User guide
Table Of Contents
- 1 Security recommendations
- 2 CERTIFICATE OF CONFORMITY
- 3 Products identification
- 4 Data-sheet
- 5 Product overview
- 1 Dimensions
- 2 Connectors
- 3 Led indicators
- 4 DIP switches
- 5 Factory default push-button
- 6 Mounting the product on a DIN rail or removing it
- 7 Cooling
- 8 RS232 interface
- 9 RS485 interface
- 10 Digital input and output
- 11 Connecting the antenna
- 12 Installing the SIM card
- Set up steps
- 2 Connecting a PC to the router for configuration
- 3 Rebooting the router after parameters changes
- 4 Recovering the factory LAN IP address
- 5 Recovering the factory configuration
- 6 Restricting access to the administration server
- 7 Recovering a free access to the administration server
- 8 Factory configuration
- 9 LAN interface set up
- 10 UMTS – GSM-GPRS-3GDGE interface set up
- 11 Setting up the DynDNS service
- 12 Creating VPN connections between routers
- 13 Routing functions
- 14 Address and port translation
- 15 VRRP redundancy
- 16 Remote users connections service
- 17 Remote users connections
- 18 M2Me_Connect service
- 19 Users list
- 20 Firewall
- 21 Serial to IP gateway
- 22 USB to IP gateway
- 23 Advanced functions
- 1 Diagnostic menu
- 2 Saving the configuration to a file
- 3 Updating the firmware
- Signets Word
SET UP
To set the Port forwarding function,
• select the “network” menu and then the “Port forwarding” menu.
• Click “Add a DNAT” rule.
14.2 Advanced network address and port translation
14.2.1 Principle
This function is available in RAS-3G-1400, RAS-3G-1201, RAS-3G-1220, RAS-3G-1230 routers only.
That function consists in replacing the source port and IP address or the destination port and IP
address of particular frames received by the router on its interfaces according to configured rules.
It applies to all the frames received by the router on any of its two interfaces except to the IP packets
contained in a remote user PPTP or TLS connection.
It applies as well to frames the destination address of which is the RAS-3G router itself or to frames
the destination IP address is a device belonging to the LAN subnet, or to the WAN subnet or to
another network.
One brings out
the DNAT function which consists in replacing the destination port and IP address.
the SNAT function which consists in replacing the source IP address.
Because the DNAT and SNAT functions modify the IP addresses of the IP packets processed by the
RAS-3G router, and because the firewall filters that frames, it is very important to understand in which
order that different functions are carried out.
Direction
WAN to LAN
LAN to WAN
UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 51
DNAT
FIREWALL
SNAT
WAN LAN
Router
LAN
SNAT
DNAT
WAN
FIREWALL
Router