elmeg T444, T484 User Manual

Declaration of conformity and CE marks
This device meets the requirements of the following EC directive R&TTE 6/3/EG:
»Directive 1999/5/ECof theEuropean Parliament andof theCouncil of9 March 1999 on radioequip
-
mentand telecommunications terminalequipmentand the mutualrecognitionoftheir conformity«.
You can also requestthisEC declaration ofconformityat the followingInternetURL:http://www.funkwerk-ec.com.
­posed of separately from normaldomestic wasteat an appropriate waste disposalfacility atthe end of its usefulservice life. You will find additional information on anindividual returningof theold appli
­ances under www.funkwerk-ec.com.
© 2009 Funkwerk Enterprise Communications GmbH - All rights reserved.
Reprinting of thisdocument, even excerpts,is permitted onlywith the expressconsent of thepublisher and withpre
-
cise source information, regardless of the media used (mechanical or electronic).
Function descriptions included in this documentation which refer to software products of other manufacturers are based on the software used and valid at the date the documentation was prepared or published. The product and company names used in this documentation may be protected by trademarks.
Table of contents
Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Router of the PABX elmeg T444 / elmeg T484 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
What is a router? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Router of the PABX system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Which Internet connections are supported? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Dial-in into the LAN (RAS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
RAS Callback:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
DHCP server and IP address allocation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Direct connection (DHCP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Default setting of the PABX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Default IP addressesforthelocal area network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
What are IPaddressesandsubnetwork masks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Example with this PABX:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Router functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Automatic Internet access, fallback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Short Hold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Dynamic ISDN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
DHCP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
DNS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
DNS-Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Dynamic DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Router control via system phone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Statusdisplay CAPI/TAPIin the ControlCenter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Address assignment by DHCP -Recommended configuration - (Default setting). . . . . . . . . . . . . . . . 9
Things to note for this configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Addressassignment without DHCP (set / mixedIPaddresses) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Things to note for this configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
LAN-Client (PC) Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
PC settings in Windows operating system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Sample configuration of a network with mixed address assignment. . . . . . . . . . . . . . . . . . . . . . . 14
Sample configuration ofanetworkwith setaddressassignment. . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Checking the LAN clients (PCs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Configuration for Windows 98SE/ME/2000/XP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Checking the TCP/IP Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Windows 98SE / ME. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Windows 2000 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Windows XP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Configuring Internet access on a PC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
InternetExplorer settings /WindowsInternet options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Configure firewall filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Basic information about firewall configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Four place holdersareprovided to achieveanabstractionwhen defining thefilters: . . . . . . . . . . . . . . . . . 23
You can configure the following parameters: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Filter Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Gaming - Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
1
Realplayer - Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Mediaplayer - Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Filter update. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
2
Introduction
Router of the PABX elmeg T444 / elmeg T484
The PABX elmegT444/ elmeg T484isequipped withanintegrated router. Youcanprovide access totheInternet and network several PC via this router.
What is a router?
A router allows LAN clients (computers, PC within a network) of one network (LAN) to obtain access to a different network, for exampleInternet.Accessto the Internetismadeavailable by variousInternetservice providers (ISP).
In this process, the router searches for a path on which data can be exchanged between the LAN clients in the local network and the Internet. Linking to the Internet can be carried out via an xDSL and / or an ISDN connection.
Router of the PABX system
The PABXsystem routeris equippedwith aWAN/xDSL anda LANport). ThePABX systemis connectedto another network, forexample the Internet, via theWAN/xDSL port.You canhook up a DSL or cable modelfor connectionto the Internet.
The LAN ports are for your local network. Here, you can directly connect up to two PCs equipped with built-in net
­work cards. If you wish to network more than two PCs you can do this using an additional HUB / Switch, HomePN (optional module, not included in standard supply scope of system), or a USB port.
LAN1 sets itself automatically (from10 Mbit/shalf-duplex upto 100 Mbit/s full duplex)to themaximum data trans
­fer rate of the remote location (PC).
These PCs are also part of your local network and can, for example, exchange files or take advantage of the Internet connections via therouter. AllLAN clients thatare linkedare integrated into the localnetwork viathe TCP/IP proto­col.
Further PCs can be linkedto your networkvia RAS- access. Here, the IP address isalways assigned by the telephone system, evenwhen theDHCP serveris de-activated.Under “Addressassignment” in the configurationprogram you can de-activate theDHCP serverandinput thestarting address forRAS. The following11 IPaddressesare thenauto­matically reserved for RAS.
