Vodafone MachineLink. Port Forwarding / DMZ Configuration Guide

Size: px

Start display at page:

Download "Vodafone MachineLink. Port Forwarding / DMZ Configuration Guide"

Carmella Hubbard
5 years ago
Views:

1 Vodafone MachineLink Port Forwarding / DMZ Configuration Guide

2 Docuent history This guide covers the following products: Vodafone MachineLink 3G (NWL-10) Vodafone MachineLink 3G Plus (NWL-12) Vodafone MachineLink 4G (NWL-22) Ver. Docuent description Date v. 1.0 Initial docuent release. March 2013 v. 2.0 Revised content based on current firware. Septeber 2016 Table i - Docuent revision history Note Before perforing the instructions in this guide, please ensure that you have the latest firware version installed on your router. Visit to download the latest firware. Note The functions described in this docuent require that the router is assigned with a publicly routable IP address. Please ensure that your obile carrier has provided you with a publicly routable IP address before perforing the instructions in this docuent. Copyright Copyright 2016 NetCo Wireless Liited. All rights reserved. Copyright 2016 Vodafone Group Plc. All rights reserved. The inforation contained herein is proprietary to NetCo Wireless and Vodafone. No part of this docuent ay be translated, transcribed, reproduced, in any for, or by any eans without prior written consent of NetCo Wireless and Vodafone. Tradearks and registered tradearks are the property of NetCo Wireless Liited or Vodafone Group or their respective owners. Specifications are subject to change without notice. Iages shown ay vary slightly fro the actual product. Note This docuent is subject to change without notice. Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 2 of 13 vodafone.netcowireless.covodafone.netcowireless.co

3 Contents Introduction... 4 Adding a Port Forwarding Rule... 5 Verifying the Port Forwarding rule... 8 Placing a device in the Deilitarized Zone (DMZ) Verifying the DMZ Notation The following sybols are used in this user guide: The following note requires attention. The following note provides a warning. The following note provides useful inforation. Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 3 of 13 vodafone.netcowireless.covodafone.netcowireless.co

4 Introduction Port forwarding enables progras or devices running on your LAN to counicate with the internet as if they were directly connected. Many internet services and applications use designated ports and when packets arrive at the router, they will be lost unless they are directed to the appropriate destination. Port forwarding works by forwarding a specific TCP or UDP port or range of ports fro the ode/router to the coputer or device you are using. There ight also be ties when you wish to place a device connected to your router in the deilitarized zone or DMZ. A device placed in the DMZ will have all port nubers forwarded to it, giving it unrestricted access to the internet. Note Each service or application generally uses different TCP or UDP ports. Refer to the docuentation for the service or application to find out which ports need to be forwarded. Note You can only forward a port or range of ports to a single destination (IP address). In soe cases, this ay cause issues where ultiple LAN devices attept to use a service siultaneously. Where possible, use an alternate port for any subsequent connections after the first device. Please consult your service provider or application developer for assistance with this. This docuent explains how to configure port forwarding and DMZ on the Vodafone MachineLink router so that a coputer running Microsoft Reote Desktop Server can be accessed reotely. This is one exaple of how port forwarding and the deilitarized zone ay be used, however there are any other uses for these features. The diagra below illustrates the exaple scenario. Figure 1 Exaple network diagra Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 4 of 13 vodafone.netcowireless.covodafone.netcowireless.co

5 Adding a Port Forwarding Rule This guide will take you through the steps required to add a port forwarding rule to your router. 1 Open a web browser and navigate to the LAN IP address of the MachineLink router. The default is Log in to the router with the following credentials: Usernae: root Password: adin Figure 2 Login page Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 5 of 13 vodafone.netcowireless.covodafone.netcowireless.co

6 2 Fro the enu bar along the top of the screen, click on Networking then click the Routing ite on the left and finally click the Port forwarding link. Figure 3 Internet Settings - Routing NAT 3 Click the +Add button to begin configuring a new port forwarding rule. Figure 4 Add new Port forwarding list Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 6 of 13 vodafone.netcowireless.covodafone.netcowireless.co

