24 Port Redirection The Port Redirection may be used to expose internal servers to the public domain or open a specific port number to internal hosts 24.1 Examples and Web Configurations Please refer to Figure 24-1 Figure 24-1 Port Redirection of NAT After clicking the appropriate index number then you can edit or delete the corresponding entry The Advanced - NAT - Port -Redirection - Edit page will be showed after you click the Edit button Click the Apply button to save the settings Please refer to Figure 25-2 Figure 24-2 Edit Note: Fields with * are required The letters in ( ) indicate the range and style of the value you can type Vigor3300 Series Application Note V2.2 147 Table 24-1 Range port Single Port Range Port Public Port Start 80 80 80 80 80 8080 8080 Public Por End Private Port Start Private Port End 80 8080 81 81 8081 8081 Public Public Port Start Por End 80 80 80 81 81 Private Port Start Private Port End WAN Port to LAN Port 80 to 80 80 to 80 80 to 8080 80 to 80 80 to 80 8080 to 80 8080 to 80 81 to 81 81 to 81 8081 to 81 8081 to 80 WAN Port to LAN Port Range 80 81 8080 8081 Fail Port When setting up the Port Range with firmware v2.5.5 , problem will arise if the number of Public Port is larger than that of Private Port Please set up the Range Port using Single Port mode instead You must select appropriate WAN Interface or IP Alias for the application The WAN Interface field will be gray marked when Use IP Alias is enabled You can select an IP address from the pull-down window only if IP Alias has been pre-configured and Use IP Alias is enabled Please refer to Multiple WAN - IP Alias + Address Mapping for the details on setting up IP Alias DMZ will compare the traffic with the rule from the first rule entry When one entry coincides with another entry, the one which has the smallest index number takes precedence over all other identical entries Please not set up the ports which are used in Management Port There is a priority structure for Port usage The precedence is defined as follows VoIP (Only For Vigor 3300V) SIP：UDP 5060 MGCP：UDP 2427、2727 RTP：13456～13470 T.38：49170～49184 Figure 24-3 VoIP 148 Vigor3300 Series Application Note V2.2 Management Port (For Vigor 3300 Series) HTTP：TCP 80 Telnet：TCP 23 Figure 24-4 Management port Port Redirection (For Vigor 3300 Series) PPTP and IPSec (For Vigor 3300 and Vigor 3300V) PPTP：TCP 1723 IPSec：UDP 500 DMZ(For Vigor 3300 Series) Click the Delete button to remove the specific entry You will see the following window as Figure 25-5 Figure 24-5 Delete item Click the Delete All button to remove all entries You will see the following window as Figure 25-6 Figure 24-6 Delete all item It shows the current page number There are ten entries in each page The appears after the 10th item is set up Figure 24-7 Second page Click to jump to the second page, and so on We recommend setting up to 50 entries at most Vigor3300 Series Application Note V2.2 149 Figure 24-8 Second page Port Redirection – Configuration Example The following example shows how an internal FTP server is exposed to the public domain The internal FTP Server's IP is 192.168.33.9; the port for FTP is TCP 21 WAN1 with TCP 21 is associated with the FTP Server Please refer to Figure 25-9 Table 24-2 Internal FTP server example IP Address 192.168.33.1 192.168.33.9 Subnet Mask 255.255.255.255 255.255.255.255 User 3300(Router) FTP Server IP Number 1 Figure 24-9 150 Vigor3300 Series Application Note V2.2 ...Table 24-1 Range port Single Port Range Port Public Port Start 80 80 80 80 80 8080 8080 Public Por End Private Port Start Private Port End 80 8080 81 81 8081 8081 Public Public Port Start Por End... Private Port Start Private Port End WAN Port to LAN Port 80 to 80 80 to 80 80 to 8080 80 to 80 80 to 80 8080 to 80 8080 to 80 81 to 81 81 to 81 8081 to 81 8081 to 80 WAN Port to LAN Port Range... Fail Port When setting up the Port Range with firmware v2.5.5 , problem will arise if the number of Public Port is larger than that of Private Port Please set up the Range Port using Single Port