Using the Remote Access Server(RAS) a field representative, for example, cancall intothe local network from anex­ternal location andthenvia the localnetworkaccess the Internet.Accessfroman external locationis only possiblevia an ISDN connection.Externalaccessis provided withuser-nameand password protection.Ifthe callismade from an external location only,the phonenumber can alsobe monitoredas an addedprotection feature.Note that thisaccess portal is not protected by a firewall!
Note Please note the further instructions given in the operator’s manual of the PABX system for connecting a pcs.
Which Internet connections are supported?
You can set up a connection to the Internet with your PABX system as follows:
·
Dial-up connectionsvia ISDN (using PPP protocol, with one or two ISDN Bchannels, i.e.at 64kbit/s or128 kbit/s). These types of connections require access datawith thenumber tobe dialed,the username and password and, insome cases, other information such as theIP addressof thename server and any information about the datacompression method that is used (VJH).
·
Using xDSL (for example ADSL - T-DSL) in conjunctionwith aDSL modemthat iscompatible withyour ISP viaPPPoE. These connections require your username andpassword asaccess data.
Router of the PABX elmeg T444 / elmeg T484 Introduction
1
·
Using xDSL (for example: SDSL) in conjunction with aDSL modemthat iscompatible withyour ISPwith a set, publicIP address. These connections requirethe publicIP addressthat youhave been assigned, the IP address of the next gateway (next hop) and theIP addressfor thename serverof your provider.
·
Tunneling. Here, data packets of one protocol are packedinto theshell ofa differentprotocol toroute them on tothe Internet. At the recipient the shellis thenremoved andthe datapacket routed on with the original protocol. This tunnelingis usedto overcomeincompatible networks,or when taking into consideration se
-
curity andcost aspects (for example PPTP).Normally, youonly needyour username and password as ac
­cess data. Indicate all the data that is alsospecified toyou byyour provider(for example,number, IP address and DNS server.
The ISP that you wish to use for your Internet connections is set in the configuration of the PABX system. You can configure upto 10 ISPs. You can then define further settingsfor eachISP, suchas username, password,phone num
­ber, etc.. Youcan alsodefine whether theconnection to theInternet isto be setup automatically (defaultsetting) and that the next ISP in your list is to be selected once the connection has been established (fall-back).
When the PABX system router receives the command to establish an Internet connection this connection is set up using the first ISP inyour list. Ifthe connection is set up successfully all of the clients in your network can access the Internet. If the Internet connection is no longer needed (inactivity) it is terminated after a defined time.
If an Internetconnectioncan not besetup usingtheselected ISP anattemptis madetoestablish the connectionusing the next ISP in your list (fall-back).
When anInternet connectionis terminated,the firstISP inthe listis usedwhen the next connection attempt is initi
­ally carried out.
Note For more information about configuring ISPs and establishing an internet connection, refer to the operator’s ma­nual of your PABX.
Note If “hubs” are installed in your network, for example,or if a connection to the Internet still exists, data packets may continue to be sent to the router and the connection can not be terminated.
Dial-in into the LAN (RAS)
Using the Remote Access Server(RAS) a field representative, for example, cancall intothe local network from anex
­ternal location andthen via thelocal network accessthe Internet. Accessfrom an externallocation is alsopossible via an ISDN connection. External access is provided with user-name and password protection. If the call is made from an external location only, the phone number can also be monitored as an added protection feature. Access can be enabled for up to 8 users. A Windows enable (access to computer, files or printers) andInternet enable can also be configured for each user.
APC thatdialsintothe local networkviaRAS is automaticallyassignedanIP address bytheintegrated DHCP server.
RAS Callback:
If you do not wantto becharged for connectionswithin yourcompany network you can configurethe RASconnecti
­on as an automatic call-back. For this, abrief connection is set up to the company network (for which you are char
­ged) that then initiates a call-back. The PABX system at your company then calls you back and you are not charged for the ensuing connection time. You can enter a number for the corresponding RAS connection in the configurati
­on. Automatic call-back is then only possible from this number. If you do not enter a number here, the automatic call-back can be made from any number.
Introduction Dial-in into the LAN (RAS)
2
DHCP server and IP address allocation
PCs can be provided with a major portion of the configuration required for LAN and Internet access via the DHCP (Dynamic Host Configuration Protocol). The DHCP server integrated into the PABX is capable of supplying corre
­sponding configurations to up to 100 PCs (clients). IP addresses aredynamically allocated to the clients. The DHCP server task of the PABX system is activated in the initial status of the PABX.
You can configure the integrated DHCP server under »Network address allocation«.
