Home » ZyXEL Manuals » Networking » ZyXEL FSG2200HNU » Manual Viewer

ZyXEL FSG2200HNU User Guide - Page 129

What NAT Does, 8.3.3 How NAT Works, Table 38

Get ZyXEL FSG2200HNU PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 129 highlights

Chapter 8 Network Address Translation (NAT) host when the packet is on the WAN side. The following table summarizes this information. Table 38 NAT Definitions ITEM DESCRIPTION Inside This refers to the host on the LAN. Outside This refers to the host on the WAN. Local This refers to the packet address (source or destination) as the packet travels on the LAN. Global This refers to the packet address (source or destination) as the packet travels on the WAN. NAT never changes the IP address (either local or global) of an outside host. 8.3.2 What NAT Does In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. Note that the IP address (either local or global) of an outside host is never changed. The global IP addresses for the inside hosts can be either static or dynamically assigned by the ISP. In addition, you can designate servers, for example, a web server and a telnet server, on your local network and make them accessible to the outside world. If you do not define any servers, NAT offers the additional benefit of firewall protection. With no servers defined, your ZyXEL Device filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). 8.3.3 How NAT Works Each packet has two addresses - a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN. For incoming packets, the ILA is the destination address on the LAN, and the IGA is the destination address on the WAN. NAT maps private (local) IP addresses to globally unique ones required for communication with hosts on other networks. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses FSG2200HNU User's Guide 129