7 4 Using the Protocol drop down list, select the protocol type to use for the rule. You can select TCP, UDP or All. Figure 5 Port forwarding settings 5 In the Source IP address field, enter the address fro which the traffic will originate. This is usually a WAN IP address originating fro the internet. In this exaple, we have set the Source IP address to which allows connections fro anywhere. 6 In the Source port range fields, enter the range of ports to forward fro the source. For exaple, entering 6881 in the first field and 6999 in the second field will forward the 19 ports between and including 6881 and If you wish to forward a single port, enter the sae port nuber in both the first and the second fields. 7 In the Destination IP address field, enter the local IP address of the LAN client to which port traffic will be forwarded. 8 In the Destination port range fields, enter the port range for the destination. In any cases these ports will be the sae as the Source port range. If you wish to specify a single port, enter the sae port nuber in both the first and the second fields. 9 Click the Save button. The port forwarding rule is displayed at the botto of the screen as highlighted in Figure 6 below. Figure 6 Port forwarding rule added successfully. Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 7 of 13 vodafone.netcowireless.covodafone.netcowireless.co

8 Verifying the Port Forwarding rule In the exaple above, we forwarded port 3389 which is the default port for Microsoft s Reote Desktop Protocol (RDP). The client achine ( ) is accepting Reote Desktop connections on port 3389 so we can verify the connection by connecting to the client using RDP. We need to connect to the WAN IP address of the router and our request is forwarded on to the client ( ). Retrieving the WAN IP address The WAN IP Address can be found by viewing the Status page of the Vodafone MachineLink router as shown below: Figure 7 The Status page showing the WAN IP Address Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 8 of 13 vodafone.netcowireless.covodafone.netcowireless.co

Connect to reote PC via reote desktop connection 1 Click Start then Run and type stsc and press Enter. 2 Type the WAN IP address of the reote router and click Connect.

9 Connect to reote PC via reote desktop connection 1 Click Start then Run and type stsc and press Enter. 2 Type the WAN IP address of the reote router and click Connect. Figure 8 RDP Connection screen The reote desktop opens and propts you to login. If it does not, verify your settings and try again. Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 9 of 13 vodafone.netcowireless.covodafone.netcowireless.co

10 Placing a device in the Deilitarized Zone (DMZ) A device connected to the router ay be placed in the DMZ which gives it unrestricted access to the internet. All ports are forwarded to the device when it is in the DMZ. Placing a device in the DMZ can be useful for testing certain scenarios but is also risky since it puts the client device in a vulnerable position. Note Placing a device in the DMZ puts it in a vulnerable position and is open to potential threats fro the internet. It is not recoended that you leave a device in the DMZ during noral operation. To place a device in the DMZ: 1 Open a web browser and navigate to the LAN IP address of the MachineLink router. The default is Log in to the router with the following credentials: Usernae: root Password: adin Figure 9 Login page 2 Fro the enu bar along the top of the screen, click on Networking then click the Routing ite on the left and finally click the DMZ link. Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 10 of 13 vodafone.netcowireless.covodafone.netcowireless.co

11 3 Click the DMZ toggle key to switch it to the ON position. Figure 10 Internet Settings - Routing NAT Figure 11 Enable DMZ Settings 4 Enter the Local IP address of the device that you want to place in the deilitarized zone. Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 11 of 13 vodafone.netcowireless.covodafone.netcowireless.co

12 Figure 12 Enter DMZ IP Address 5 Click the Save button. 6 The IP address you entered will have all ports forwarded to it: Verifying the DMZ In the exaple above, we placed the client achine on in the deilitarized zone. This eans that all ports are forwarded directly to it. To test that it is in the DMZ, we can connect to the WAN IP Address using RDP. The WAN IP Address can be found by viewing the Status page of the Vodafone MachineLink router as shown below: Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 12 of 13 vodafone.netcowireless.covodafone.netcowireless.co

13 7 Click Start then Run and type stsc and press Enter. 8 Type the WAN IP address of the client and click Connect. Figure 13: The Status page showing the WAN IP Address Figure 14 - RDP Connection screen The reote desktop opens and propts you to login. If it does not, verify your settings and try again. Port Forwarding / DMZ Configuration Guide Vodafone MachineLink 13 of 13 vodafone.netcowireless.covodafone.netcowireless.co

Port Forwarding Technical Support Guide

Port Forwarding Technical Support Guide Copyright Copyright 2015 NetComm Wireless Limited. All rights reserved. The information contained herein is proprietary to NetComm Wireless. No part of this document