Digi Connect WAN Series User Manual page 55

Digi Connect WAN Family web interface
Forward TCP/UDP/FTP connections from external networks to the following internal
n
devices: Specifies a list of connections based on a specific IP port and where those
connections should be forwarded to. Typically the connecting devices come from the public side
of the network and are redirected to a device on the private side of the network.
You can forward a single port or a range of ports. To forward a range of ports, specify the
number of ports in the range, in the Range Port Count field for the port forwarding entry.
When a range is configured, the first port in the range is specified, and the full range is
indicated in the displayed entry information.
Note that FTP connections require special handling by NAT. This is because the FTP commands
and replies are character-based, and some of them contain port numbers in this message text.
Those embedded port numbers potentially need to be translated by NAT as messages pass
between the private and public sides of the network. For this reason, you should select FTP as
the protocol type when configuring a rule for FTP connection forwarding to an FTP server on
the private network side. If you use TCP, FTP communications may not work correctly. Note
also that TCP port 21 is the standard port number for FTP. Finally, using port ranges for FTP
forwarding is not supported; a port count of 1 is required.
IP forwarding example
For example, to enable port forwarding of RealPort data (network port 771) on a Digi Connect WAN
VPN to a Digi Connect SP with an IP address of 10.8.128.10, you would do the following:
1. Select the Enable IP Routing check box.
2. In the Forward TCP/UDP connections from external networks to the following internal
devices section, type the port forwarding information as follows, and click Add.
IP Network Failover settings
The IP Network Failover feature provides a dynamic method for selecting and configuring the default
gateway for the Digi device. Failover uses of a set of rules and link tests to determine whether you can
use a particular network interface to communicate with a specified destination. The user configures
these rules, link tests and the priority order of the interfaces.
Failover maintains a network interface list, ordered by the configured Failover Interface Priority, and
containing information on the state of the network interface and recent success or failure of the link
tests for that interface. The failover status for a network interface is one of the following:
1 - Responding: The interface is Up and configured in the system. It is currently responding to
n
the link tests. This interface is suitable for use as the default gateway.
2 - Up: The interface is Up and configured in the system. Its status has not been determined
n
by the link tests, or no link tests are configured. This interface may be suitable for use as the
default gateway.
Digi Connect WAN Family User Guide
Configuration through the web interface
55