Download 602LAN SUITE 2004 Manual

Transcript
Configuring Shared Internet Access
To configure shared Internet access through 602LAN SUITE you must first configure
the server to allow network address translation and then the client’s TCP/IP gateway
must be set to the IP address of the computer running 602LAN SUITE. If you wish to
use user authentication or site access control, then you will need to use the proxy
services described in the “Proxy” section under the “Advanced Access Control”
chapter of the manual.
What is Network Address Translation (NAT)?
NAT is the translation of an Internet Protocol address (IP address) used within one
network (your private network) to a different IP address known within another
network (the Internet). NAT maps local inside network addresses to one or more
global outside IP addresses and unmaps the global IP addresses on incoming packets
back to the local IP addresses. This helps ensure security since each outgoing or
incoming request must go through a translation process that also offers the
opportunity to qualify or authenticate the request or match it to a previous request.
NAT also conserves the number of global IP addresses needed and allows the use of
a single IP address to communicate with the Internet.
Enabling NAT
NAT requires that at least two interfaces be installed on the computer where 602LAN
SUITE is running (e.g. two NICs or a NIC and a Dial-up adapter). To begin using NAT
in 602LAN SUITE you must first check the box in the upper left had corner of the
NAT tab. Next, select the connection you wish to share in the “Connection to share”
box. Now, select the internal network(s) from the “Select internal interfaces/subnets”
box to define what network(s) will be allowed to access NAT. If an interface has
more than one IP address you can select the addresses as needed.
Setting Up Client Access Through NAT
The client computer’s TCP/IP setting can be set either manually or automatically via
DHCP. Manual configuration requires IP addresses to be set from the same network
as the 602LAN SUITE internal interface (e.g. 192.168.1.x) and this internal interface
must be entered into the TCP/IP gateway settings as part of the TCP/IP settings (e.g.
192.168.1.1).
© 2007 Software602, Inc.
32