Table of Contents
Advertisement
DNAT Example
In this example, your private network is 192.168.0.0/255.255.255.0 and an IP address 192.168.0.20 for
the Web server provides accessibility for clients outside your LAN. These clients cannot contact its
address directly, as the IP address is not routed in the Internet. It is, however, possible to contact an
external address of your MultiAccess from the Internet. With DNAT, you can re-route HTTP Service on
the MultiAccess's external interface onto the Web server.
To divert port 443 (HTTPS), you must change the value of the Web Admin TCP port in the Network
Note:
& Services > Services (e.g., port 444).
Examples of DNAT Network Combinations
You can map:
IP/Port ⇒ IP/Port
IP/Port-Range ⇒ IP/Port
IP/Port-Range ⇒ IP/Port-Range (only if the Port-Range is the same for PRE and POST)
IP-Range/Port ⇒ IP/Port
IP-Range/Port-Range ⇒ IP/Port
You cannot map:
IP ⇒ IP
IP-Range ⇒ IP
IP-Range ⇒ IP-Range
IP ⇒ IP-Range (load balancing)
The "way back" (return) translation is done automatically; you do not need a rule for it.
As the address conversion takes place BEFORE the filtering by the packet filter rules, you must
Caution:
set the appropriate rules in the Packet Filters > Packet Filter Rules >Add User Defined Filters menu to
let the already-translated packets pass. You can find more about setting packet filter rules later in this
chapter.
MultiAccess Communications Server MA30120 User Guide
Chapter 3 – Software
Network Setup > DNAT
65
Advertisement
Table of Contents
