Support faq390 | Network Forwarding & IP Masquerading

Opengear console servers with Version 3.3 firmware (and beyond) have routing, NAT (Network Address Translation), port filtering and port forwarding support.

Network forwarding allows the network packets on one network interface (i.e. LAN1/ eth0) to be forwarded to another network interface (i.e. LAN2/eth1 or dial-out/cellular). So locally networked devices can IP connect through the console server to devices on remote networks.

IP masquerading is used to allow all the devices on your local private network to hide behind and share the one public IP address when connecting to a public network. This type of translation is only used for connections originating within the private network destined for the outside public network, and each outbound connection is maintained by using a different source IP port number.

Configuring network forwarding

By default, all console server models are configured so that they will not route traffic between networks. To use the console server as an Internet or external network gateway, forwarding must be enabled so that traffic can be routed from the internal network to the Internet/external network:

Navigate to System: Firewall and click on the Forwarding & Masquerading tab
Find the Source Network to be routed, and tick the relevant Destination Network to enable Forwarding

For example to configure a single Ethernet device such as an ACM5004-G as a cellular router, the Source Network would the Network Interface and the Destination Network would be Dialout/Cellular

Configuring your ACM5004-G

Configuring IP masquerading

IP Masquerading is generally required if the console server will be routing to the Internet, or if the external network being routed to does not have routing information about the internal network behind the console server.

IP Masquerading performs Source Network Address Translation (SNAT) on outgoing packets, to make them appear like they've come from the console server (rather than devices on the internal network). When response packets come back devices on the external network, the console server will translate the packet address back to the internal IP, so that it is routed correctly. This allows the console server to provide full outgoing connectivity for internal devices using a single IP Address on the external network.

By default IP Masquerading is disabled for all networks. To enable masquerading:

Select Forwarding & Masquerading panel on the System: Firewall menu
Check Enable IP Masquerading (SNAT) on the network interfaces where masquerading is be enabled

Generally this masquerading would be applied to any interface that is connecting with a public network such as the Internet. So for the ACM5004-G cellular router IP Masquerading would be applied to Dialout/Cellular.

Solutions Product Overview Solutions Overview How to Buy	About Us Corporate In the Media Press Releases Contact Us	Resources Twitter YouTube Videos Resource Library	Support Technical Support Knowledge Base Cabling & Adapters Contact Us
© Opengear 2011 \| Privacy Policy