3Com 3CR856-95 Network Router User Manual


 
51
Figure 49 Custom Special Applications Setup Screen
Application Name — Each special application is named and
will detect the ports that need to be opened so you do not
need to specify them. This name is not used by the Gateway
and is only to enable you to identify the connection.
Trigger Port — This is the TCP/IP port number that the
Gateway uses to recognize the outgoing packet that starts
special application session. Your application provider can
provide you with this information.
The Gateway allows Trigger Ports that are a single value or a
range of values but not a list. So ‘6599’ and ‘6577-6587’ are
both valid but ‘6577, 6579, 6582’ is not.
Specify Protocol — Select the protocol (TCP or UDP) that your
special application uses. Your application provider can provide
you with this information.
Multiple Hosts Allowed — If your application provider uses
more that one IP address during a session or responds from
an address different to the one you use to start the special
application then you must ensure that the Multiple Hosts
Allowed box is checked. Otherwise leave it clear. Your
application provider can provide you with this information.
CAUTION: Selecting Multiple Hosts Allowed weakens the
security that your Gateway’s firewall is able to provide and
should only be used if the special application requires it.
Timeout — Enter the number of seconds the Gateway should
wait for the first reply from the special application server
before it abandons the connection.
The default Timeout is three seconds. If you find that
connections are being dropped enter a higher value.
Session Chaining — Some special applications need to take
control of a session. If the special application you wish to run
requires this ensure that Session Chaining is enabled
otherwise ensure that it is disabled.
CAUTION: Allowing Session Chaining weakens the security that
your Gateway’s firewall is able to provide and should only be
used if the special application requires it.
Address Translation Type — If your special application provider
embeds IP addresses in TCP or UDP packets you will have to
enable address translation on the appropriate protocol type.
Your application provider can provide you with this
information.
When you have configured your special application click Add to
save your changes or Close to quit without making any changes.
dua08 569-5aaa02.book Pag e 51 Thursday , Novem ber 7 , 2002 3:09 PM