GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions

Bayanin samfur

• Alamar: Girman kasuwa na Grandstream Networks, Inc.
• Jerin samfur: Saukewa: GCC6000
• Bayani: Babban Jagoran NAT

Ƙayyadaddun bayanai

• Yana goyan bayan Source NAT (SNAT) da Destination NAT (DNAT)
• Yana ba da damar daidaitawa don isar da tashar jiragen ruwa da sake rubuta adireshin IP
• An ƙirƙira don na'urar haɗin GCC601x(W).

Umarnin Amfani da samfur

Kanfigareshan SNAT
SNAT tana sarrafa canjin tushen adireshin IP da lambar tashar jiragen ruwa lokacin haɗawa daga mai masaukin baki zuwa mai masaukin waje.

Ana saita WAN 1

1. Kewaya zuwa Module na Firewall> Policy Firewall> Babba NAT> SNAT.
2. Danna maɓallin Ƙara don ƙara sabuwar dokar SNAT.
3. Kunna matsayi.
4. Saita yarjejeniya zuwa Kowa.
5. Saita cibiyar sadarwar IP ta tushen zuwa rukunin LAN na tsohuwar VLAN.
6. Saita adireshin IP na Sake rubutawa zuwa adireshin IP na Jama'a wanda ISP 1 ya bayar.
7. Zaɓi ƙungiyar manufa inda adireshin IP na tushen sake rubutawa ya kasance na (tashar WAN 1).

Ana saita WAN 2

1. Kewaya zuwa Module na Firewall> Policy Firewall> Babba NAT> SNAT.
2. Danna maɓallin Ƙara don ƙara sabuwar dokar SNAT.
3. Kunna matsayi.
4. Saita yarjejeniya zuwa Kowa.
5. Saita cibiyar sadarwa ta Tushen adireshin IP zuwa rukunin LAN na Muryar VLAN.
6. Saita adireshin IP na Sake rubutawa zuwa adireshin IP na Jama'a wanda ISP 2 ya bayar.
7. Zaɓi ƙungiyar manufa inda adireshin IP na tushen sake rubutawa ya kasance na (tashar WAN 2).

Tsarin DNAT
DNAT yana sarrafa canjin adireshin IP da lambar tashar tashar jiragen ruwa lokacin karɓar zirga-zirga daga mai masaukin baki zuwa mai zaman kansa.

Manufa NAT Kanfigareshan
Don yin na gida web uwar garken da aka tura a cikin LAN ɗin ku akwai abokan ciniki daga waje, bi waɗannan matakan:

1. Kewaya zuwa saitunan DNAT.
2. Saita DNAT don tura zirga-zirga daga intanit zuwa LAN ɗin ku ta amfani da adireshin IP na jama'a.

GCC6000 Series - Babban Jagoran NAT

Gabatarwa

NAT (Network Address Translation) shine tsarin da na'ura mai ba da hanya tsakanin hanyoyin sadarwa ko makamantansu ke amfani da shi don fassara adireshin IP ɗaya zuwa wani. Ana yin wannan fassarar daga adireshin IP mai zaman kansa zuwa adireshin IP na jama'a kuma akasin haka. A cikin wannan jagorar, za mu saita saitunan NAT masu ci gaba don sarrafa tsarin NAT don zirga-zirgar tushe da wurin zuwa. Za mu bambanta tsakanin nau'i biyu na

• NAT:
  SNAT da DNAT. Waɗannan hanyoyin suna ba mu damar canza tushen da inda ake nufi da IP da lambobin tashar jiragen ruwa, suna ba masu amfani damar shiga intanet
• SNAT:
  Tushen NAT yana sarrafa canjin adireshin IP na tushen da lambar tashar tashar jiragen ruwa 4 lokacin haɗawa daga mai masaukin mai zaman kansa na ciki zuwa mai masaukin waje (LAN zuwa intanit).
• DNAT:
  Manufa NAT tana sarrafa canjin adireshin IP na manufa da lambar tashar tashar Layer 4 lokacin karɓar zirga-zirga daga mai masaukin baki zuwa mai zaman kansa (internet zuwa LAN).

Duk bambance-bambancen biyu suna aiki iri ɗaya amma gabaɗaya sun bambanta ta yadda ake kafa haɗi.

A cikin wannan jagorar za mu yi tafiya ta hanyar daidaita DNAT da SNAT akan na'urar haɗin GCC601x(W).

