ip mappings: configure ip-maps set name internal ip external ip save exit quit -------------------------------------------------------- Netopia-2000/22870124 (ip-maps)>> set ip-maps (ip-maps) node list ... Select (name) node to modify from list, or enter new (name) to create. ip-maps name (?): some_name (some_name) has been added to the (ip-maps) list name "some_name" internal-ip (0.0.0.0): 192.168.1.1 external-ip (0.0.0.0): 83.70.213.18 Netopia-2000/22870124 (ip-maps)>> -------------------------------------------------------- Config Mode v1.3 Netopia-2000/22870124 (top)>> ip-maps Netopia-2000/22870124 (ip-maps)>> set ip-maps (ip-maps) node list ... "some_name" Select (name) node to modify from list, or enter new (name) to create. ip-maps name (?): some_name name "some_name" internal-ip (192.168.1.1): 192.168.1.1 external-ip (83.70.213.18): 83.70.213.19 Netopia-2000/22870124 (ip-maps)>> save WARNING: admin account password has not been set WARNING: IP Map some_name external address 83.70.213.19 may not be on WAN network Configuration data saved. Netopia-2000/22870124 (ip-maps)>> |
port forwarding: configure pinhole set name protocol-select external-port-start external-port-end internal-ip internal-port save exit quit ---------------------------------------------------------- Netopia-2000/22870124 (pinhole)>> set pinhole (pinhole) node list ... Select (name) node to modify from list, or enter new (name) to create. pinhole name (?): test (test) has been added to the (pinhole) list name "test" protocol-select (TCP) [ TCP | UDP ]: tcp external-port-start (6117) [ 0 - 49151 ]: 6117 external-port-end (6117) [ 0 - 49151 ]: 6117 internal-ip (192.168.1.200): 192.168.1.200 internal-port (6117) [ 0 - 65535 ]: 6117 Netopia-2000/22870124 (pinhole)>> save WARNING: admin account password has not been set Configuration data saved. Netopia-2000/22870124 (pinhole)>> |
========================================================================== Netopia-2000/22870124> ?/help arp to send ARP request atmping to send ATM OAM loopback clear to erase all stored configuration information clear_certificate to clear stored SSL certificate clear_log to clear stored log data configure to configure unit's options diagnose to run self-test download to download config file exit to quit this shell help to get more: "help all" or "help help" hotspot to set or show hotspot authentication info install to download and program an image into flash license to enter an upgrade key to add a feature log to add a message to the diagnostic log loglevel to report or change diagnostic log level netstat to show IP information nslookup to send DNS query for host ping to send ICMP Echo request quit to quit this shell reset to reset subsystems restart to restart unit show to show system information start to start subsystem status to show basic status of unit telnet to telnet to a remote host traceroute to send traceroute probes upload to upload config file view to view configuration summary who to show who is using the shell adsldebug to debug commands ? to get help: "help all" or "help help" ========================================================================= Netopia-2000/22870124> configure Config Mode v1.3 Netopia-2000/22870124 (top)>> ?/help Help for: top top -- Top level menu dmt -- DMT ADSL options pppoe -- PPP over Ethernet options atm -- ATM options bridge -- Bridge options dhcp -- DHCP options dns -- DNS options dslf-cpewan -- Has no help dslf-lanmgmt -- Has no help dynamic-dns -- Dynamic DNS client ethernet -- ethernet options igmp -- IGMP options ip -- IP options (ipsec-passthrough{ipsec}) ip-maps -- IP Maps options nat-default -- NAT default server options pinhole -- Pinhole options ppp -- PPP options (username/password) preferences -- Shell environment preferences radius -- radius options remote-mgmt or remote -- Remote Management configuration options security -- Security options servers -- Internal server options snmp -- SNMP options system -- Unit system options upnp -- Universal Plug'n'Play options wireless -- wireless options vlan -- vlan options diffserv -- differentiated service options up -- go up one menu level view -- view configuration data set -- set configuration data save -- to save configuration script -- print configuration setup script validate -- validate configuration settings help -- help command options exit -- exit from configuration mode quit -- quit configuration mode, return to shell ? -- help command options add -- add a list entry delete -- delete a list entry rename -- rename a list entry change -- change a list entry define -- define preferences ============================================================================= Netopia-2000/22870124 (top)>> ip-maps Netopia-2000/22870124 (ip-maps)>> ? Help for: ip-maps ip-maps -- IP Maps options name -- IP Map entry name up -- go up one menu level view -- view configuration data set -- set configuration data save -- to save configuration script -- print configuration setup script validate -- validate configuration settings help -- help command options exit -- exit from configuration mode quit -- quit configuration mode, return to shell ? -- help command options add -- add a list entry delete -- delete a list entry rename -- rename a list entry change -- change a list entry define -- define preferences =============================================================================== ===============================================================================
IP Passthrough
IP Passthrough is a useful feature if a host computer or server on the Local Area Network needs to have access into it from the internet with a real public IP address. With IP Passthrough configured, all IP traffic, not just TCP/UDP, is forwarded back to the host computer. This can be necessary with certain types of software that do not function reliably through Network Address Translation.
