SMC Networks ELITECONNECT SMC2504W, Руководство пользователя

Страница: 35 / 242

EliteConnect WLAN Security System User Manual 2-9
WLAN Access Manager or WLAN Secure Server will then rewrite source IP
address and source port number of client packets sent to the network (NAT and
PAT functions). Packets received by a WLAN Access Manager or WLAN Secure
Server from the network sent in reply to the NAT and PAT packets are relayed
to the appropriate client with the destination IP address and destination port
number rewritten as appropriate.
Note:
Normally a client that uses an IP address that is not on the WLAN Access Manager or
WLAN Secure Server's subnet, or that uses the IP address of the WLAN Access
Manager or WLAN Secure Server itself, or that uses an IP address on the WLAN Access
Manager or WLAN Secure Server's subnet, but which does not have NAT-mode
disabled, will automatically be assigned NAT mode.
• Non-NAT, static IP mode : the client uses a pre-assigned IP address on the
WLAN Access Manager or WLAN Secure Server's subnet. Packets received by
the WLAN Access Manager or WLAN Secure Server with this static IP address
in the destination IP address field are forwarded to the appropriate client.
Packets from the client to the network do not have their source IP address or
source port number rewritten.
•
Non-NAT, dynamic IP mode
: the client sends a DHCP request for an IP address
which the WLAN Access Manager or WLAN Secure Server passes on to an
external DHCP server. This DHCP request will obtain an IP address on the
WLAN Access Manager or WLAN Secure Server's subnet. Packets received by
the WLAN Access Manager or WLAN Secure Server with the IP address
returned by the external DHCP server are forwarded to the appropriate client.
Packets from the client to the network do not have their source IP address or
source port number rewritten.
You can use the Port Settings facility to modify this behavior. If you fill in the IP
address and subnet mask for a WLAN Access Manager or WLAN Secure Server
port, under Port Settings then only for non-NAT mode clients:
•
If a client makes a DHCP request, and you have configured an external DHCP
server IP address, then the WLAN Access Manager or WLAN Secure Server
will relay the DHCP request, but indicating the client originating the request
is on the subnet as specified in the Port Settings for that particular port. This
indicates to the external DHCP server that it should allocate an IP address on
that subnet.
•
If a client has the real IP right and uses an IP address on the subnet as defined
by the Port Settings for that particular port, then the WLAN Access Manager
or WLAN Secure Server will not NAT that client's sessions.
In either case, the WLAN Access Manager or WLAN Secure Server will forward
packets from the network to a client IP address on a subnet defined in the Port
Settings to the appropriate client.