Section	Page
FSG2200HNU	1
About This User's Guide	3
Document Conventions	5
Safety Warnings	7
Contents Overview	9
Table of Contents	11
User’s Guide	19
Introducing the ZyXEL Device	21
1.1 Overview	21
1.2 Applications for the ZyXEL Device	21
1.2.1 Internet Access	21
1.2.2 VoIP Features	22
1.2.3 ZyXEL Device’s USB Support	23
1.2.4 FTU2000 Support	23
1.3 Ways to Manage the ZyXEL Device	24
1.4 Good Habits for Managing the ZyXEL Device	25
1.5 LEDs (Lights)	25
1.6 The RESET Button	27
1.7 The WPS/WLAN Button	27
Introducing the Web Configurator	29
2.1 Overview	29
2.1.1 Accessing the Web Configurator	29
2.2 Web Configurator Main Screen	31
2.2.1 Title Bar	31
2.2.2 Navigation Panel	32
2.2.3 Main Window	36
2.2.4 Status Bar	36
Tutorial	37
3.1 Overview	37
3.2 Configuring the WAN Screens	37
3.2.1 Egress Queue Setup	39
3.2.2 Wide Area Network (WAN) Service Setup	40
3.2.3 Setting the Default Gateway	44
3.2.4 Checking the WAN Configuration	45
3.3 How to Set up a Wireless Network	46
3.3.1 Example Parameters	46
3.3.2 Configuring the AP	46
3.3.3 Configuring the Wireless Client	48
3.4 How to Make a VoIP Call	54
3.4.1 VoIP Calls With a Registered SIP Account	54
3.5 Using the File Sharing Feature	55
3.5.1 Set Up File Sharing	55
3.5.2 Access Your Shared Files From a Computer	57
3.6 Configuring the Policy Route Screens	58
Technical Reference	61
Status Screens	63
4.1 Overview	63
4.2 DHCP Client List	67
4.3 WLAN Client List	68
4.4 Packet Statistics	68
4.5 VoIP Statistics	70
WAN Setup	73
5.1 Overview	73
5.1.1 What You Can Do in this Chapter	73
5.1.2 What You Need to Know	74
5.1.3 Before You Begin	75
5.2 Internet Connection Screen	76
5.2.1 WAN Connection Configuration	77
5.2.2 Egress Queue Information Edit Screen	86
5.3 Default Gateway Screen	88
5.4 Multicast Screen	88
5.5 Technical Reference	89
LAN Setup	93
6.1 Overview	93
6.1.1 What You Can Do in this Chapter	93
6.1.2 What You Need To Know	94
6.1.3 Before You Begin	94
6.2 The IP Screen	95
6.3 DHCP Server Screen	95
6.4 The Client List Screen	96
6.5 IP Alias Screen	98
6.6 Technical Reference	98
Wireless LAN	103
7.1 Overview	103
7.1.1 What You Can Do in this Chapter	103
7.1.2 What You Need to Know	104
7.1.3 Before You Begin	107
7.2 The Wireless LAN General Screen	107
7.3 The Security Screens	110
7.3.1 No Security	111
7.3.2 Static WEP/Shared WEP Encryption	111
7.3.3 WPA-PSK/WPA2-PSK Authentication	113
7.3.4 WPA/WPA2 Authentication	114
7.4 The QoS Screen	116
7.5 WPS	117
7.6 WPS Station	119
7.7 Scheduling Screen	120
7.8 Association List Screen	121
7.9 Wireless LAN Technical Reference	121
Network Address Translation (NAT)	123
8.1 Overview	123
8.1.1 What You Can Do in this Chapter	123
8.1.2 What You Need To Know	123
8.2 Port Forwarding	124
8.2.1 Configuring the Port Forwarding Screen	125
8.2.2 The Port Forwarding Edit Screen	127
8.3 NAT Technical Reference	128
8.3.1 NAT Definitions	128
8.3.2 What NAT Does	129
8.3.3 How NAT Works	129
8.3.4 NAT Application	131
Voice	133
9.1 Overview	133
9.1.1 What You Can Do in this Chapter	133
9.1.2 What You Need to Know	134
9.1.3 Before You Begin	135
9.2 The SIP Service Provider Screen	135
9.2.1 Dial Plan Rules	138
9.3 The SIP Account Screen	139
9.4 The Analog Phone Screen	144
9.5 The Phone Region Screen	145
9.6 The Speed Dial Screen	145
9.7 SIP Technical Reference	147
9.7.1 VoIP	147
9.7.2 SIP	147
9.7.3 Quality of Service (QoS)	153
9.7.4 Phone Services Overview	154
File Sharing	159
10.1 Overview	159
10.1.1 What You Can Do in this Chapter	159
10.1.2 What You Need to Know	160
10.1.3 Before You Begin	160
10.2 The Share Configuration Screen	161
10.2.1 Share Configuration Add Screen	163
10.2.2 Share Configuration Edit Screen	165
10.3 The Account Management Screen	166
10.3.1 Account Management Add or Edit Screen	167
MAC Filter	169
11.1 Overview	169
11.1.1 What You Can Do in this Chapter	169
11.1.2 What You Need to Know	169
11.2 MAC Filter Screen	170
Firewall	171
12.1 Overview	171
12.1.1 What You Can Do in the Firewall Screens	171
12.1.2 What You Need to Know About Firewall	171
12.2 The Firewall Screen	172
12.3 Firewall Technical Reference	174
12.3.1 Guidelines For Enhancing Security With Your Firewall	174
12.3.2 Security Considerations	174
Certificates	177
13.1 Overview	177
13.1.1 What You Can Do in this Chapter	177
13.1.2 What You Need to Know	177
13.1.3 Verifying a Certificate	179
13.2 My Certificates	180
13.3 Trusted CAs	182
13.4 Trusted CA Import	183
13.5 Trusted CA Details	184
Static Route	187
14.1 Overview	187
14.1.1 What You Can Do in this Chapter	187
14.2 Configuring Static Route	188
14.3 Static Route Add/Edit	189
Policy Route	191
15.1 Overview	191
15.1.1 What You Can Do in this Chapter	191
15.1.2 What You Need to Know	191
15.2 The Rule Setup Screen	192
15.3 Rule Setup Add/Edit	193
Dynamic DNS Setup	197
16.1 Overview	197
16.1.1 What You Can Do in the DDNS Screen	197
16.2 Configuring Dynamic DNS	197
Service Control	199
17.1 Overview	199
17.1.1 What You Can Do in this Chapter	199
17.1.2 What You Need to Know	199
17.2 The Service Control Screen	200
TR-069	203
18.1 Overview	203
18.1.1 What You Can Do in this Chapter	203
18.1.2 What You Need to Know	204
18.2 The TR-069 Screen	204
System	207
19.1 Overview	207
19.1.1 What You Can Do in this Chapter	207
19.1.2 What You Need to Know	207
19.2 The System General Screen	208
19.3 The Time Setting Screen	209
Logs	211
20.1 Overview	211
20.1.1 What You Can Do in this Chapter	211
20.1.2 What You Need To Know	211
20.2 The View Log Screen	212
20.3 The Log Settings Screen	213
20.4 Log Descriptions	214
Tools	217
21.1 Overview	217
21.1.1 What You Can Do in this Chapter	217
21.1.2 What You Need To Know	217
21.1.3 Before You Begin	219
21.2 Firmware Upgrade Screen	219
21.3 The Configuration Screen	221
21.3.1 Reset to Factory Defaults	223
21.4 Restart	223
21.5 Technical Reference	224
21.5.1 Tool Examples	224
Diagnostic	231
22.1 Overview	231
22.1.1 What You Can Do in the Diagnostic Screens	231
22.2 The General Diagnostic Screen	231
Account	233
23.1 Overview	233
23.2 Admin/Account Screen	233
Troubleshooting	235
24.1 Overview	235
24.2 Power, Hardware Connections, and LEDs	235
24.3 ZyXEL Device Access and Login	236
24.4 Internet Access	238
24.5 Phone Calls and VoIP	239
24.6 Multiple SIP Accounts	240
24.6.1 Outgoing Calls	240
24.6.2 Incoming Calls	241
24.7 USB Device Connection	242
Product Specifications	243
IP Addresses and Subnetting	255
Setting Up Your Computer’s IP Address	267
Pop-up Windows, JavaScripts and Java Permissions	297
Wireless LANs	307
Common Services	331
Open Software Announcements	335
Legal Information	341

