Cisco Small Business RV220W - Page 70

Firewall
Access Rules
Cisco RV220W Administration Guide 70
4
• Source IP—Specify the IP address to which the firewall rule applies:
- Any—The rule applies to traffic originating from any IP address.
- Single Address—The rule applies to traffic originating from a single IP
address. Enter the address in the Start field.
- Address Range—The rule applies to traffic originating from a range of IP
addresses. Enter the starting IP address in the Start field, and the ending
IP address in the Finish field.
STEP 2 For inbound rules that allow access to your LAN, enter these additional settings:
• Send to Local Server (DNAT IP)—Specify the local IP address of the device
that hosts the service. Destination Network Address Translation (DNAT)
maps a public IP address (your dedicated WAN address) to the specified
private IP address.
• Use Other WAN (Internet) IP Address—To associate the specified Local
Server with a public IP address other than your dedicated WAN address,
check the Enable box and then enter the public IP address in the WAN
(Internet) Destination IP field. The router supports multi-NAT, which allows
multiple public IP addresses for a single WAN interface. If your ISP assigns
you more than one public IP address, one of these can be used as your
primary IP address on the WAN port, and the others can be assigned to
servers on the LAN. In this way, the LAN can be accessed from the Internet
by multiple public IP addresses.
STEP 3 For outbound rules only, enter these additional settings:
• Destination IP—Specify the public IP address to which the firewall rule
applies:
- Any—The rule applies to traffic going to any IP address.
- Single Address—The rule applies to traffic going to a single IP address.
Enter the address in the Start field.
- Address Range—The rule applies to traffic going to a range of IP
addresses. Enter the starting IP address in the Start field, and the ending
IP address in the Finish field.
• Use This SNAT IP Address (only for rules that Allow access)—To associate
the specified Destination IP with a public IP address (your dedicated WAN IP
address or another public IP address), check the Enable box and then enter
the public IP address in the SNAT IP field. Secure Network Address
Translation (SNAT) maps a public IP address to an IP address on your private
network.