For ex...

Страница 23: ...ngs can be configured from the Network menu WAN connections can be configured by entering the corresponding WAN connection information from Network Interfaces WAN Tip Please refer to Section 10 Config...

Страница 24: ...PePLink Balance Series v4 0 User Manual Page 24 8 Configuration of LAN Interface s The LAN Interface settings are located in Network Interfaces LAN...

Страница 25: ...ollision on LAN IP Range Subnet Mask This setting allocates a range of IP address that will be assigned to LAN computers by the DHCP server of PePLink Balance Lease Time This setting specifies the len...

Страница 26: ...DNS caching on the built in DNS proxy When it is enabled queried DNS replies will be stored for the same requests next time This could improve the DNS lookup time But it cannot return the most update...

Страница 27: ...IP address translation Hosts on the LAN will not notice any change in the IP addresses of the hosts on WAN1 and vice versa However although the IP addresses on all of the forwarded packets remain the...

Страница 28: ...Web Administration Interface 2 Put the IP address of the WAN1 router in the Default Gateway field Ensure that the PePLink Balance IP subnet is the same as the Firewall s WAN port and the Router s LAN...

Страница 29: ...nk Balance is reported by the IP packets from LAN hosts From a practical perspective the mentioned change in MAC addresses is communicated briefly after the installation of PePLink Balance to the WAN1...

Страница 30: ...in Network Interfaces WAN There are four possible connection methods DHCP Static IP PPPoE GRE The connection method and details are determined by and can be obtained from the ISP 10 1 DHCP Connection...

Страница 31: ...interface to the LAN The value of this setting is also used as the default weight value for the default outbound rule if Custom Outbound Traffic Rules in Outbound Traffic Management Physical Interface...

Страница 32: ...ion The DNS Servers are obtained along with the WAN IP address assigned from the DHCP server When Use the following DNS server address es is selected you can put custom DNS server addresses for this W...

Страница 33: ...onnection For further details please refer to Appendix B Routing under DHCP Static IP and PPPoE Connection Type This setting specifies the utilization of the WAN connection The selection of Always on...

Страница 34: ...AC address Some service providers e g cable providers identify the clients MAC addresses and require a client to always connect using the same MAC address In such cases use the MAC Address setting to...

Страница 35: ...ssigned by the ISP in the event that more than one Internet IP addresses are assigned to this WAN connection Enter the fixed Internet IP addresses and the corresponding subnet mask and then click the...

Страница 36: ...tatic IP and PPPoE Connection Type This setting specifies the utilization of the WAN connection The selection of Always on results in the WAN connection to be used whenever it is available If Backup P...

Страница 37: ...n such cases use the MAC Address setting to change the PePLink Balance WAN interface MAC address to be the same as that of the original client PC The default MAC Address is a unique value assigned at...

Страница 38: ...er addresses for this WAN connection into the DNS server 1 and DNS server 2 fields Please refer to chapter 10 5 10 6 and 10 7 for details about SMTP Forwarding Dynamic DNS Settings and WAN Health Chec...

Страница 39: ...le Always on WAN connection s and higher priority backup connection s The default and recommended Connection Type is Always on Upstream Bandwidth This setting specifies the data bandwidth in the outbo...

Страница 40: ...GRE via IP Forwarding The values for DNS server 1 and DNS server 2 are typically determined by and can be obtained from the ISP DNS Servers Each ISP may provide a set of DNS servers for DNS lookups T...

Страница 41: ...this scenario the IP address settings are as follows WAN IP Address 172 23 2 123 Default Gateway 172 23 2 122 Remote GRE IP address 172 23 254 87 GRE router or host s IP address Tunnel IP remote addre...

Страница 42: ...mote IP Address 192 168 128 223 210 103 22 0 24 PePLink Balance LAN IP Address 210 103 22 1 Private IP Network In this scenario the IP address settings are as follows WAN IP Address 172 23 2 123 Defau...

Страница 43: ...dynamic DNS service providers Through registration with dynamic DNS service provider s the default public Internet IP address of each WAN connection can be associated with a host name Either upon a c...

Страница 44: ...ration PePLink Balance will perform a force update every 23 days if a WAN s IP address did not changed 10 7 WAN Health Check To ensure traffic is only routed to health WAN connections only PePLink Bal...