You can configurethe firstIP address assignedby theDHCP server.The required numberof IPaddresses is assigned to the PCs (DHCP clients) in ascending order. Eleven additionalIP addressesfor theDHCP serverare alwaysreserved forPCs thatare integratedthrough RAS(re
­mote access server)into the local network. Ifthe integrated DHCPserver isactivated the 11IP addresseswhich come after the configured DHCP address range are used for RAS clients. When theDHCP servers are de-activated the 11 IPaddresses thatcome after the set DHCP start addresswill be used for RAS clients.
Direct connection (DHCP)
This setting is used to utilize a direct WAN connection with automatic allocation of the IP addresses via DHCP. In this case theIPaddress is notassignedby your PABXsystemrouter, but bythenetwork in whichtherouter is integra
­ted. The router DHCP must be de-activated in the configuration for this.
Default setting of the PABX
Default IP addresses for the local area network
In its basic setting you can use your PABX system as a router for Internet access for your local network. You have to define (when configuring the PABX) the Internet service provider that you wish to use.
The IP addresses for your local area network are then distributed as follows:
192.168.1.1 to
192.168.1.49
Freely assignable IP addresses as for example for LAN clients with a fixed IP address
192. 168. 1.50to
192.168.1.69
IP addresses that are allocated to corresponding LAN clients by the PABX system. (Number of DHCP clients: 20)
192.168.1.70 to
192.168.1.80
Reserved IP-addresses (11) RAS. These addresses must always remain reserved and may not be assigned as set IP addresses.
192. 168. 1.81to
192.168.1.249
Freely assignable IP addresses as for example for LAN clients with a fixed IP address
192.168.1.250 IP address for the PABX
192.168.1.251 to
192.168.1.254
Freely assignable IP addresses as for example for LAN clients with a fixed IP address
Note Please note thateach IP addresscan onlybeassigned once.The first andlast IP addressfor a networkmay notbeas
-
signed to LAN clients. In this example: 192.168.1.0 and 192.168.1.255.
Example for the hint:
255.255.255.0
Subnet mask for all components on the network (PABX, LAN clients,.. . )
192.168.1.250 IP address for the gateway (PABX)
192.168.1.250
Direct connection (DHCP) Introduction
3
IP address for the DNS server (PABX). The PABX system also acts as a DNS proxy in place of the ISP DNS server.
What are IP addresses and subnetwork masks
With the initialsettingsIP addresses andsubnetworkmasks are alreadysetfor the PABXsystemrouter. Both ofthese values are each 4 bytes in length.
IPaddress:
192.168.1.250
Subnetmask: 255.255.255.0
The IP address is an address that is reserved for private local networks.
The subnetwork definesthat this isa Class Cnetwork in whichup to 254LAN clients canbe linked. Usingthe subnet
-
work mask an IP address can be divided into the network address and the host address (address of the PC).
Example with this PABX:
IPaddress of the PABX:
192.168.1.250
IPnetmask for the PABX:
255.255.255.0
Networkpart of the IPaddresses:
192.168.1.xxx
Hostpart of theaddress: x.x.x.250
Firstusable IPaddress:
192.168.1.1 (netmask: 255.255.255.0)
Lastusable IPaddress:
192. 168. 1. 254 (netmask: 255.255.255.0)
You can assignthe available IPaddressesto theindividual LAN clientsmanually,or havethemassigned bythePABX system via DHCP. No IP address may be used simultaneously by more than one client however. With regard to the example given abovethis meansthat the address192.168.1.250 maynot be allocatedagain, as itis alreadybeing used by the PABX system.
The networkpart ofthe IPaddress maynot bechanged, as otherwise the LAN clients would not all be located within the same IP network. APC withthe IP address 192.168.2. 1is locatedin adifferent network. APC fromthe PABXnet would not be able to locate this other PC if it is not within its own network. In addition, the same subnetwork mask must also be entered at all LAN clients located within the same network.
Router functions
Automatic Internet access, fallback
Several ISPs(ISP – Internet Service Provider) can be set upin thePABX. Connectivity to the Internetis providedvia the WAN port(e.g.DSL port),orvia an ISDNport.If required,connectionto the Internetcanbe set upautomatically. If your selected ISP is not available, the next ISP in the list will be selected automatically.
Short Hold
Short Holdmeans that the PABX system terminates theInternet connectionautomatically after a configurable time period when there is no exchange of data from/to the Internet (inactivity). You can set this time separately for each ISP that you have configured. This can result in increased connection costs with frequent, short excursions into the Internet, for example for pi
-
cking up e-mails, as the connection is always maintained for the duration of the set holding time.