Match case Limit results 1 per page

Chapter 8 Network Address Translation (NAT)

FSG2200HNU User’s Guide

129

host when the packet is on the WAN side. The following table summarizes this

information.

NAT never changes the IP address (either local or global) of an outside host.

8.3.2

What NAT Does

In the simplest form, NAT changes the source IP address in a packet received from

a subscriber (the inside local address) to another (the inside global address)

before forwarding the packet to the WAN side. When the response comes back,

NAT translates the destination address (the inside global address) back to the

inside local address before forwarding it to the original inside host. Note that the

IP address (either local or global) of an outside host is never changed.

The global IP addresses for the inside hosts can be either static or dynamically

assigned by the ISP. In addition, you can designate servers, for example, a web

server and a telnet server, on your local network and make them accessible to the

outside world. If you do not define any servers, NAT offers the additional benefit of

firewall protection. With no servers defined, your ZyXEL Device filters out all

incoming inquiries, thus preventing intruders from probing your network. For

more information on IP address translation, refer to

RFC 1631

The IP Network

Address Translator (NAT)

8.3.3

How NAT Works

Each packet has two addresses – a source address and a destination address. For

outgoing packets, the ILA (Inside Local Address) is the source address on the LAN,

and the IGA (Inside Global Address) is the source address on the WAN. For

incoming packets, the ILA is the destination address on the LAN, and the IGA is

the destination address on the WAN. NAT maps private (local) IP addresses to

globally unique ones required for communication with hosts on other networks. It

replaces the original IP source address (and TCP or UDP source port numbers for

Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then

forwards it to the Internet. The ZyXEL Device keeps track of the original addresses

Table 38

NAT Definitions

ITEM

DESCRIPTION

Inside

This refers to the host on the LAN.

Outside

This refers to the host on the WAN.

Local

This refers to the packet address (source or destination) as the packet travels

on the LAN.

Global

This refers to the packet address (source or destination) as the packet travels

on the WAN.