Nat/Router Mode And Transparent Mode - Planet Networking & Communication MH-5001 User Manual

MH-5001 User Manual Chapter 1
Quick Start
Step 9. View the Result ADVANCED SETTINGS > NAT > Virtual Servers
Now any request towards the MH-5001's
WAN1 IP (61.2.1.1) with dest. port 44444
will be translated into a request towards
10.1.1.5 with port 21, and then be
forwarded to the 10.1.1.5. The FTP server
listening at port 21 in 10.1.1.5 will pick up
the request.
1.7

NAT/Router Mode and Transparent Mode

1.7.1 NAT/Router Mode
When the MH-5001 is running in NAT/Router mode, you can connect a private network to the internal interface, a DMZ network to
the DMZ interface, and a public network, such as the Internet, to the external interface. Each of these networks must have a different
subnet address. You create security policies to control how the firewall routes packets between MH-5001 interfaces, and therefore
between the networks connected to the interface. When you switch the MH-5001 operation mode from NAT/Router mode to
Transparent mode, you have to backup your configuration first, otherwise the original configuration will be deleted inclusive of all
rules, policies, addresses, etc. After system reboots, MH-5001 will return to the factory default.
In this document, we will introduce you how to setup NAT/Router Mode firewall in the most examples. You can learn the settings
of each feature by them. For more information of how to choose NAT or Route mode in the MH-5001, please refer Section 7.5.4.
1.7.2 Transparent Mode
When the MH-5001 is running in Transparent mode, it can be inserted in your network at any point without changing your network
or any of its components. In Transparent mode, you can add Transparent mode rules/policies to accept or deny connections between
interfaces. The firewall will apply those rules/policies to control traffic without modifying the packets in any way. Please make sure
not to connect the LAN1/LAN2/DMZ interfaces to the same Hub while using Transparent mode, otherwise the traffic from the PCs
under LAN1/LAN2/DMZ interfaces may be blocked.
For the MH-5001 Transparent mode connections, please refer to the following Figure 1-.
Figure 1-7 MH-5001 Transparent mode connections
22