In this configuration, the local PC will share the Public IP addressing information with the WAN side of the router. Also, this computer will have access to other resources on the LAN while it is in this mode.
IP Mapping
With NAT enabled, the IP addresses of nodes on your LAN are private since they are hidden from the Internet. IP Maps let you forward all requests directed to a public IP address provided to you by your ISP through the Netopia router's NAT interfaces. Once configured, all network ports and protocols will be forwarded to a specific host or server behind the Netopia router.
Please Note: Static IP maps only work with IP addresses not assigned to the router for internet access. If your ISP is only routing you a single public IP address, then this would not be applicable to you. However, you can forward specific ports to designated IP addresses on your LAN via Server List entries Netopia default settingsNetopia-2000/25350368> config Config Mode v1.3 Netopia-2000/25350368 (top)>> view ================================================= top =============================================== dmt autoConfig off type dmt =============================================== atm option on vcc 1 option on vpi 8 vci 35 encap pppoe-llc pppoe-sessions 1 qos service-class ubr peak-cell-rate 0 =============================================== bridge sys-bridge off concurrent-bridging-routing off table-timeout 30 =============================================== dhcp option server start-address 192.168.1.1 end-address 192.168.1.253 lease-time 00:01:00:00 =============================================== dns proxy-enable on domain-name "" primary-address 0.0.0.0 secondary-address 0.0.0.0 =============================================== dslf-cpewan option off =============================================== dslf-lanmgmt option off =============================================== dynamic-dns option off =============================================== igmp snooping off robustness 2 query-intvl 125 query-response-intvl 100 unsol-report-intvl 10 version 2 last-member-query-intvl 10 last-member-query-count 2 fast-leave off =============================================== ip option on ethernet A option on address 192.168.1.254 broadcast 192.168.1.255 netmask 255.255.255.0 restrictions none rip-send v1 rip-receive v1 proxy-arp off static-client-address-translation off ip-ppp vcc1 //WAN IPs option on address 0.0.0.0 peer-address 0.0.0.0 restrictions admin-disabled addr-mapping on //NAT rip-receive off gateway option on interface ppp-vcc1 arp-timeout 600 igmp-forwarding off ipsec-passthrough on prioritize off sip-passthrough on static-routes static-arp =============================================== ip-maps //ip mappings =============================================== nat-default //static route mode off =============================================== pinhole //port forwarding =============================================== ppp module vcc1 option on mru 1492 magic-number on protocol-compression off lcp-echo-requests on echo-period 10 lost-echoes-max 6 failures-max 10 configure-max 10 terminate-max 2 restart-timer 3 connection-type instant-on time-out 3600 auto-connect on port-authentication //PPPoE logon option chap-only username "eircom@eircom.net" password "broadband1" =============================================== radius radius-name "" radius-secret "" alt-radius-name "" alt-radius-secret "" radius-port 1812 =============================================== remote-mgmt telnet-enable on web-enable on snmp-enable on network-1 83.71.139.240 netmask-1 255.255.255.240 network-2 0.0.0.0 netmask-2 0.0.0.0 network-3 0.0.0.0 netmask-3 0.0.0.0 network-4 0.0.0.0 netmask-4 0.0.0.0 network-5 0.0.0.0 netmask-5 0.0.0.0 network-6 0.0.0.0 netmask-6 0.0.0.0 network-7 