Planet mh-5000 User Manual page 54

MH-5000 User Manual
Step 6. Setup IP for the FTP Server
Assign an IP of 10.1.1.1/255.255.255.0 to the
FTP server under DMZ1. Assume the FTP Server
is at 10.1.1.5. And it is listening on the well-known
port (21).
Step 7. Setup Server Rules
Insert a virtual server rule by clicking the Insert
button.
Step 8. Customize the Rule
Customize the rule name as the ftpServer. For
any packets with its destination IP equaling to the
WAN1 IP (61.2.1.1) and destination port equaling
to 44444, ask MH-5000 to translate the packet's
destination IP/port into 10.1.1.5/21. Check the
Passive FTP client?
compatibility of the FTP protocol. This is useful if
you want to provide connectivity to passive FTP
clients. For passive FTP clients, the server will
return them the private IP address and the port
number for them to connect back to do data
transmissions. Since the private IP from them
cannot be routed to our zone, the data
connections would fail. After enabling this feature,
the MH-5000 will translate the private IP/port into
an IP/port of its own. Thus the problem is
gracefully solved. Another point is to be sure to
check "Auto update to Firewall rules when you
Apply this page?" or "Auto update to NAT rules
when you Apply this page?". Then, the virtual
server rule will add Firewall or NAT rules
automatically. Click Apply to proceed.
Activate this rule
Status
Rule name
Sessions from
Condition
Internet
connecting to
External IP
ADVANCED SETTINGS > NAT > Virtual Servers
ADVANCED SETTINGS > NAT > Virtual Servers > Insert
To maximize the
FIELD
The Virtual Server rule is enabled or not
The Virtual Server rule name
Which interface does the connected session
come from?
The public IP address of the Virtual Server.
DESCRIPTION
47
Chapter 6
Range / Format EXAMPLE
Enabled /
Enabled
Disabled
text string ftpServer
WAN interfaces WAN1
IPv4 format 61.2.1.1
NAT