|
True-IP DMZ Application.
Example 1 - WAN uses Static/DHCP IP address
Suppose Vigor 2104 uses static or DHCP IP address. A user behind the Vigor 2104 want to connect a L2TP over IPSec VPN
to the office. As the incompatibilities between NAT and IPSec, L2TP over IPSec VPN can pass through the NAT.(Suppose this
VPN client and VPN server don’t support NAT-Traversal) With the True-IP DMZ function, this PC can be assigned a public IP address. Then it can establish a L2TP over IPSec VPN.
Step 1 - Setup True IP DMZ host
The True_IP DMZ host must get its IP via DHCP client. The Vigor router will check the source MAC address of the DHCP requests to identify the True-IP DMZ. Here we take Windows XP for example. Select the TCP/IP protocol as shown below and click on 'properties' and then check that Obtain IP address & DNS Automatically are both selected :
Open the Command Prompt from Start > All Programs > Accessories and type the command ipconfig/all. Record the Physical Address 00-E0-4C-51-91-AA.
Note: You will find at present this PC has obtained an private IP address from Vigor 2104?s DHCP Server.(Set in Basic Setup > LAN TCP/IP and DHCP Setup)
Step 2 - Setup Vigor2104?s WAN connection
Enter Quick Setup > Internet Access Setup and click Static or Dynamic IP. Enable the Broadband Access. If you have a static IP address, click Specify an IP address. Then fill in that IP address, its subnet mask and gateway IP address. Remember to enter at least one DNS server IP address. If you use a dynamic IP address, just click Obtain an IP address automatically. Press OK and wait for the router to reboot.
Note: Don?t setup the WAN IP Alias. When the router is assigned with multiple WAN IPs, the True-IP DMZ function will be automatically switched off.
Step 3 - Setup True IP DMZ in Vigor2104
Enter Advanced Setup> NAT Setup and click DMZ Host Setup.
Select Active True IP from the pull-down menu.
Enter DMZ host?s MAC address.( 00-E0-4C-51-91-AA) .
Press OK and wait for the router to reboot.
Step 4 - Get the public IP
Open the Command Prompt, type the command ipconfig/release, then ipconfig/renew. You will find Vigor 2104 assigns the WAN IP and associate default gateway to the True-IP DMZ host. You may run ping to confirm if this PC can connect to the Internet.
|
|
|
Page last modified : 13 October 2008 |