Planet mh-5000 User Manual page 21

MH-5000 User Manual
Step 8. Customize the Rule
Customize the rule name as the ftpServer.
For any packets with its destination IP
address equaling to the WAN1 IP (61.2.1.1)
and destination port equaling to 44444.
MH-5000 will translate
destination IP/port into 10.1.1.5/21. Check
the Passive FTP client to maximize the
compatibility of the FTP protocol. This is
useful if you want to provide connectivity to
passive FTP clients. For passive FTP clients,
the server at DMZ will return them the private
IP address (10.1.1.5) and the port number for
the clients to connect
transmissions. Since the FTP clients at the
WAN side cannot connect to a private-IP
(ex.10.1.1.5) through the internet. The data
connections would fail. After enabling this
feature, the MH-5000 will translate the private
IP/port into an IP/port of its own. Thus the
problem is gracefully solved. Another point is
to be sure to check "Auto update to Firewall
rules when you Apply this page?" or "Auto
update to NAT rules when you Apply this
page?" Then, the virtual server rule will add
Firewall or NAT rules automatically. Click
Apply to proceed.
Step 9. View the Result
Now any request towards the MH-5000's
WAN1 IP (61.2.1.1) with dest. port 44444 will
be translated into a request towards 10.1.1.5
with port 21, and then be forwarded to the
10.1.1.5. The FTP server listening at port 21
in 10.1.1.5 will pick up the request.
Step 10. View the NAT Rules
In the previous Step 8, we have already
checked "Auto update to Firewall/NAT rules
when you Apply this page", so it will
automatically add one NAT rule to transfer
the IP address of virtual server when server
responses packet back to the client.
ADVANCED SETTINGS > NAT > Virtual Servers > Insert
the packet's
back for data
ADVANCED SETTINGS > NAT > Virtual Servers
ADVANCED SETTINGS > NAT > NAT Rules
14
Chapter 1
Quick Start