D-Link DFL-300 User Manual - Page 136

Virtual Server - port forwarding

Page 136 highlights

Virtual Server The FIREWALL VPN ROUTER Office Firewall separates an enterprise's Intranet and Internet into internal networks and external networks respectively. Generally speaking, in order to allocate enough IP addresses for all computers, an enterprise assigns each computer a private IP address, and converts it into a real IP address through Firewall's NAT (Network Address Translation) function. If a server which provides service to the external networks, is located in the internal networks, outside users can't directly connect to the server by using the server's private IP address. The FIREWALL VPN ROUTER Firewall's Virtual Server can solve this problem. A virtual server has set the real IP address of the Firewall's external network interface to be the Virtual Server IP. Through the virtual server feature, the Firewall translates the virtual server's IP address into the private IP address of physical server in the Internal (LAN) network. When outside users on the Internet request connections to the virtual server, the request will be forwarded to the private internal server. Virtual Server owns another feature know as one-to-many mapping. This is when one virtual server IP address on the external interface can be mapped into 4 internal network server private IP addresses. This option is useful for Load Balancing, which causes the virtual server to distribute data packets to each private IP addresses (which are the real servers). By sending all data packets to all similar servers, this increases the server's efficiency, reduces risks of server crashes, and enhances servers' stability. How to use Virtual Server and mapped IP Virtual Server and Mapped IP are part of the IP mapping scheme. By applying the incoming policies, Virtual Server and IP mapping work similarly. They map real IP addresses to the physical servers' private IP addresses (which is opposite to NAT), but there still exists some differences: Virtual Server can map one real IP to several internal physical servers while Mapped IP can only map one real IP to one internal physical server (1-to-1 Mapping). The Virtual Servers' load balance feature can map a specific service request to different physical servers running the same services. Virtual Server can only map one real IP to one service/port of the internal physical servers while Mapped IP maps one real IP to all the services offered by the physical server. IP mapping and Virtual Server work by binding the IP address of the external - 136 -

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179

- 136 -
Virtual Server
The FIREWALL VPN ROUTER Office Firewall separates an enterprise’s
Intranet and Internet into internal networks and external networks
respectively.
Generally speaking, in order to allocate enough IP addresses
for all computers, an enterprise assigns each computer a private IP address,
and converts it into a real IP address through Firewall’s NAT (Network
Address Translation) function.
If a server which provides service to the
external networks, is located in the internal networks, outside users can’t
directly connect to the server by using the server’s private IP address.
The FIREWALL VPN ROUTER Firewall’s Virtual Server can solve this
problem.
A virtual server has set the real IP address of the Firewall’s
external network interface to be the Virtual Server IP. Through the virtual
server feature, the Firewall translates the virtual server’s IP address into the
private IP address of physical server in the Internal (LAN) network. When
outside users on the Internet request connections to the virtual server, the
request will be forwarded to the private internal server.
Virtual Server owns another feature know as one-to-many mapping. This is
when one virtual server IP address on the external interface can be mapped
into 4 internal network server private IP addresses. This option is useful for
Load Balancing, which causes the virtual server to distribute data packets to
each private IP addresses (which are the real servers).
By sending all data
packets to all similar servers, this increases the server’s efficiency, reduces
risks of server crashes, and enhances servers’ stability.
How to use Virtual Server and mapped IP
Virtual Server and Mapped IP are part of the IP mapping scheme. By
applying the incoming policies, Virtual Server and IP mapping work similarly.
They map real IP addresses to the physical servers’ private IP addresses
(which is opposite to NAT), but there still exists some differences:
±
Virtual Server can map one real IP to several internal physical
servers while Mapped IP can only map one real IP to one internal
physical server (1-to-1 Mapping). The Virtual Servers’ load balance
feature can map a specific service request to different physical
servers running the same services.
±
Virtual Server can only map one real IP to one service/port of the
internal physical servers while Mapped IP maps one real IP to all the
services offered by the physical server.
IP mapping and Virtual Server work by binding the IP address of the external