Tripp Lite B092-016 - Port Forwarding

79
5.5.3 Port Forwarding
WhenusingIPMasquerading,devicesontheexternalnetworkcannotinitiateconnectionstodevicesontheinternalnetwork.
Toworkaroundthis,Port Forwardscanbesetuptoallowexternaluserstoconnecttoaspecicport,orrangeofportsonthe
externalinterfaceoftheConsoleServer,andhavetheConsoleServerredirectthedatatoaspeciedinternaladdressandport
range.
To setup a port forward:
• NavigatetotheSystem: Firewallpage,andclickonthePort Forwarding tab
• ClickAdd New Port Forward
• Fillinthefollowingelds:
Name: Namefortheportforward.Thisshoulddescribethetargetandtheservicethattheportforwardisusedto
access
Input Interface: Thisallowstheusertoonlyforwardtheportfromaspecicinterface.Inmostcases,thisshouldbeleft
as"Any"
Source Address/
Address Range: This allows the user to restrict access to a port forward to a specific source IP address or IP address
rangeofthedata.Thismaybeleftblank.IPaddressrangesusetheformatip/netmask(wherenetmaskis
inbits1-32).
Input Port Range: TherangeofportstoforwardtothedestinationIP.Thesewillbetheport(s)speciedwhenaccessingthe
port forward. These ports need not be the same as the output port range.
Protocol: Theprotocolofthedatabeingforwarded.TheoptionsareTCPorUDP
Output Address: The target of the port forward. This is an address on the internal network where packets sent to the Input
Interface on the input port range are sent.
Output Port Range: TheportorportsthatthepacketswillberedirectedtoontheOutputAddress.
Chapter 5: Firewall, Failover and Out-of-Band
Forexample,toforwardport8443toaninternalHTTPSserveron192.168.10.2,thefollowingsettingswouldbeused:
Input Interface: Any
Input Port Range: 8443
Protocol: TCP
Output Address: 192.168.10.2
Output Port Range: 443