User manual ZYXEL P660HW-DX V2 V3.40

[. . . ] P-660HW-Dx v2 802. 11g Wireless ADSL2+ 4-port Gateway User's Guide Version 3. 40 3/2007 Edition 2 www. zyxel. com About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology. Related Documentation · Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access. [. . . ] It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this. Figure 77 How NAT Works 8. 1. 4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP Alias) behind the ZyXEL Device can communicate with three distinct WAN networks. More examples follow at the end of this chapter. 130 P-660HW-Dx v2 User's Guide Chapter 8 Network Address Translation (NAT) Screens Figure 78 NAT Application With IP Alias 8. 1. 5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: · One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one global IP address. · Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP addresses to one global IP address. This is equivalent to SUA (for instance, PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today's routers). · Many to Many Overload: In Many-to-Many Overload mode, the ZyXEL Device maps the multiple local IP addresses to shared global IP addresses. · Many-to-Many No Overload: In Many-to-Many No Overload mode, the ZyXEL Device maps each local IP address to a unique global IP address. · Server: This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world. Port numbers do NOT change for One-to-One and Many-to-Many No Overload NAT mapping types. P-660HW-Dx v2 User's Guide 131 Chapter 8 Network Address Translation (NAT) Screens The following table summarizes these types. Table 45 NAT Mapping Types TYPE One-to-One Many-to-One (SUA/PAT) IP MAPPING ILA1 ILA1 ILA2 . . . IGA1 IGA1 IGA1 IGA1 IGA2 IGA1 IGA2 IGA1 IGA2 IGA3 IGA1 IGA1 IGA1 Many-to-Many Overload Many-to-Many No Overload Server Server 1 IP Server 2 IP Server 3 IP 8. 2 SUA (Single User Account) Versus NAT SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to-One and Server. The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types as outlined in Table 45 on page 132. · Choose SUA Only if you have just one public WAN IP address for your ZyXEL Device. · Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL Device. 8. 3 SIP ALG Some applications, such as SIP, cannot operate through NAT (are NAT un-friendly) because they embed IP addresses and port numbers in their packets' data payload. An Application Layer Gateway (ALG) manages a specific protocol (such as SIP, H. 323 or FTP) at the application layer. A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream. When the ZyXEL Device registers with the SIP register server, the SIP ALG translates the ZyXEL Device's private IP address inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if your ZyXEL Device is behind a SIP ALG. 132 P-660HW-Dx v2 User's Guide Chapter 8 Network Address Translation (NAT) Screens 8. 4 NAT General Setup You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the ZyXEL Device. Click Network > NAT to open the following screen. Figure 79 NAT General The following table describes the labels in this screen. Table 46 NAT General LABEL Active Network Address Translation (NAT) SUA Only Full Feature Max NAT/ Firewall Session Per User DESCRIPTION Select this check box to enable NAT. Select this radio button if you have just one public WAN IP address for your ZyXEL Device. Select this radio button if you have multiple public WAN IP addresses for your ZyXEL Device. When computers use peer to peer applications, such as file sharing applications, they need to establish NAT sessions. [. . . ] · To comply with FCC RF exposure compliance requirements, a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons. ! Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This device has been designed for the WLAN 2. 4 GHz network throughout the EC region and Switzerland, with restrictions in France. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. 2 Select your product on the ZyXEL home page to go to that product's page. 344 P-660HW-Dx v2 User's Guide Appendix J Legal Information 3 Select the certification you wish to view from this page. ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. [. . . ]