Technical Support Information

Size: px

Start display at page:

Download "Technical Support Information"

Irma Griffith
5 years ago
Views:

Broadband Module/Broadband Module Plus Configuration Guidance Setting up Remote Access to a Network Device (Mail/File Server/Camera Etc) connected to the DMZ port of the Broadband Module where

1 Broadband Module/Broadband Module Plus Configuration Guidance Setting up Remote Access to a Network Device (Mail/File Server/Camera Etc) connected to the DMZ port of the Broadband Module where Multiple Static External IP addresses have been provided. NAT is On. Overview Case Study 5 This Case Study is for Guidance only; the information provided (covering an FTP Server, with relevant screenshots) can be adapted to suit other network devices by adjusting the relevant ports/protocols etc. Any alterations made to the Broadband Module settings can affect your network security, so please take care when making any changes. This configuration will allow an external Static IP address to be mapped (port forwarded) to an internal static IP address allocated to a network device connected on the DMZ port. This example shows an FTP server configuration. (FTP port 21 used) The connection method here assumes a BT Network type ADSL providing an external multiple static IP addresses. If your ADSL line has a single external static IP address then refer to the other relevant Case Study Connections. Technical Support Information BTV Broadband Module (BBM) ADSL line with external multiple static IP addresses PC s connected to the LAN as normal RJ45 cross connection cable Network Device Configured With Internal Static IP Address Issue 7 Page 1 of 6

An RJ45 cross connection cable may be required to connect the network device to the DMZ port as the DMZ port is not autosensing. Configuring the BBM.

Internet. (Note: - Every screenshot is not shown to reduce file size) Connect to the BBM programming interface. There are three stages to the BBM programming. 1.

2 An RJ45 cross connection cable may be required to connect the network device to the DMZ port as the DMZ port is not autosensing. Configuring the BBM.(Broadband Module) It is assumed that the Broadband Module has first been Reset To Default, the ADSL Modem Username and Password information configured and a PC connected to the DMZ can browse the Internet. (Note: - Every screenshot is not shown to reduce file size) Connect to the BBM programming interface. There are three stages to the BBM programming. 1. Allocate the external static IP addresses to the Global Address Pool. 2. Configure the Reserved Mapping. (Port Address Translation) 3. Configure the BBM Firewall 1. Allocate the external static IP addresses to the Global Address Pool. From the left side menu select Advanced Configuration. From the left side menu select Firewall & Security and the following screen is displayed. Select Advanced NAT Configuration.. on the ipwan/external. Select Add Global Address Pool from the Global Address Pools section Issue 7 Page 2 of 6

Input the Interface type as dmz (for the DMZ interface), under Use Subnet Configuration choose one of the settings and enter either the External IP range or use the IP address and subnet Mask.

3 Input the Interface type as dmz (for the DMZ interface), under Use Subnet Configuration choose one of the settings and enter either the External IP range or use the IP address and subnet Mask. Select the Add Global Address Pool button to confirm the settings. Select the Restart option on the left side to reset the Broadband Module and save the settings 2. Configure the Reserved Mapping. ( Port Address Translation ) The Reserved Mapping routes IP packets with the selected ports between the static external IP address and the static internal IP address on the DMZ port. From the left side menu select Advanced Configuration. From the left side menu select Firewall & Security and the following screen is displayed. Select Advanced NAT Configuration on the ipwan/external. On the next screen Select Add Reserved Mapping.. ( Screenshot not shown) Issue 7 Page 3 of 6

Input the chosen internal static IP address of the network device (in this example 192.168.0.

4 The relevant Reserved Mapping information can now be input. For an ADSL line providing Multiple Static IP addresses choose one of the External IP addresses and input this into the Global IP Address field. Input the chosen internal static IP address of the network device (in this example is used) in the Internal IP Address field, choose the Transport Type (TCP in this example) and External and Internal Port range (in this example 21 for the FTP protocol). Select the Add Reserved Mapping button to complete. When all the Reserved Mappings have been added select the Restart option on the left side to reset the Broadband Module and save the settings 3. Configure the BBM Firewall. Insert the relevant Port filters From the left side menu select Advanced Configuration. From the left side menu select Firewall & Security and the following screen is displayed. Scroll down and select Security Policy Configuration Issue 7 Page 4 of 6

Select Add TCP or UDP Filter In the example below an FTP server is being connected.

5 The Security Policy Configuration screen will be displayed. Select Port Filters for the external to dmz interface. From here port filters can be added to allow the selected ports through the Firewall. Select Add TCP or UDP Filter In the example below an FTP server is being connected. Leave the Source address as default, change the Destination address to the internal static IP address added to the device ( in this example Mask ) Protocol is TCP, Source port is default, Destination port as 21 ( FTP). Leave the other settings as the default. Issue 7 Page 5 of 6

The example below shows the finished Port filter added for an FTP Server ( Port 21 ) in the

6 Select Apply Select the Restart option on the left side to restart the BBM and save the settings. The example below shows the finished Port filter added for an FTP Server ( Port 21 ) in the WAN to DMZ Firewall (Security Level High) For other types of Server/devices the correct Port filters will have to be provided within the relevant Firewall. Issue 7 Page 6 of 6

Technical Support Information

Technical Support Information Broadband Module/Broadband Module Plus Configuration Guidance Setting up Remote Access to a Network Device (Mail/File Server/Camera Etc) connected to the DMZ port of the Broadband