Chapter 8 - Frequently Asked Questions (Faqs) - Multitech RouteFinder RF850 User Manual

Chapter 8 – Frequently Asked
Q1. Where is the RouteFinder installed on the network?
A1. In a typical environment, the RouteFinder is installed between the internal network and an external
network. Refer to Chapter 1 and 2 of this manual for more information.
Q2. If DMZ is used, does the exposed user share the public IP with the Router?
A2. Yes.
Q3. What about RouteFinder firewall security support?
A3. As small businesses shift from dial-up to always-on broadband Internet connections or leased line
connections, their networks become more vulnerable to Internet hackers. The RouteFinder uses Stateful
Packet Inspection technology and the NAT protocol to provide security from hackers attempting to access
the office LAN. An automatic update feature provides the highest level of security by automatically
downloading any new system updates protecting against newly discovered hacker threats. Additionally,
the RouteFinder uses proxies to filter Internet content
protecting against dangerous ActiveX controls or Javascript and unwanted Web content.
Q4. Is Virtual Server support provided on my RouteFinder?
A4. Yes, in addition to providing shared Internet access, the RouteFinder can support a Web, FTP, or other
Internet servers. Once configured, the RouteFinder only accepts unsolicited IP packets addressed to the
web or ftp server. Refer to Chapter 3.
Q5. Is it possible to define a static NAT from the outside to the inside, (e.g., Map external IP a.b.c.d to
internal IP w.x.y.z) in both directions?
A5. Yes, it is possible to do static NAT, but with limitations:
You can map:
IP/Port => IP/Port
IP/Port-Range => IP/Port
IP-Range/Port => IP/Port
IP-Range/Port-Range => IP/Port
The way back is done automatically.
NAT is done before the packets pass the packet filter, so you also have to make a rule allowing these IP-
Packets to pass. There are 4 dropdown boxes in Network Setup > SNAT. The first two define which IP-
Packets will be translated. The second two define into which IP/Port address they are translated.
Example:
Net1: 212.5.63.4/255.255.255.255 (Box1)
Srv1: 0:65535 TCP 80 (Box2)
Net2: 192.168.100.2/255.255.255.255 (Box3)
Srv2: 0:65535 TCP 81 (Box4)
Explanation:
If an IP-Packet from a.b.c.d port 34232 is sent to 212.5.63.4 port 80 (www) [a.b.c.d:34232 ->
212.5.63.4:80] and it reaches the RouteFinder, the destination information will be translated into
[a.b.c.d:34232 -> 192.168.100.2:81]. If NAT is done before reaching the packet filter, you have to
set the packet filter rules correctly.
Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E)
Questions (FAQs)
You cannot map:
IP => IP
IP-Range => IP
IP => IP-Range (load balancing)
Chapter 8 – Frequently Asked Questions (FAQs)
142