CTEK Z4200U SkyRouter - Manual (Page 39)

2 March 2014
35
4.4.2 Routing and Forwarding Services
Note: The Routing Screen is not available if IPsec is set to only allow secure traffic.
The Routing and Forwarding Services screen provides two separate but related functions. First it allows you to forward
WAN side IP traffic arriving on a specific IP Port to a specific Port at a LAN side address. In addition to this conventional
forwarding feature this screen also allows you to make a Named Service available over the WAN interface. In
Figure 22 below WAN side UDP and TCP traffic arriving on Port 88 is redirected to Port 80 of LAN address
192.168.1.102.
Referring again to Figure 29 a service named “Ctek SkyRouter Demo – San Pedro, CA” will be advertised or made
available. Both administrative users and permission level (p1 – p8) users will have access to this service. If the
Advertising feature is used the Administrative Login screen will no longer greet incoming WAN users, instead they will be
presented with a Services screen as shown in Figure 30.
Figure 27 - Routing and Forwarding
Block Inbound IP Traffic From Wireless Network – If set to Yes the router’s firewall is configured to block any inbound
originated (but not response) packets from the wireless network (WAN). This firewall is then selectively modified by the
forwarding entries defined through this screen. If this parameter is set to No, the router’s firewall is disabled.
Allow ICMP Pings From Wireless Network – Determines whether the SkyRouter will respond to ICMP level “Ping”
messages.
Use NAT on all Ethernet traffic to wireless network – For normal operation this parameter should be set to “Yes”. In
some unique situations, you may connect the router to a network where you will be given public address to use on your
LAN’s Ethernet segment. In such cases, NAT should be turned off. NAT is currently required for operation on all US
networks such as Sprint, Verizon or AT&T. Typical environments where NAT would be turned off would be private
networks or some types of VPNs and in these cases, the network operator will most likely provide configuration
assistance.
Forward Inbound Port – This table allows WAN side packets addressed for specific IP ports to be routed to a specified
address on the LAN side.