Cookbook Configuration
55
For example, the server address is 192.168.1.20 and HTTP is enabled. The server address is a private address,
so WAN users cannot directly access the HTTP service provided by the server. You can map the server address
and server ports to a public network address on the router so that WAN users can access the HTTP service
provided by the server.
Procedure
(1) Determine that only TCP port 3389 of the server needs to be mapped.
Choose Network > NAT/Port Mapping > Port Mapping and add a port mapping entry.
○ Mapping Type: Select Port Mapping from the Mapping Type drop-down list box, indicating that a port
of the LAN server needs to be mapped.
○ Internal IP: indicates the IP address of the server.
○ Internal Port Range: indicates the port for the server to provide external services.
○ External IP: indicates the IP address of a WAN port (IP Address is selected when the IP address of a
WAN port is dynamic).
○ External Port Range: indicates the target WAN service port for port mapping.
○ Protocol Type: indicates the protocol used by the server to provide services.
(2) Command generated on the CLI:
ip nat inside source static tcp 192.168.1.150 3389 192.168.33.56 3389 permit-insid
(3) In multi-egress network environments, you are advised to enable the RPL function on the WAN interface.
Select Reverse Path Limited.