0.0.0.0 netmask-7 0.0.0.0 network-8 0.0.0.0 netmask-8 0.0.0.0 network-9 0.0.0.0 netmask-9 0.0.0.0 network-10 0.0.0.0 netmask-10 0.0.0.0 =============================================== security firewall option medium pkt-filter filterset ethernet A assigned-filterset "none" ip-ppp vcc1 assigned-filterset "none" state-insp udp-timeout 180 tcp-timeout 14400 ip-ppp vcc1 option off xposed-addr =============================================== servers web-http 80 telnet-tcp 23 =============================================== snmp community read "public" write "" trap "" traps ip-traps sysgroup contact "" location "" notify type v1-trap =============================================== system name "Netopia-2000/25350368" diagnostic-level high log-size 30000 persistent-log off idle-timeout telnet 15 http 5 username administrator "admin" user "user" calendar-update option off heartbeat option on protocol udp port-client 8081 ip-server "83.71.139.241" port-server 8080 url-server "_esoap/ui/test.elm" number 16 interval 00:00:00:20 sleep 00:00:30:00 contact-email "sharon@netopia.com" location "Billerica,Ma." ntp option on server-address "204.152.184.72" alt-server-address "18.72.0.3" daylight-savings off time-zone 0 update-period 60 syslog option off zerotouch option off =============================================== upnp option on =============================================== wireless //wireless settings option on default-channel 1 auto-channel off network-id ssid "tomilenko" closed-system off privacy option WPA-PSK pre-shared-key "key_goes_here" wpa-version all multi-ssid option off no-bridging off mode both-b-and-g tx-power full mac-auth option off =============================================== vlan =============================================== diffserv option on lohi-ratio 92 custom-flows Netopia-2000/25350368 (top)>> ================================================= turning auto-sensing off (firmware 7.8) ------------------------------------------------- Terminal shell v1.0 Copyright ⌐2008 Motorola, Inc. All rights reserved. Netopia Model 2247-02 High-Power Wireless DSL Ethernet Managed Switch Running Netopia SOC OS version 7.8.0 (build r2) Multimode ADSL Capable (Admin completed login: Full Read/Write access) Netopia-2000/136441044608> configure Config Mode v1.3 Netopia-2000/136441044608 (top)>> Netopia-2000/136441044608 (top)>> ip Netopia-2000/136441044608 (ip)>> set ip option (on) [ on ]: ethernet A option (on) [ off | on ]: address (192.168.1.254): broadcast (192.168.1.255): netmask (255.255.255.0): restrictions (none) [ none | admin-disabled ]: rip-send (v1) [ off | v1 | v2 | v1-compat | v2-md5 ]: rip-receive (v1) [ off | v1 | v2 | v1-compat | v2-md5 ]: proxy-arp (off) [ off | on ]: static-client-address-translation (off) [ off | on ]: subnet 2 option (off) [ off | on ]: subnet 3 option (off) [ off | on ]: subnet 4 option (off) [ off | on ]: subnet 5 option (off) [ off | on ]: subnet 6 option (off) [ off | on ]: subnet 7 option (off) [ off | on ]: subnet 8 option (off) [ off | on ]: ip-ppp vcc1 option (on) [ off | on ]: address (0.0.0.0): peer-address (0.0.0.0): restrictions (admin-disabled) [ none | admin-disabled ]: addr-mapping (on) [ off | on ]: ping-req-drop (off) [ off | on ]: auto-sensing (on) [ off | on ]: off unnumbered (off) [ off | on ]: . . . . . . . . . . . . (static-arp) node list ... Select (ip-address) node to modify from list, or enter new (ip-address) to create. static-arp ip-address (?): Netopia-2000/136441044608 (ip)>> Netopia-2000/136441044608 (ip)>> save WARNING: admin account password has not been set WARNING: Nat rule element 'HTTP' has conflict with internal Web-TCP service port [80], This will shut down access from WAN to unit's Web Port. Configuration data saved. Netopia-2000/136441044608 (ip)>>