Страница 45: ...idered By default the first two DNS servers of the WAN connection are used as the Ping Hosts Health Check Method DNS Lookup DNS lookups will be issued to test the connectivity with target DNS servers...

Страница 46: ...ssful ping DNS lookup responses that must be received before the PePLink treats a previously down WAN connection to be up again By default Recover Times is set to 3 For example with the default Recove...

Страница 47: ...ork from potential hacker attacks offensive Web sites and or other inappropriate uses The firewall functionality of PePLink Balance supports the selective filtering of data traffic in both directions...

Страница 48: ...tting specifies the WAN connection s on which the rule applies Any WAN1 WAN2 WAN3 applicable only to PePLink Balance 30 300 380 and 700 WAN4 to WAN7 applicable only to PePLink Balance 700 A value of A...

Страница 49: ...tion to which the log entry refers Possible values are LAN and WANx where x is the WAN number SRC Source IP address DST Destination IP address LEN Packet length PROTO Protocol SPT Source port DPT Dest...

Страница 50: ...ies the action to be taken by PePLink Balance upon encountering traffic that matches the both of the following Source IP Port Destination IP Port With the value of Allow for the Action setting the mat...

Страница 51: ...of the destination Internet IP address and protocol This provides the highest application compatibility Normal Application Compatibility With the selection of this policy outbound traffic from a sourc...

Страница 52: ...rule is Default Click on it to change the device s default way to control outbound traffic for all connections that does not match any rules above Click the service Default to change its setting By d...

Страница 53: ...le Source This setting specifies the source IP Address IP Network or MAC Address for the traffic to be matched for the rule Destination This setting specifies the destination IP Address or IP Network...

Страница 54: ...s distributed to a WAN connection is proportional to the weight of WAN connection relative to the total weight Example With the following weight settings on a PePLink Balance 300 WAN1 10 WAN2 10 WAN3...

Страница 55: ...he traffic from the same machine to the same destination It provides higher application compatibility but a less even distribution of load to the WAN connections for the type of traffic By destination...

Страница 56: ...o route the specified network service The highest priority available WAN connections will always be used for routing the specified type of traffic A lower priority WAN connection will be used only whe...

Страница 57: ...perate under NAT mode For WAN connections that operate under drop in mode or IP forwarding inbound traffic is forwarded to the LAN by default 13 1 Definition of Servers on LAN This section applies onl...

Страница 58: ...k Balance 200 300 380 and 700 Services are defined at Network Inbound Access Services Tip At least one server must be defined before services can be added Please refer to Section 13 1 Definition of Se...

Страница 59: ...ing consist only of alphanumeric and the underscore _ characters IP Protocol The IP Protocol setting along with the Port setting specify the protocol of the service as one of the following valid value...

Страница 60: ...Port 80 is forwarded to the configured servers via Port 80 Port Range traffic that is received by PePLink Balance via the specified protocol at the specified port range is forwarded via the same resp...

Страница 61: ...s The amount of traffic that is distributed to a server is proportional to the weight value assigned to the server relative to the total weight Example With the following weight settings on a PePLink...

Страница 62: ...Enable This setting specifies whether the Inbound Service takes effect With an Enable value of Yes the inbound service takes effect traffic is matched and actions are taken by PePLink Balance based on...

Страница 63: ...eceived by PePLink Balance via the specified protocol at the specified port is forwarded via the same port to the servers specified by the Servers setting For example with IP Protocol set to TCP and P...

Страница 64: ...omain name on the most appropriate healthy WAN connection It also supports acting as a generic DNS server for hosting A CNAME MX TXT and NS records For example This example is for illustration only th...

Страница 65: ...rver should listen select the WAN connection by checking the appropriate boxes and the IP addresses associated with the WAN connections by highlighting the appropriate items in the list Multiple items...

Страница 66: ...riority ones become unavailable To specify the Primary and Backup connections click the Edit button that corresponds to Default Connection Priority The screen should assemble the one below Each WAN co...

Страница 67: ...From Network Inbound Access DNS Settings enter a domain name in the Domain Name field click the Add Domain button Then click on the newly created domain name and the following screen is displayed This...

