D-Link DSR-150 User Manual page 92

Unified Services Router
Situation: You want to allow incoming videoconferencing to be initiated from a
restricted range of outside IP addresses (132.177.88.2 - 132.177.88.254), from a
branch office.
Solution: Create an inbound rule as follows. In the example, CUSeeMe (the video
conference service used) connections are allowed only from a specified range of
external IP addresses.
Parameter
From Zone
To Zone
Service
Action
Send to Local Server (DNAT IP)
Destination Users
From
To
Enable Port Forwarding
Example 3: Multi-NAT configuration
Situation: You want to configure multi-NAT to support multiple public IP
addresses on one WAN port interface.
Solution: Create an inbound rule that configures the firewall to host an additional
public IP address. Associate this address with a web server on the DMZ. If you
arrange with your ISP to have more than one public IP address for your use, you can
use the additional public IP addresses to map to servers on your LAN. One of these
public IP addresses is used as the primary IP address of the router. This address is
used to provide Internet access to your LAN PCs through NAT. The other addresses
are available to map to your DMZ servers.
The following addressing scheme is used to illustrate this procedure:

WAN IP address: 10.1.0.118

LAN IP address: 192.168.10.1; subnet 255.255.255.0

Web server host in the DMZ, IP address: 192.168.12.222

Access to Web server: (simulated) public IP address 10.1.0.52
Parameter
From Zone
To Zone
Service
Action
Value
Insecure (WAN1/WAN2/WAN3)
Secure (LAN)
CU-SEEME:UDP
ALLOW always
192.168.10.11
Address Range
132.177.88.2
134.177.88.254
Yes (enabled)
Value
Insecure (WAN1/WAN2/WAN3)
Public (DMZ)
HTTP
ALLOW always
91
User Manual