Download InfiNet Wireless. OS WANFleX User Manual - PERFORMANCE-RF

InfiNet Wireless
WANFleX OS User Manual
nat same_ports yes|no
This command forces NAT-module to leave ports numbers in the modified
packets as they are. If it is impossible then arbitrary port numbers will be used.
nat verbose yes|no
Enables diagnostic mode and prints modified packets into system log.
nat Proxy only yes|no
If enabled then NAT-module only forwards packet according to proxy_rule
commands. Usual NAT not performed.
nat stat
Shows NAT statistics.
Packet redirection
NAT disadvantage is that local hosts are not accessible from Internet. Local hosts
can establish outgoing connections but cannot serve incoming. This hinders
starting Internet applications on local hosts. Simple solution is to redirect traffic
from some ports to local hosts.
The below commands are dedicated for creating redirection rules (redirect_xxx
and proxy_rule). Multiple command execution with different arguments
allowed. Commands are numbered when browsed using config show. This
allows to delete not needed rules using nat del XX where XX is sequential
number in the config show list.
nat redirect_port
The command comes with two flavors.
First type:
redirect_port proto local_addr:local_port_range
[public_addr:]public_port_range
[remote_addr[:remote_port_range]]
This command redirects incoming packets for specified port to other address and
other port.
Argument proto may be tcp, udp, ras or cs.
In case of ras and cs address modification is performed according to H.323
local_addr:local_port_range – IP-address and port of the local host which
the traffic will be redirected to.
[public_addr:]public_port_range – public IP-address and port of the device.
The port ranges local_port_range and public_port_range should be of the
same size.
If you are using several pairs of public address-private network, it is
recommended to specify the exact public address.
Parameters remote_addr and remote_port_range may be specified for more
exact definition of incoming packets (packets only from specified source and port
will be allowed). If remote_port_range is not specified then its range should
coincide with range of public_port_range.
nat redirect_port tcp 192.168.1.5:23 7777
Copyright © 2004-2012 by InfiNet Wireless
162