Chapter 4: Web Configuration
43
NAT - Virtual Servers
The Router implements NAT to let your entire local network appear as a single machine to the
Internet. The typical situation is that you have local servers for different services and you want to
make them publicly accessible. With NAT applied, it will translate the internal IP addresses of these
servers to a single IP address that is unique on the Internet. NAT function not only eliminates the
need for multiple public IP addresses but also provides a measure of security for your LAN.
When the router receives an incoming IP packet requesting for access to your local server, the router
will recognize the service type according to the port number in this packet (e.g., port 80 indicates
HTTP service and port 21 indicates FTP service). By specifying the port number, you tell the router
which service should be forwarded to the local IP address you specify.
After you setting the virtual server you should modify the filter rule whichever port and service you
set on virtual server. Because the firewall has protect the route by filter rule so that you should
update the filter rule after you set up virtual server.
Virtual Server allows you to make servers on your LAN accessible to Internet users. Normally,
Internet users would not be able to access a server on your LAN because:
Your server does not have a valid external IP Address.
Attempts to connect to devices on your LAN are blocked by the firewall in this device.
The Virtual Server feature solves these problems and allows Internet users to connect to your servers,
as illustrated below:
IP Address seen by Internet Users
Please note that, in the above picture, both Internet users are connecting to the same IP address, but
using different protocols.
To Internet users, all virtual servers on your LAN have the same IP Address. This IP Address is