Table of Contents
Advertisement
D-Link
Step 5.d ¡ X
Insert a One-to-One
(Bidirectional) Rule
The above three modes allow LAN/DMZ-to-WAN
sessions
establishment
WAN-to-LAN/DMZ sessions. WAN-to-LAN/DMZ
sessions are allowed by Virtual Server rules. You
can make the One-to-One NAT in the above to
incorporate the WAN-to-LAN/DMZ feature by
selecting the One-to-One (Bidirectional)
from the Type. Note that WAN-to-LAN/DMZ traffic
will be blocked by the Firewall in default. You
have to add a Firewall rule to allow such traffic. If
you expect a LAN/DMZ host to be fully accessed
by public Internet users, use this mode. Note that
this mode is extremely dangerous because the
host is fully exposed to the Internet and may be
cracked. Always use Virtual Server rules first.
How to determine which NAT type is best choice for you. Here we have some suggestions as the following table description.
Type
If the public IP addresses of your company is insufficient, and you prefer to increase the node which can
Many-to-One
connect to the internet. You can just choose the Many-to-One type to fit your request.
If the public IP address of your company is not only one node (ex. you have applied extra-one ISP). You
Many-to-Many
may use the Many-to-Many type to make the multiple public addresses sharing the inbound bandwidth. So
your inbound and outbound traffic will be more flexible.
If you just wish one local IP address to connect to the internet, and prohibit others to connect to the internet.
One-to-One
You can specify the One-to-One type.
If you wish to expose the local pc onto the internet, and open all internet services outside. You can specify
One-to-One
the One-to-One (bidirectional) type. This will make the local pc you specified fully exposed to the internet.
(bidirectional)
Additionally you must add a firewall rule to allow WAN to LAN traffic forward. Then you can finish the
settings. Be careful to use this type, or it will endanger your network security.
Step 6 ¡ Ð
View the LAN to WAN Sessions
Click the NAT Sessions to see the sessions
between LAN to WAN.
6.4.2 Setup Virtual Server for the FtpServer1
Step 1 ¡ Ð
Device IP Address
Setup the IP Address and IP Subnet Mask for
the DFL-1500 of the DMZ1 interface.
ADVANCED SETTINGS > NAT > NAT Rules > Insert
but
do
not
allow
Table 6-3 The NAT type comparison
ADVANCED SETTINGS > NAT > NAT Sessions
BASIC SETUP > DMZ Settings > DMZ1 Status
Usage moment
40
Part II
Advertisement
Table of Contents