Kanfigareshan SNAT

Za mu yi la'akari da yanayin mai zuwa: yi tunanin cewa na'urar GCC ta haɗa zuwa masu samar da sabis na intanit daban-daban guda biyu don ƙirƙirar haɗin haɗin gwiwa da warware matsalar rashin nasara. Kowace tashar WAN tana haɗe zuwa ISP daban. Yanzu, a ce muna son tilasta zirga-zirga da aka fara daga tsohuwar VLAN don amfani da tashar jiragen ruwa 1 (ISP 1) da zirga-zirga daga muryar VLAN (VLAN 20) don amfani da tashar jiragen ruwa 2 (ISP 2). Ana iya samun wannan ta hanyar ƙirƙirar ka'idodin NAT na tushen.

Da fatan za a bi matakan da ke ƙasa:

Ana saita WAN 1

1. Kewaya zuwa "Module Firewall → Manufar Firewall → Advanced NAT → SNAT", sannan danna maɓallin "Ƙara" don ƙara sabon SNAT.
2. Kunna matsayi
3. Saita yarjejeniya zuwa "Kowa", wannan yana nufin cewa tushen tsarin NAT zai shafi duk zirga-zirgar da ke fitowa daga ka'idojin sufuri daban-daban (UDP, TCP, ...)
4. Saita cibiyar sadarwar IP ta tushen, wannan zai zama LAN subnet na tsoho VLAN: 192.168.80.0/24
5. Saita adireshin IP na Rewrite Source, wannan shine adireshin IP na Jama'a wanda ISP 1 ya bayar, wanda za mu yi amfani da shi don shiga intanet, wannan shine: 192.168.6.225
6. Ƙarƙashin ƙungiyar da aka nufa, zaɓi ƙungiyar alkibla inda adireshin IP na tushen sake rubutawa yake. A cikin yanayinmu, tashar WAN 1 ce ta amfani da ISP 1.

Lura
Ana iya amfani da adireshin IP ɗin da aka nufa don tantance ainihin na'urar inda za a tura zirga-zirgar zuwa ciki

Ana saita WAN 2

1. Kewaya zuwa "Module Firewall → Manufar Firewall → Advanced NAT → SNAT", sannan danna maɓallin "Ƙara" don ƙara sabon SNAT.
2. Kunna matsayi
3. Saita yarjejeniya zuwa "Kowa", wannan yana nufin cewa tushen tsarin NAT zai shafi duk zirga-zirgar da ke fitowa daga ka'idojin sufuri daban-daban (UDP, TCP, ...)
4. Saita cibiyar sadarwar IP ta tushen, wannan zai zama LAN subnet na Muryar VLAN: 192.168.20.0/24
5. Saita adireshin IP na Rewrite Source, wannan shine adireshin IP na Jama'a wanda ISP 2 ya bayar, wanda zamu yi amfani da shi don isa ga intanet. Wannan zai zama 192.168.6.229
6. Ƙarƙashin ƙungiyar alkibla, zaɓi ƙungiyar alkibla inda adireshin IP na tushen sake rubutawa yake. A cikin yanayinmu, tashar WAN 2 ce ta amfani da ISP 2.

Ana iya samun adiresoshin IP na Jama'a na WAN biyu akan tsarin hanyar sadarwa na na'urar GCC, ƙarƙashin hanyar Network
Saituna => WAN:

Tsarin DNAT

DNAT na iya zama mai kama da daidaita jigilar tashar jiragen ruwa, kawai bambanci, shi ne cewa a cikin DNAT, ba a wajabta ku ƙayyade tashar tashar jiragen ruwa don turawa, ya fi yin isar da IP, daga intanet, zuwa LAN, za mu kalli wannan tsohon.ampa kasa don fayyace:

Yi la'akari da cewa muna so mu yi na gida web uwar garken da aka tura a cikin LAN ɗinmu, akwai ga abokan cinikinmu daga wajen LAN, amma ba ma son su san adireshin IP mai zaman kansa na yankinmu. web uwar garken, maimakon haka, muna son su yi amfani da adireshin IP na jama'a don samun damar shiga web uwar garken, za mu iya cimma hakan ta amfani da DNAT, kuma ta bin matakan da ke ƙasa:

1. Kewaya zuwa "Module Firewall → Manufar Firewall → Advanced NAT → DNAT", sannan danna maɓallin "Ƙara" don ƙara sabon DNAT.
2. Kunna tsarin DNAT
3. Saita nau'in yarjejeniya zuwa "Kowa", wannan zai haɗa da kowane nau'in ka'idar jigilar ababen hawa da ke zuwa LAN ɗin mu.
4. Saita rukunin tushen zuwa WAN1, wannan shine tsohowar WAN
5. rukunin alƙawarin zai zama tsoho VLAN inda na gida Web an haɗa uwar garken
6. Adireshin IP ɗin sake rubutawa zai zama adireshin IP mai zaman kansa na web uwar garken.

