Revision 7.10
2/28/2012
Computers at the Iridium ground station initiate the RUDICS connection as if a human
typed:
telnet 140.186.63.239 6565
The Dock Server is listening for a connection at:
10.20.30.40 port 6565
The Network Administrator has to accomplish four tasks (two required, two optional) for
a RUDICS connection to succeed:
1.
Configure NAT (Network Address Translation) to ROUTE packets to and from
140.186.63.239 and 10.20.30.40. This is required.
2.
Configure the Firewall at the NAT router to PERMIT packets to and from iridium.com
and 10.20.30.40. This is required.
3.
Configure DNS (Domain Name Service) so that you can type
dockserver.yourdomain.com instead of 140.186.63.239 or 10.20.30.40. Which you
have to type depends on where your computer is connected. This is optional. You can
always type the dottedquad IP address.
4.
Configure the firewall built into the Dock Server operating system to PERMIT access to
port 6565. This firewall is disabled by default, making the task optional. See
Section
12.5.6 Configuring the Operating System Firewall.
12.5.2.1 Configuring NAT
The recommended approach is to :
(i) Translate ALL incoming packets from the Internet bound for 140.186.63.239 to
10.20.30.40 regardless of where the packets are coming from or what port they
are on.
(ii) Translate ALL outgoing packets from 10.20.30.40 to 140.186.63.239 regardless
of where the packets are going to or what port they are on.
The philosophy is to route everything and depend on the Firewall for security. The
following two NAT rules accomplish this:
Page 150 of 228