Страница 68: ...ne from the master Retry Defines the time between retries if the slave secondary fails to contact the master when refresh above has expired Expire Indicates when the zone data is no longer authoritati...

Страница 69: ...r finishing adding MX records click the Save button 13 4 4 CNAME Record The CNAME Record table shows the domain s CNAME records Here is how you use CNAME Records If you want a sub domain secure to hav...

Страница 70: ...fied by Host Name The IP addresses listed in each box as Default are the Internet IP addresses associated with each of the WAN connections For WAN connections that operate under Drop in mode there may...

Страница 71: ...ows the TXT record of the domain name Click the Edit button to edit the record The time to live value and the TXT record s value can be entered Click the Save button to finish After completing editing...

Страница 72: ...when you host your domain at your ISP or a domain registrar and want to delegate a sub domain to be resolved and managed at PePLink Balance 1 Create a domain e g www mycompany com 2 Create NS records...

Страница 73: ...tious and for illustration only the actual IP addresses in implementation will likely be different Hosting the complete domain at PePLink Balance To host your own DNS server contact the DNS registrar...

Страница 74: ...n Windows follows C Documents and Settings User Name nslookup Default Server ns1 myisp com Address 147 22 11 2 server 202 153 122 108 This is PePLink Balance s WAN IP address Default Server balance my...

Страница 75: ...ule upon which the following screen is displayed NAT Mapping Settings LAN Host This is the IP address of the host on the LAN that the system should map the selected connection IP address correspondenc...

Страница 76: ...e 1 If you do not want to use a specific WAN for outgoing accesses you should still choose default here then customize the outbound access rule in the Outbound Traffic Management section Note 2 WAN co...

Страница 77: ...ve arrangement From a high level in the event that the Master Unit is down the Slave Unit becomes active The following diagram illustrates an HA configuration with two PePLink Balance 200 units and tw...

Страница 78: ...ability configuration The two PePLink Balance units in the pair must have the same Group Number value Preferred Role This setting specifies whether the PePLink Balance unit operates in Master or Slave...

Страница 79: ...Quality of Service are located at the following location Network Misc Settings Traffic Prioritization Please note that the PePLink Balance prioritizes only outbound packets E g for secure web prioriti...

Страница 80: ...specifies the protocol s through which the Web Administration Interface is accessible HTTP HTTPS HTTP HTTPS Web Admin Port This setting specifies the port number at which the Web Administration Inter...

Страница 81: ...defined IP subnets When this is chosen a text input area will be displayed beneath The allowed IP subnet addresses should be entered into this text area Each IP subnet must be in form of n n n n m whe...

Страница 82: ...peplink com and update the unit manually Click Browse to select the firmware file from the local computer then click Upload to send the firmware to PePLink Balance PePLink Balance will then automatica...

Страница 83: ...guration are located at the following location System Time Time Server Settings Time Zone This specifies the time zone along with the corresponding Daylight Savings Time scheme in which PePLink Balanc...

Страница 84: ...rator when the WAN status changes or when new firmware is available If disable is set PePLink Balance does not send email messages SMTP Server This setting specifies the SMTP server to be used for sen...

Страница 85: ...This setting specifies whether or not to log events at the specified remote Syslog server Remote Syslog Host This setting specifies the IP address or hostname of the remote Syslog server Port This se...

Страница 86: ...ty button in the Community Name table upon which the following screen is displayed SNMP Community Settings Community Name This setting specifies the SNMP Community Name Allowed Source Subnet Address T...

Страница 87: ...pecifies the privacy password and is applicable only if the DES privacy protocol is selected 16 7 Reporting Server The Reporting functionality enables PePLink Balance to post traffic data and other in...

Страница 88: ...ow will pop up Fill in the User Account field to specify the login ID on the Reporting Server to be allowed to access the report of this PePLink Balance device view reports Click the link to view link...

Страница 89: ...is to backup the current active settings Click Download and save the configuration file 16 8 3 Uploading Configurations To restore or change settings based on a configuration file click Browse to loca...

Страница 90: ...s displays the firmware version on each flash module partition i e Flash 1 or Flash 2 Flash Status This shows the status of the flash module Boot from The star indicates the flash module partition fro...

