Technical Support Information

Transcription

1 Technical Support Information Broadband Module/Broadband Module Plus Configuration Guidance Setting up Remote Access to a Network Device (Mail/File Server/Camera Etc) connected to the LAN port of the Broadband Module where a Single Static External IP address has been provided. Overview Case Study 1 This Case Study is for Guidance only; the information provided (covering an FTP Server, with relevant screenshots) can be adapted to suit other network devices by adjusting the relevant ports/protocols etc. Any alterations made to the Broadband Module settings can affect your network security, so please take care when making any changes. The recommended way of connecting a Network Device to the Broadband Module is via the DMZ port, this provides the necessary connection without compromising the LAN security. However if it is required to connect a network device to the LAN, then the information contained within this Case Study can be used for guidance. This configuration will allow an external Static IP address to be mapped (port forwarded) to an internal static IP address allocated to a network device connected on the LAN port. This example shows an FTP server configuration. (FTP port 21 used) The connection method here assumes a BT Network type ADSL providing an external single static IP address. If your ADSL line has multiple external static IP addresses then refer to the other relevant Case Study Connections. BTV Broadband Module (BBM) ADSL line with external single static IP address PC s connected to the LAN as normal RJ45 connection cable Network Device Configured With Internal Static IP Address Issue 7 Page 1 of 5

2 Configuring the BBM.(Broadband Module) It is assumed that the Broadband Module has first been Reset To Default, the ADSL Modem Username and Password information configured and a PC connected to the LAN can browse the Internet. (Note: - Every screenshot is not shown to reduce file size) Connect to the BBM programming interface. There are two stages to the BBM programming. 1. Configure the Reserved Mapping. (Port Address Translation) 2. Configure the BBM Firewall 1. Configure the Reserved Mapping. ( Port Address Translation ) The Reserved Mapping routes IP packets with the selected ports between the static external IP address and the static internal IP address on the LAN port. From the left side menu select Advanced Configuration. From the left side menu select Firewall & Security and the following screen is displayed. Select Advanced NAT Configuration on the ipwan/external. On the next screen Select Add Reserved Mapping.. ( Screenshot not shown) Issue 7 Page 2 of 5

3 The relevant Reserved Mapping information can now be input. For an ADSL line providing a Single Static IP address the Global IP Address can be left at default, input the chosen internal static IP address of the network device (in this example is used) in the Internal IP Address, choose the Transport Type (TCP in this example) and External and Internal Port range (in this example 21 for the FTP protocol). Select the Add Reserved Mapping button to complete. When all the Reserved Mappings have been added select the Restart option on the left side to reset the Broadband Module and save the settings. 2. Configure the BBM Firewall. Insert the relevant Port filters From the left side menu select Advanced Configuration. From the left side menu select Firewall & Security and the following screen is displayed. Scroll down and select Security Policy Configuration Issue 7 Page 3 of 5

4 The Security Policy Configuration screen will be displayed. Select Port Filters for the external to internal interface. From here port filters can be added to allow the selected ports through the Firewall. Select Add TCP or UDP Filter In the example below an FTP server is being connected. Leave the Source address as default, change the Destination address to the internal static IP address added to the device (in this example Mask ) Protocol is TCP, Source port is default, Destination port as 21 (FTP). Leave the other settings as the default. Issue 7 Page 4 of 5

5 Select Apply Select the Restart option on the left side to restart the BBM and save the settings. The example below shows the finished Port filter added for an FTP Server ( Port 21 ) in the external to internal Firewall For other types of network devices the correct Port filters will have to be provided within the relevant Firewall. Issue 7 Page 5 of 5