Dynamic ISDN
Higher data transfer rates can also be achieved for Internet access via the ISDN connection by bundling the two B channels forthe connection. If an Internetconnection with channel bundling isactive and a B channelis needed for telephony or fax messages, oneB channel is disconnected from the Internet connection.On completion of the voice
Introduction Router functions
4
connection the Bchannel reverts automaticallyto usefor the Internetconnection. This functionis available forinco
­ming and outgoing voice links.
This performance feature requires thatthe ISDN SpeedManager be installed, or that Internet access ismade via the router! The Speed Manager is included in the T-Online installation.
Completion of call to busy subscriber:
You cannot bereached byan externaltelephone callwhen youare surfingthe Internetand areusing twoB channels for downloading.As signalingof afurther callis madevia theD channel,your telephonesystem has the capability of specifically de-activating oneBchannel (depending oncurrentsettings)so that youcantake a call.Youcandefine the following settings in the PC Configurator.
Rejecting a call:
The caller will hear the busy signal and both B channels remain active.
Internal MSN extension number:
One B channel is de-activated (the call briefly hears music on hold, see also Page ) and the call is signaled at the sub
­scriber entered under »Internal number«. This terminal device may not be located on the same ISDN bus or at the same USB port as the PC.
Forwarding (Call Deflection) to an external extension number :
One Bchannel isde-activated andthe callsignaled atthe subscriberentered under»External number«.You canalso have the call forwarded to an external subscriber by the exchange, allowing both B channels to remain active. Calls can also be transferred (for examplefor T-NetBox or cell phone) without aB channel of the telephone system being allocated.
Normal call distribution:
One B channelis de-activated andthe callsignaledat thesubscriber entered under»Call allocation« forthe »External number«.
Dynamic ISDN for all outgoing calls
You can not make anoutside call if you are surfing in the Internet while usingtwo B channels for downloading. Ho
­wever, depending onthe PCconfiguration, your telephonesystem doeshave the capabilityto specificallyde-activate one B channel so that you can make calls while connected to the Internet.
DHCP server
PCs can be provided with a major portion of the configuration required for LAN and Internet access via the DHCP (Dynamic Host Configuration Protocol). The DHCP server integrated into the PABX is capable of supplying corre
­sponding configurations to several PCs (LAN-clients). IP addresses are dynamically allocated to the clients. This mode is recommended to dispense with the complicated, manual configuration of the IP addresses for the PC that would otherwise be required.
DNS server
The DNS server(DomainName Server) hasthetaskof establishingnameswithina network. Inthisprocess the IPad
­dresses ofthe PCs(e.g. LANclients) aretransformed into names. You must therefore know the name, and not the IP address, of a PC thatyou wish to access, orare searching for. The DNSserver canalso establish namesthat are notin
­cluded in the local network.
DNS-Proxy
A proxy assumes a surrogate function for the local network (LAN) in a different / external network. Here, the DNS proxy accepts the name queries from the LAN client and submits them to the external network, e.g. Internet, as its
Router functions Introduction
5
own queries. Theproxy thentakes the responsefrom theexternal network andforwards itto the LANclient thatpla
­ced the originalquery. Inaddition, the resultfrom thequeryis storedfor a definedtime (configurable)to answer any subsequent queries of the same type.
Dynamic DNS
Using Dynamic DNS you can also offer your own Internet services (e.g. WEB, FTP or e-mail servers). Usually you must have a fixed line or a set IP address for this so that you can always be reached at the same URL (For example: www.Funkwerk-ec.com). You areassigned anew IPaddress bythe ISPeach timeyou dialin tothe Internethowever. UsingDynamic DNSyou can link thisautomatic(dynamic) IP addresswitha set name.The router willtheninform your DynamicDNS service provider (e.g. www.dyndns.org) automatically of the new IP address. Internet enquiries for your Web services are then automatically forwarded to your dynamic IP address via your service provider.
Using Dynamic DNS
·
Configure anInternet address (URL)at aDynamic DNSservice provider.For example,at “www.dyndns.org” configurethe address “www.my-homepage.dyndns.org”.
·
Configure theLAN client of the network in which you wishto offeryour Webservices witha setIP address. For example,let’s say we want to configure aWeb serverwith theIP address192.168.1.200.
·
Activate the Dynamic DNS function in the router andenter theInternet address(URL) for your Dynamic DNS provider(in theexample here www.dyndns.org). Add thenecessary filters in the firewall to allow the PC with the Web servicesto bereached froman external location.
- Configureport mappingfor Port 80 (HTTP protocol) to IP address 192.168.1.200.