Страница 91: ...The Ping Test tool in PePLink Balance performs Pings through a specified Ethernet interface The Ping utility is located at System Tools Ping The Ping utility is displayed as a pop up window illustrat...

Страница 92: ...ing path to the destination through a particular Ethernet interface The Traceroute Test utility is located at System Tools Traceroute The Traceroute Test utility is displayed as a pop up window illust...

Страница 93: ...nd log 17 1 Device System information is located at Status Device System Information System Time This shows the current system time Serial Number This shows the serial number of the PePLink Balance un...

Страница 94: ...ve amounts of data that have been transferred through each WAN connection as well as the inbound and outbound rate of data transferred via various protocols If you click on the Add Trip Counter link a...

Страница 95: ...r Manual Page 95 17 3 Active Sessions Information on Active Sessions is at Status Active Sessions This Active Sessions section displays the active inbound and outbound UDP and TCP sessions of each WAN...

Страница 96: ...ddresses and MAC addresses that the PePLink Balance has offered IP addresses to since it is powered up 17 5 Log Log information is located at Status Logs The log section displays a list of events that...

Страница 97: ...e unit 2 With a paper clip press and keep the reset button pressed for at least 10 seconds until the unit reboots itself For Balance 380 700 Use the buttons to control the LCD menu to go to Maintenanc...

Страница 98: ...IP address of PePLink Balance Therefore with NAT all LAN devices share the same WAN IP address to access the Internet i e the WAN IP address of PePLink Balance Operating PePLink Balance in NAT mode re...

Страница 99: ...ce Web browsing mainly downloads data sending e mails mainly consumes upload bandwidth Both connections offer good download speeds WAN2 offers good upload speeds Define WAN1 and WAN2 s inbound and out...

Страница 100: ...ncy functionality of PePLink Balance With Persistency configured and the option By destination selected PePLink Balance uses a consistent WAN connection for source destination pairs of IP addresses an...

Страница 101: ...e in Network Outbound Traffic Management Custom Outbound Traffic Rules Click Add Rule select HTTP TCP port 80 for web service and select Persistence Tip A System Administrator can use the Traceroute u...

Страница 102: ...it may be appropriate to create an inbound NAT mapping for the network to allow some hosts on the LAN to be accessible from outside of the firewall C 3 2 Solution Web Administration Interface can be...

Страница 103: ...inbound access is unrestricted Enabling a basic level of protection involves setting up firewall rules For example to set up a firewall rule between the Internet and the private network that monitors...

Страница 104: ...is can easily be achieved by setting up an outbound firewall rule with PePLink Balance C 5 2 Solution To set up a firewall between Internet and private network for outbound access make the settings ac...

Страница 105: ...all of 2 or even 3 download sessions were being distributed to the same link by chance Problem 3 I am using some web sites to lookup my public IP address e g www whatismyip com When I keep pressing t...

Страница 106: ...ing Traceroute under the tab Status of the PePLink Balance you may able to find out the source of problem Problem 6 When I upload files to a server via ftp the transfer stalls after a few kilobytes of...

Страница 107: ...gurations Upload and Download Internet Access Sharing SUA Single User Account Multi to Multi NAT NAT supports PAT Port Address Translation Security Compatible with IPSec and PPTP VPN Rules based State...

Страница 108: ...ns Upload and Download Internet Access Sharing SUA Single User Account Multi to Multi NAT NAT supports PAT Port Address Translation Security Compatible with IPSec and PPTP VPN Rules based Stateful Fir...

Страница 109: ...figurations Upload and Download Internet Access Sharing SUA Single User Account Multi to Multi NAT NAT supports PAT Port Address Translation Security Compatible with IPSec and PPTP VPN Rules based Sta...

Страница 110: ...nload Internet Access Sharing SUA Single User Account Multi to Multi NAT NAT supports PAT Port Address Translation Security Compatible with IPSec and PPTP VPN Rules based Stateful Firewall with IP Add...

Страница 111: ...eplink com contact support SALES http www peplink com contact sales CORPORATE ADDRESS PHONE http www peplink com PePLink Ltd United States 800 West El Camino Real Mountain View CA 94040 United States...

Отзывы:

Нет отзывов