CTEK Z4200U SkyRouter - Manual (Page 32)

26 October 2012
28
Figure 21 - Routing and Forwarding
Block Inbound IP Traffic From Wireless Network – If set to Yes the router’s firewall is configured to block any inbound
originated (but not response) packets from the wireless network (WAN). This firewall is then selectively modified by the
forwarding entries defined through this screen. If this parameter is set to No, the router’s firewall is disabled.
Use NAT on all Ethernet traffic to wireless network – For normal operation this parameter should be set to “Yes”. In
some unique situations, you may connect the router to a network where you will be given public address to use on your
LAN’s Ethernet segment. In such cases, NAT should be turned off. NAT is currently required for operation on all US
networks such as Sprint, Verizon or AT&T. Typical environments where NAT would be turned off would be private
networks or some types of VPNs and in these cases, the network operator will most likely provide configuration
assistance.
Forward Inbound Port – This table allows WAN side packets addressed for specific IP ports to be routed to a specified
address on the LAN side.
Of Local Address – Used to specify the LAN side address of the routing operation. With the introduction of the Point-To-
Point protocol feature for the RS232 port the routing field edits have been relaxed to allow multiple Class C ranges of IP
addresses since the PPP connection will often be connecting into a different LAN segment. The user is cautioned to take
extra care to assure that the LAN side address specified is correct for the connection intended. As an example, if the
router's base address is set (in the Ethernet Interface screen) to 192.168.1.10 addresses in the range if 192.168.1.11 -
192.168.1.255 are assigned to the Ethernet connection. In this same example the serial/PPP network might reside on a
network addresses as 192.168.2.XXX.
TCP – Route TCP/IP traffic
UDP – Route UDP/IP traffic
Enable – Activate this routing setting
Advertise This Service – Display this named service for WAN users. An advertised service is available for access by any
user logged in to the SkyRouter. An example of advertising is shown below.