Sakamakon zai kasance, cewa lokacin da masu amfani ke son shiga cikin gida web uwar garken, za su iya amfani da ma'anar adireshin IP na jama'a, ba tare da sanin adireshin IP na sirri na uwar garken mu ba.

Tunani na NAT

Tunanin NAT, wanda kuma aka sani da NAT loopback, yana ba abokan ciniki na cibiyar sadarwa damar samun damar ayyukan da aka gudanar akan cibiyar sadarwar gida ɗaya amma IP na jama'a ke magana. A cikin tsarin mu, muna amfani da DNAT (Destination NAT) don ƙyale abokan ciniki daga wajen LAN ɗin ku don samun damar shiga gida. web uwar garken ta taswirar IP na jama'a zuwa na sirri. Tunanin NAT yana shiga cikin wasa lokacin da na'urorin ciki akan LAN guda ɗaya (kamar wayoyin IP ɗinku ko kayan aikin dubawa) suma suna buƙatar samun damar wannan. web uwar garken, amma kuna son su yi amfani da adireshin IP iri ɗaya na jama'a waɗanda masu amfani da waje ke amfani da su.
Ga yadda yake aiki:

• Ba tare da tunanin NAT ba:
  Idan na'urorinku na ciki (misali, wayoyi) kuyi ƙoƙarin samun dama ga web uwar garken ta amfani da IP na jama'a, buƙatar yawanci za ta fita zuwa intanet kuma ta koma LAN, wanda zai iya kasawa ko rage abubuwa idan an yi amfani da wasu ka'idojin Firewall.
• Tare da NAT tunani:
  Na'ura mai ba da hanya tsakanin hanyoyin sadarwa tana gano cewa buƙatar ta fito daga LAN amma ana magana da ita ga IP na jama'a. Maimakon tafiyar da zirga-zirgar ababen hawa a waje, yana nuna zirga-zirgar ababen hawa a ciki, yana sa haɗin kai cikin sauri kuma yana ƙetare shingen wuta na waje. The web uwar garken har yanzu yana ganin zirga-zirgar zirga-zirgar kamar ta fito ne daga LAN, duk da cewa an tura shi zuwa ga jama'a IP.

Na'urori masu tallafi

Samfurin Na'ura

Firmware Da ake bukata

Saukewa: GCC6010W	1.0.1.7+
Saukewa: GCC6010	1.0.1.7+
Saukewa: GCC6011	1.0.1.7+

Bukatar Tallafi?
Ba za a iya samun amsar da kuke nema ba? Kada ku damu muna nan don taimakawa!
TALLAFIN TUNTUBE

Tambayoyin da ake yawan yi

• Tambaya: Menene bambanci tsakanin SNAT da DNAT?
  A: SNAT tana sarrafa canjin adireshin IP na tushen da lambar tashar tashar jiragen ruwa lokacin da ake haɗawa daga mai masaukin gida zuwa mai watsa shiri na waje, yayin da DNAT ke sarrafa canjin adireshin IP na manufa da lambar tashar tashar jiragen ruwa lokacin karɓar zirga-zirga daga mai masaukin waje zuwa mai zaman kansa.
• Tambaya: Ta yaya zan iya saita SNAT don sabis na intanet da yawa masu bayarwa?
  A: Kuna iya saita SNAT don ISPs da yawa ta hanyar kafa dokoki bisa VLANs ko takamaiman LAN subnets, sanya kowane ɗayan zuwa tashar WAN daban-daban da ke da alaƙa da adireshin IP na jama'a na ISP.

Takardu / Albarkatu

	GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions [pdf] Jagorar mai amfani GCC601x W, GCC6000 Series UC Plus Networking Convergence Solutions, GCC6000 Series.
	GRANDSTREAM GCC6000 Series UC Plus Haɗin Sadarwar Sadarwar [pdf] Jagorar mai amfani GCC6000 Series UC Plus Networking Convergence, GCC6000 Series, UC Plus Networking Convergence, Networking, Convergence
	GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions [pdf] Jagorar mai amfani GCC6000, GCC6000 Series UC Plus Networking Convergence Solutions, GCC6000 Series, UC Plus Networking Convergence Solutions, Networking Convergence Magani

Magana

• Manual mai amfani