Netgear fr314 参照ガイド
Reference Guide for the Model FR314, FR318 and FV318 Cable/DSL Firewall and VPN Routers
7-4
Network Access Rules
Creating a Public LAN Server (Port Forwarding)
A Public LAN Server is a server on your LAN that is accessible to users on the Internet. Creating a
Public LAN Server in the Services window is the easiest way to set up a mail server, Web server,
or other public server, on your LAN.
Public LAN Server in the Services window is the easiest way to set up a mail server, Web server,
or other public server, on your LAN.
To create a Public LAN Server:
1.
Determine what type of service your server uses, such as FTP, Web, or Mail. Locate this
service in the Services window. If the service does not appear in the Services window, you
need to define it in the Add Service window (see “
service in the Services window. If the service does not appear in the Services window, you
need to define it in the Add Service window (see “
,” next).
2.
Enter the server's IP address in the Public LAN Server box for the appropriate service.
Note:
If NAT is enabled, this IP address should be a private LAN address. Users on the
Internet will access the Public LAN Server at the WAN IP (NAT Public) Address.
You do not need to select the LAN In checkbox (for NAT Disabled Addressing Mode) to
allow inbound access to a Public LAN Server.
allow inbound access to a Public LAN Server.
3.
Click Update.
After the firewall router is updated, a message confirming the update is displayed at the
bottom of the window.
bottom of the window.
To configure additional Public LAN Servers, repeat these steps.
Notes on DMZ or Bastion Host
Some routers allow the user to specify one server on the local network to receive all inbound
traffic that is not otherwise forwarded. This feature is referred to as Default Server, DMZ (a
misnomer in this application), or Bastion Host. By indiscriminately exposing all ports of the
designated PC, the user defeats the purpose of a hardware firewall and creates a large security risk.
Therefore this feature is not supported in this product. We recommend that the user determine
which ports are used by network applications, and only forward those ports that are necessary.
traffic that is not otherwise forwarded. This feature is referred to as Default Server, DMZ (a
misnomer in this application), or Bastion Host. By indiscriminately exposing all ports of the
designated PC, the user defeats the purpose of a hardware firewall and creates a large security risk.
Therefore this feature is not supported in this product. We recommend that the user determine
which ports are used by network applications, and only forward those ports that are necessary.
Additional Notes
• In NAT Disabled Network Addressing Mode, users on the Internet will access Public LAN
Servers at their valid, LAN IP addresses.
Servers at their valid, LAN IP addresses.
• If NAT is enabled, users on the Internet will access Public LAN Servers at the WAN IP (NAT
Public) Address.
Public) Address.