TELES ECOTEL, Руководство пользователя

Страница: 43 / 247

C O N F I G U R A T I O N F I L E S
C H A P T E R 5
43
ECOTEL 3G 16.1. Revised: 1 March 2011.
Example: The following NAT settings are for a system in which PPPoE (DSL) is used toward the Internet.
The local network range 192.168.1.0 Class C is translated with the following rules:
– The proxy mode is used for FTP.
– All other TCP and UDP packets are mapped to the external ports 40000 to 60000.
– There are no special rules for any other services.
– Incoming requests to port 80 and 443 in the public IP address
192.168.1.100
are redi-
rected to ports 80 and 443 in the local IP address
192.168.1.100
.
<optional en-
tries>
Special rules can be defined for some services or protocols. The system can serve as a
proxy for FTP:
proxy port ftp ftp/tcp
Special ports for the public address(es) can be assigned for the protocols TCP and UDP.
The range is defined by the start and end ports:
portmap tcp/udp <start port>:<end port>
If no optional entry is defined, all other addresses will be translated without special rules.
rdr=<interface> <public network address/mask> port <port> -> <local network address/mask>
port <port_number> <protocol>
This parameter redirects packets from one port and IP address to another.
<interface>
Defines the translated interface or protocol:
emac1
The system’s second Ethernet interface
pppoe0
Protocol used for DSL connections
xppp<0>
Protocol used for dial-up connections
<public net-
work address/
mask>
Defines the public network range, with network address and mask (usually exactly one
address), into which the local IP addresses are to be translated. The IP address is entered
in decimal notation, followed by a slash (
/
) and the netmask in bit notation.
<port>
Defines the port number.
<local network
address/mask>
The IP address is entered in decimal notation, followed by a slash (
/
) and the netmask
in bit notation. The entire local network range is configured.
<protocol>
Defines the protocol.
tcp
and
udp
are possible.
[nat]
map=emac1 192.168.1.0/24 -> 0/32 proxy port ftp ftp/tcp
map=emac1 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000
map=emac1 192.168.1.0/24 -> 0/32
rdr=emac1 0/0 port 80 -> 192.168.1.100 port 80 tcp
rdr=emac1 0/0 port 443 -> 192.168.1.100 port 443 tcp
Table 5.4 NAT Configuration (continued)