Tripp Lite B098048 Owners Manual for B093- B097- and B098-Series Console Serve - Page 99

Port / Protocol Forwarding

Page 99 highlights

5. Firewall, Failover and OOB Access The DHCP server also supports pre-assigning IP addresses to be allocated only to specific MAC addresses and reserving IP addresses to be used by connected hosts with fixed IP addresses. Once applied, devices on the internal network will be able to access resources on the external network. 5.8.3 Port / Protocol Forwarding When using IP masquerading, devices on the external network cannot initiate connections to devices on the internal network. To work around this, port forwarding can be set up to allow external users to connect to a specific port or range of ports on the external interface of the console server/cellular router. The console server/cellular router redirects the data to a specified internal address and port range. To set up a port/protocol forward: • Navigate to the System: Firewall page and click on the Port Forwarding tab. • Click Add New Port Forward. • Fill in the following fields: Name: Name for the port forward. This should describe the target and the service that the port forward is used to access. Input Interface: This allows the user to only forward the port from a specific interface. In most cases, this should be left as "Any". Source Address/Address Range: This allows the user to restrict access to a port forward to a specific source IP address or IP address range of the data. This may be left blank. IP address ranges use the format ip/netmask (where netmask is in bits 1-32). Destination Address/Address Range: The destination IP address/address range to match. This may be left blank. IP address ranges use the format ip/netmask (where netmask is in bits 1-32). Input Port Range: The range of ports to forward to the destination IP. These will be the port(s) specified when accessing the port forward. These ports do not need to be the same as the output port range. Protocol: The protocol of the data being forwarded. The options are TCP or UDP, TCP and UDP, ICMP, ESP, GRE and Any. Output Address: The target of the port forward. This is an address on the internal network where packets sent to the Input Interface on the input port range are sent. Output Port Range: The port or range of ports that the packets will be redirected to on the Output Address. Ranges use the format start-finish. This option is only valid for TCP and UDP protocols. 99

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288

99
5. Firewall, Failover and OOB Access
The DHCP server also supports pre-assigning IP addresses to be allocated only to specific MAC addresses and reserving IP
addresses to be used by connected hosts with fixed IP addresses.
Once applied, devices on the internal network will be able to access resources on the external network.
5.8.3 Port / Protocol Forwarding
When using IP masquerading, devices on the external network cannot initiate connections to devices on the internal network.
To work around this, port forwarding can be set up to allow external users to connect to a specific port or range of ports on
the external interface of the console server/cellular router. The console server/cellular router redirects the data to a specified
internal address and port range.
To set up a port/protocol forward:
• Navigate to the
System: Firewall
page and click on the
Port Forwarding
tab.
• Click
Add New Port Forward
.
• Fill in the following fields:
Name:
Name for the port forward. This should describe the target and the service that the
port forward is used to access.
Input Interface:
This allows the user to only forward the port from a specific interface. In most
cases, this should be left as “Any”.
Source Address/Address Range:
This allows the user to restrict access to a port forward to a specific source IP
address or IP address range of the data. This may be left blank. IP address ranges
use the format ip/netmask (where netmask is in bits 1-32).
Destination Address/Address Range:
The destination IP address/address range to match. This may be left blank. IP
address ranges use the format ip/netmask (where netmask is in bits 1-32).
Input Port Range:
The range of ports to forward to the destination IP. These will be the port(s)
specified when accessing the port forward. These ports do not need to be the same
as the output port range.
Protocol:
The protocol of the data being forwarded. The options are
TCP or UDP, TCP and
UDP, ICMP, ESP, GRE
and
Any
.
Output Address:
The target of the port forward. This is an address on the internal network where
packets sent to the Input Interface on the input port range are sent.
Output Port Range:
The port or range of ports that the packets will be redirected to on the Output
Address. Ranges use the format start-finish. This option is only valid for TCP and
UDP protocols.