- Configurethe filtersthat permit incoming and outgoing WAN connectionsat Port80.
·
The routerwill automatically inform your Dynamic DNS provider of your current dynamicIP addresseach time aconnection is set up with the Internet.The informationabout theIP addressis transferred after set­ting upa new Internet connection, aswell asduring anongoing Internetconnection.
·
A PCin the Internet enters theaddress (URL)“www.my-homepage.dyndns.org”. Inthis wayit reaches your DynamicDNS service provider. Your service provider reroutes the connectionto yourcurrent dynamic IPaddress.
·
Any incoming connection is handled in accordancewith theconfigured filters.In theexample givenhere the incomingWAN connection at port 80 is forwarded to theLAN clientwith theIP address192.168.1.200. The availableInternet sites of your Webserver aredisplayed onthe externalPC.
NAT
NAT (NetworkAdress Translation) protects the connected LAN-clients against attacks from the Internet. Here, the internal IP addressesarenotpassed on totheInternet. The routercarriesout the transfertotheInternet and distribu
­tes the incoming data packets in the internal system. This only requiresone external IPaddress. The internal IP ad
­dresses are protected from attacksfrom outside.The internal IPaddresses cannot be targetedby hackers,as these IP addresses are non-accessible.
Packet Filter Firewall
The integratedfilter firewallpacket alsoprovides youwith enhancedsecurity againstattacks fromthe Internet.A fi
­rewall acts as a logical wall for data packets between the Internet and the LAN which has »holes« for certain packets (firewall rules,also knownas filters),allowing thesepackets topass throughthe wall.The filtersare describedby ru
­les whose configurationrequires expert knowledgeaboutthe TCP/IPprotocolfamily. Thefirewall of yourPABXsys
­tem can be easily configured usinga Filter Wizard in which you need to indicate (in plain text) whether you wish to allow defined applications access to the Internet.
Introduction Router functions
6
Portmapping
You wishto accessyour PC from an externallocation viaInternet. Normally, access via the firewall shouldbe prohi
-
bited. When youuse port mapping,access to arouter port thatyou have enabledis permitted froman external locati
­on. Therouter then forwardsthe accessrequest to the defined port of thePC inthe network.A fixed IP-address must be assigned to this PC. When the PC returns data packets the IP address and port number of the PC are replaced by the routerwith the number for the port mapping port and the routerIP. For“outsiders” onthe Internetit then appe
­ars as though there is only one connection to the router.
Note Please note that when you use port mapping the firewall for the ports enabled for this function is ineffective. The target PC in your LAN may then be susceptible to any potential attacks.
Port mapping is practical when you wish to run a game server on your own, for example.
·
You canmake this server accessible viathe Internetto otherusers.
·
Or, ifyou requirecertain peer-to-peer file sharing software that provides greater download bandwidth.
·
When thecorresponding PC in your LAN is tobe accessiblefrom theInternet (notpossible in the standard configuration withNAT). In this case, certainUDP andTCP portsmust bererouted to a PC in the LAN.
RAS-Server
Using the Remote Access Server(RAS) a field representative, for example, cancall intothe local network from anex­ternal location andthen via thelocal network accessthe Internet. Accessfrom an externallocation is alsopossible via an ISDN connection.
External access is provided with user-name and password protection. If the call is made from an external location only, the phone number can also be monitored as an added protection feature. Access can be enabled for several users. A Windows enable (access to computer, files or printers) andInternet enable can also be configured for each user.
Note Note that this access portal is not protected by a firewall!
APC thatdialsintothe local networkviaRAS is automaticallyassignedanIP address bytheintegrated DHCP server.
Time-controlled router inhibition
With the aid of the calendar, or a manual function ofthe PABX system, you can set the time(s)of day whenInternet access is possible (permitted). These times are defined via the calendar assigned to the router in the configuration. Here, it is stipulated that Internet connections can not be set up during night-time operation. You should therefore set the switching times accordingly. Starting with Version 4 of system phones CS290/CS410, the telephones can be switched using function keys on the phone; this setting is then retained until the next calendar-based switchover.
LAN-CAPI
The package includes a program called »CAPI for LANs« for use in your network. This software can be installed on any PCin thenetwork. Thisgives youthe possibilityof runningyour CAPIapplication froma centrallocation viaan interface, i. e. the PABX system. There is no ISDN card required for the PCs. Please note that software used for the CAPI application may require certain license agreements with the software manufacturer. The program »CAPI in LAN« does not require a license to run.
Router functions Introduction
7
Loading...
+ 25 hidden pages