MSR Routers

Port Mapping Configuration Examples

Contents

Introduction· 1

Prerequisites· 1

Software versions used· 1

Network configuration· 1

Restrictions and guidelines· 2

Procedures· 2

Configuring the router for network access· 2

Configuring the virtual server (port mapping) 4

Verifying the configuration· 4

Introduction

The following information describes the port mapping configuration on routers.

For an external network user (such as an employee on business trip) that wants to access a server in the internal network of the enterprise, you can configure port mapping on the NAT Settings > Virtual Servers page of the Web interface.

Prerequisites

This document is not restricted to specific software or hardware versions. Procedures and information in the examples might be slightly different depending on the software or hardware version of the device.

The configuration examples were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

The following information is provided based on the assumption that you have basic knowledge of virtual NAT servers.

Software versions used

This example applies to the H3C Comware 7-based MSR router series. Use the R6749P14 version of H3C MSR3610-X1 as an example. The specific operations might vary slightly depending on the product model and software version.

Network configuration

As shown in Figure 1, Router acts as the border gateway for an enterprise, and connects the Internet through interface WAN0. The connection mode of WAN0 is fixed IP, and is configured with IP address 20.1.1.2/24 and gateway address 20.1.1.1.

Configure port mapping on the router to enable employees on business trips to access the OA server on the internal network. The information of the OA server is as follows:

·     Protocol type: TCP

·     IP address: 192.168.1.2.

·     Internal port: 80

Figure 1 Network diagram

Restrictions and guidelines

In this example, only the server's Web service port is mapped. Select the user-defined ports option for the global IP address field, and configure the start and end port numbers to be consistent. As a best practice, enter a port number of 10000 or higher. In this example, enter 10000.

Procedures

Configuring the router for network access

In this example, select the single-WAN scenario for the external network, and set the connection mode of the selected WAN interface to fixed IP.

Perform the following tasks:

1.     From the navigation pane, select Network > WAN Settings.

2.     On the Scene tab, select Single-WAN scenario, and then click Apply.

Figure 2 Configuring the WAN scenario

3.     Click the WAN Settings tab.

4.     Click the Edit icon in the Actions column for WAN1.

5.     Select Fixed IP from the Connection mode list.

6.     In the  IP address field, enter 20.1.1.2.

7.     In the Subnet mask field, enter 255.255.255.0.

8.     In the Gateway field, enter 20.1.1.1.

9.     From the NAT function list, select Enable.

10.     Use the default settings for other parameters, and then click Apply.

Figure 3 Connecting interface WAN0 to the Internet

Configuring the virtual server (port mapping)

In this example, select the custom port option for the global port field, and configure the start and end port numbers to be consistent. As a best practice, enter a port number of 10000 or higher.

Perform the following tasks:

1.     From the navigation pane, select Network > NAT Settings.

2.     On the Port Mapping tab, click Add.

3.     From the Interface list, select interface WAN1.

4.     In the Protocol Type field, select TCP.

5.     In the Global IP address field, select the current IP address option.

6.     From the Global port number list, select User-defined ports, and enter 10000 in the Start port number field and 10000 in the End port number field.

7.     In the Local IP address field, enter 192.168. 1.2, the IP address of the server.

8.     In the Local port number field, enter 80 in the Start port number field and End port number field.

9.     Click Apply.

Figure 4 Adding a NAT port mapping

Verifying the configuration

On the PC of a traveling employee, enter http://20.1.1.2:10000 in the browser to access the  internal OA server Web page of the company. Verify that the configuration succeeds