Network -> NAT -> NAT Configuration -> New
Configuring NAT enables |
It should be possible to administer your gateway using HTTP over the Internet with the permanent IP address 62.10.10.2 . For security reasons use external port 8080 , for example, instead of port 80 .
Go to the following menu to configure NAT entries.
Go to Network -> NAT -> NAT Configuration -> New.
Network -> NAT -> NAT Configuration -> New
Proceed as follows:
Enter a Description for the NAT configuration, e. g. GUI .
Select the Interface for your NAT enable, e. g. LAN_EN1-4 .
For the Type of traffic, select incoming (destination NAT) .
Leave the Service set to User Defined .
Set Protocol to TCP .
Under Source IP Address/Netmask select Host and enter the gateway's external IP address, e. g. 62.10.10.2 .
Under New Destination Port disable Original and enter 80 in the input field.
Leave the remaining settings unchanged and confirm them with OK.
The internal Web server should be reached under the IP address 62.10.10.3 . External default port 80 is used as the Web server serves as a Web host for public websites.
Go to Network -> NAT -> NAT Configuration -> New.
Network -> NAT -> NAT Configuration -> New
Proceed as follows to configure the enable:
Enter a Description for the NAT configuration, e. g. Web server .
Set the Interface to LAN_EN1-4 .
For the Type of traffic , select incoming (destination NAT) .
Configure the Service to http .
Under Source IP Address/Netmask select Host and enter the internal web server's IP address, e. g. 62.10.10.3 .
Under New Destination IP Address/Netmask select Host andenter the internal IP address, for example 192.168.0.3 .
Leave the remaining settings unchanged and confirm them with OK.
The internal terminal server should be reached under the IP address 62.10.10.4 . When port 3389 is open attackers can easily identify that you are using a terminal server. As a result, use a different port for external access using a remote desktop, for example port 5000 .
Go to Network -> NAT -> NAT Configuration -> New.
Network -> NAT -> NAT Configuration -> New
Proceed as follows to configure the enable:
Enter a Description for the NAT configuration, e. g. Terminal server .
Set the Interface to LAN_EN1-4 .
For the Type of traffic, select incoming (destination NAT) .
Leave the Service set to User-defined .
Set Protocol to TCP .
Under Source IP Address/Netmask select Host and enter the internal terminal server's IP address, e. g. 62.10.10.4 .
Under New Destination IP Address/Netmask select Host and enter the internal IP address, for example 192.168.0.2 .
For New Destination Port disable Original and enter 3389 in the input field.
Leave the remaining settings unchanged and confirm them with OK.
| Copyright© Version 08/2020 bintec elmeg GmbH |