Technical Support Information

Size: px

Start display at page:

Download "Technical Support Information"

Anna Anderson
5 years ago
Views:

Technical Support Information Broadband Module/Broadband Module Plus Configuration Guidance Setting up Remote Access to a Network Device (Mail/File Server/Camera Etc) connected to the DMZ port of the

1 Technical Support Information Broadband Module/Broadband Module Plus Configuration Guidance Setting up Remote Access to a Network Device (Mail/File Server/Camera Etc) connected to the DMZ port of the Broadband Module where Multiple Static External IP addresses have been provided and NAT is tuned Off. Overview Case Study 4 This Case Study is for Guidance only; the information provided (covering an FTP Server, with relevant screenshots) can be adapted to suit other network devices by adjusting the relevant ports/protocols etc. Any alterations made to the Broadband Module settings can affect your network security, so please take care when making any changes. This configuration will allow an external Static IP address to be allocated directly to the network device by turning NAT off to the DMZ interface. This example shows an FTP server configuration. (FTP port 21 used) The connection method here assumes a BT Network type ADSL providing external multiple static addresses. If your ADSL line has single external static IP addresses then refer to the other relevant Case Study Connections. BTV Broadband Module (BBM) ADSL line with external multiple static IP addresses PC s connected to the LAN as normal RJ45 cross connection cable Network Device Configured With External Static IP Address Issue 8 Page 1 of 6

2 Configure the network device connected on the DMZ with one of the external static IP addresses. An RJ45 cross connection cable may be required to connect the network device to the DMZ port as the DMZ port is not autosensing. Configuring the BBM.(Broadband Module) It is assumed that the Broadband Module has first been Reset To Default, the ADSL Modem Username and Password information configured and a PC connected to the DMZ can browse the Internet. (Note: - Every screenshot is not shown to reduce file size) Connect to the BBM programming interface. There are three stages to the BBM programming. 1. Configure the BBM DMZ port 2. Turn NAT off on the WAN to DMZ interface 3. Configure the BBM Firewall 1. Configure the BBM DMZ port. Change the ETH/DMZ port IP address to the External IP Gateway Address. From left side menu select ETH/DMZ Port From the new screen select Change the DMZ IP Address here (screenshot not shown) On the DMZ Setup screen Input the External Static IP Gateway address here with it s Subnet followed by the Next > key. On the following screen select Confirm Changes to complete the changes. (screenshot not shown) Issue 8 Page 2 of 6

2. Turn NAT off on the WAN to DMZ interface From the left side menu select Advanced Configuration. From the left side menu select Firewall & Security and the following screen is displayed.

3 2. Turn NAT off on the WAN to DMZ interface From the left side menu select Advanced Configuration. From the left side menu select Firewall & Security and the following screen is displayed. On the Security Interfaces Section ipwan/external, Press the Disable NAT to DMZ interfaces. This should then change to Enable NAT to DMZ interfaces NAT is now turned off between the WAN (internet) and the DMZ interface. 3. Configure the BBM Firewall. Note:- With NAT turned off, all testing should be carried out with the correct Firewall filter/level applied for the application. Turning the Firewall completely off in this configuration (NAT Off) will still leave some hidden security features enabled which could cause incoming connection problems. No problems with outgoing connections. Insert the relevant Port filters From the left side menu select Advanced Configuration. From the left side menu select Firewall & Security and the following screen is displayed. Issue 8 Page 3 of 6

Select Port Filters for the external to dmz interface.

4 Scroll down and select Security Policy Configuration The Security Policy Configuration screen will be displayed. Select Port Filters for the external to dmz interface. From here port filters can be added to allow the selected ports through the Firewall. Issue 8 Page 4 of 6

device (in this example 217.40.154.245 - Mask 255.255.255.248) Protocol is TCP, Source port is default, Destination port as 21 ( FTP).

5 Select Add TCP or UDP Filter In the example below an FTP server is being connected. Leave the Source address as default, change the Destination address to the external static IP address added to the network device (in this example Mask ) Protocol is TCP, Source port is default, Destination port as 21 ( FTP). Leave the other settings as the default. Select Apply. Select the Restart option on the left side to restart the BBM and save the settings. Issue 8 Page 5 of 6

6 The example below shows the finished Port filter added for an FTP Server ( Port 21 ) in the external (WAN) to DMZ Firewall (Security Level High) Note:- In this example the destination IP address shown will be the base address for the IP range of external IP addresses based on the Subnet used. For other types of network devices the correct Port filters will have to be provided within the relevant Firewall. Issue 8 Page 6 of 6

Technical Support Information

Technical Support Information Broadband Module/Broadband Module Plus Configuration Guidance Setting up Remote Access to a Network Device (Mail/File Server/Camera Etc) connected to the LAN port of the Broadband