ZyXEL NSA320S User Guide - Page 169

UPnP Port Mapping Screen

Page 169 highlights

Chapter 8 Network 8.5 UPnP Port Mapping Screen Use UPnP (Universal Plug and Play) port mapping to allow access from the WAN to services you select on the NSA. It is recommended that you place the NSA behind an Internet gateway firewall device to protect the NSA from attacks from the Internet (see RAID and Data Protection on page 163 for firewall type suggestions). Many such Internet gateways use UPnP to simplify peer-to-peer network connectivity between devices. UPnP can automatically configure the Internet gateway's firewall and Network Address Translation (NAT) to allow access to the NSA from the Internet. Figure 65 UPnP for FTP Access 192.168.1.20 a.b.c.d TCP: 21 TCP: 21 In the above example, UPnP creates a firewall rule and NAT port forwarding mapping to send FTP traffic (using TCP port number 21) from the public IP address a.b.c.d to the NSA's private IP address of 192.168.1.20. Use the NSA's UPnP Port Mapping screen to configure the UPnP settings your Internet gateway uses to allow access from the WAN (Internet) to services you select on the NSA. You can also set which port Internet users need to use in order to access a specific service on the NSA. Note: To use UPnP port mapping, your Internet gateway must have UPnP enabled. If your Internet gateway supports Port Address Translation (PAT is sometimes included with a port forwarding feature), you can have the Internet users use a different TCP port number from the one the NSA uses for the service. Figure 66 UPnP Port Address Translation for FTP Example 192.168.1.20 a.b.c.d TCP: 21 TCP: 2100 In the above example, the Internet gateway uses PAT to accept Internet user FTP sessions on port 2100, translate them to port 21, and forward them to the NSA. 8.5.1 UPnP and the NSA's IP Address It is recommended that the NSA use a static IP address (or a static DHCP IP address) if you will allow access to the NSA from the Internet. The UPnP-created NAT mappings keep the IP address the NSA had when you applied your settings in the UPnP Port Mapping screen. They do not automatically update if the NSA's IP address changes. Note: WAN access stops working if the NSA's IP address changes. Media Server User's Guide 169

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358

Chapter 8 Network
Media Server User’s Guide
169
8.5
UPnP Port Mapping Screen
Use UPnP (Universal Plug and Play) port mapping to allow access from the WAN to services you
select on the NSA. It is recommended that you place the NSA behind an Internet gateway firewall
device to protect the NSA from attacks from the Internet (see
RAID and Data Protection on page
163
for firewall type suggestions). Many such Internet gateways use UPnP to simplify peer-to-peer
network connectivity between devices. UPnP can automatically configure the Internet gateway’s
firewall and Network Address Translation (NAT) to allow access to the NSA from the Internet.
Figure 65
UPnP for FTP Access
In the above example, UPnP creates a firewall rule and NAT port forwarding mapping to send FTP
traffic (using TCP port number 21) from the public IP address a.b.c.d to the NSA’s private IP
address of 192.168.1.20.
Use the NSA’s
UPnP Port Mapping
screen to configure the UPnP settings your Internet gateway
uses to allow access from the WAN (Internet) to services you select on the NSA. You can also set
which port Internet users need to use in order to access a specific service on the NSA.
Note: To use UPnP port mapping, your Internet gateway must have UPnP enabled.
If your Internet gateway supports Port Address Translation (PAT is sometimes included with a port
forwarding feature), you can have the Internet users use a different TCP port number from the one
the NSA uses for the service.
Figure 66
UPnP Port Address Translation for FTP Example
In the above example, the Internet gateway uses PAT to accept Internet user FTP sessions on port
2100, translate them to port 21, and forward them to the NSA.
8.5.1
UPnP and the NSA’s IP Address
It is recommended that the NSA use a static IP address (or a static DHCP IP address) if you will
allow access to the NSA from the Internet. The UPnP-created NAT mappings keep the IP address
the NSA had when you applied your settings in the
UPnP Port Mapping
screen. They do not
automatically update if the NSA’s IP address changes.
Note: WAN access stops working if the NSA’s IP address changes.
TCP: 21
TCP: 21
192.168.1.20
a.b.c.d
TCP: 2100
TCP: 21
192.168.1.20
a.b.c.d