D-Link DWC-1000 User Manual - Page 201

Wireless Controller User Manual 6. Inbound rules can use Destination NAT (DNAT) for managing traffic from the Option. Destination NAT is available when the To Zone = DMZ or secure LAN.  W ith an inbound allow rule you can enter the internal s erver addres s that is hos ting the s elected s ervice.  Yo u can en ab le p o rt fo rward in g fo r an in co min g s erv ice s p ecific ru le (Fro m Zo n e = Op t io n ) b y s electin g t h e app rop riat e ch eckb o x. Th is will allow the s elected s ervice traffic from the internet to reach the ap p ro p riat e LA N p o rt v ia a p o rt fo rward in g ru le.  Tran s lat e Po rt Nu mb er: W it h p o rt fo rward in g , t h e in co min g t raffic t o b e fo rward ed t o t h e p o rt n u mb er en t ered h ere.  Ext ern al IP ad d res s : Th e ru le can b e b o u n d t o a s p ecific Op t io n in t erface b y s elect in g eit h er t h e p rimary Op t io n o r co n fig u rab le p o rt Op t io n as t h e s o u rce IP ad d res s fo r in co min g t raffic.  Th is co n t roller s u pp orts mu lt i-NA T an d s o t h e Ext ern al IP ad d res s d oes n ot neces s arily have to be the Option addres s . On a s ingle Option interface, mu lt ip le p u b lic IP ad d res s es are s u p p o rt ed . If y o u r ISP as s ig n s y o u mo re t h an o n e p u b lic IP ad d res s , o n e o f t h es e can b e u s ed as y o u r p rimary IP addres s on the Option port, and the others can be as signed to s ervers on the LA N o r DM Z. In t h is way t h e LA N/ DM Z s erv er can b e acces s ed fro m t h e internet by its alias ed public IP addres s . 7. Outbound rules can use Source NAT (SNAT) in order to map (bind) all LAN/DMZ traffic matching the rule parameters to a specific Option interface or external IP address (usually provided by your ISP). On ce t h e n ew o r mo d ified ru le p aramet ers are s av ed , it ap p ears in t h e mas t er lis t o f firewall ru les . To en ab le o r d is ab le a ru le, click t h e ch eckb o x n ext t o t h e ru le in t h e lis t o f firewall ru les an d ch o o s e En ab le o r Dis ab le.  The controller applies firewall rules in the order lis ted. As a general rule, y o u s h o uld mo v e t h e s trict est ru les (t h ose wit h t h e mo s t s pecific s erv ices or ad d res ses) t o t h e t o p o f t h e lis t . To reo rd er ru les , click t h e ch eckb ox n ext t o a rule and click up or down. 199