User's Manual

Reference Manual for the Model CG814WG Wireless Cable Modem Gateway
5-8 Protecting Your Network
traffic for a particular service to one local server based on the destination port number. This is also
known as Port Forwarding.
Considerations for Port Forwarding
• If the IP address of the local server PC is assigned by DHCP, it may change when the PC is
rebooted. To avoid this, you can assign a static IP address to your server outside the range that
is assigned by DHCP, but in the same subnet as the rest of your LAN. By default, the IP
addresses in the range of 192.168.0.2 through 192.168.0.9 are reserved for this.
• Local PCs must access the local server using the PCs’ local LAN address (192.168.0.XXX, by
default). Attempts by local PCs to access the server using the external WAN IP address will
fail.
Remember that allowing inbound services opens holes in your firewall. Only enable those ports
that are necessary for your network.
The following are two application examples of inbound rules.
Note: Some residential broadband ISP accounts do not allow you to run any server
processes (such as a Web or FTP server) from your location. Your ISP may periodically
check for servers and may suspend your account if it discovers any active services at
your location. If you are unsure, refer to the Acceptable Use Policy of your ISP.