ZyXEL Communications WAH7601, Руководство пользователя

Страница: 66 / 111

Chapter 10 NAT
WAH7601 User’s Guide
67
Use the Port Forwarding screen to forward incoming service requests to the server(s) on your local
network. You may enter a single port number or a range of port numbers to be forwarded, and the local
IP address of the desired server. The port number identifies a service; for example, web service is on port
80 and FTP on port 21. In some cases, such as for unknown services or where one server can support
more than one service (for example both FTP and web service), it might be better to specify a range of
port numbers.
In addition to the servers for specified services, NAT supports a default server. A service request that does
not have a server explicitly designated for it is forwarded to the default server. If the default is not
defined, the service request is simply discarded.
Note: Many residential broadband ISP accounts do not allow you to run any server processes
(such as a Web or FTP server) from your location. Your ISP may periodically check for
servers and may suspend your account if it discovers any active services at your
location. If you are unsure, refer to your ISP.
10.5.2 NAT Port Forwarding Example
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server ( A in the example), port 80 to
another ( B in the example) and assign a default server IP address of 192.168.1.35 to a third ( C in the
example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network
appears as a single host on the Internet.
Figure 46 Multiple Servers Behind NAT Example
10.5.3 Trigger Port Forwarding
Some services use a dedicated range of ports on the client side and a dedicated range of ports on the
server side. With regular port forwarding you set a forwarding port in NAT to forward a service (coming in
from the server on the WAN) to the IP address of a computer on the client side (LAN). The problem is that
port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a
different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding
port with another LAN computer's IP address.
Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns
using the service. The WAH7601 records the IP address of a LAN computer that sends traffic to the WAN
to request a service with a specific port number and protocol (a "trigger" port). When the WAH7601's
WAN port receives a response with a specific port number and protocol ("incoming" port), the WAH7601
forwards the traffic to the LAN IP address of the computer that sent the request. After that computer’s
connection for that service closes, another computer on the LAN can use the service in the same
manner. This way you do not need to configure a new IP address each time you want a different LAN
computer to use the application.