GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions

Cov ntaub ntawv khoom

• Hom Tshuaj: Grandstream Networks, Inc.
• Khoom Series: GCC6000 Series
• Nqe lus piav qhia: Advanced NAT Phau Ntawv Qhia

Specifications

• Txhawb Qhov Chaw NAT (SNAT) thiab Nthuav NAT (DNAT)
• Tso cai rau kev teeb tsa rau chaw nres nkoj xa mus thiab rov sau IP chaw nyob
• Tsim los rau GCC601x(W) convergence device

Cov lus qhia siv khoom

SNAT Configuration
SNAT tswj kev hloov pauv ntawm qhov chaw nyob IP thiab tus lej chaw nres nkoj thaum txuas los ntawm tus tswv tsev sab hauv mus rau tus tswv tsev sab nraud.

Configuring WAN 1

1. Nkag mus rau Firewall Module> Firewall Txoj Cai> Advanced NAT> SNAT.
2. Nyem rau ntawm khawm Ntxiv txhawm rau ntxiv txoj cai SNAT tshiab.
3. Qhib cov xwm txheej.
4. Teem tus txheej txheem rau Any.
5. Teem lub Source IP chaw nyob network rau LAN subnet ntawm lub neej ntawd VLAN.
6. Teem lub Rewrite Source IP chaw nyob rau Public IP chaw nyob muab los ntawm ISP 1.
7. Xaiv cov pab pawg lo lus uas peb sau rov qab qhov chaw nyob IP belongs rau (WAN 1 chaw nres nkoj).

Configuring WAN 2

1. Nkag mus rau Firewall Module> Firewall Txoj Cai> Advanced NAT> SNAT.
2. Nyem rau ntawm khawm Ntxiv txhawm rau ntxiv txoj cai SNAT tshiab.
3. Qhib cov xwm txheej.
4. Teem tus txheej txheem rau Any.
5. Teem lub Source IP chaw nyob network rau LAN subnet ntawm Lub Suab VLAN.
6. Teem lub Rewrite Source IP chaw nyob rau Public IP chaw nyob muab los ntawm ISP 2.
7. Xaiv cov pab pawg lo lus uas peb sau rov qab qhov chaw nyob IP belongs rau (WAN 2 chaw nres nkoj).

DNAT Configuration
DNAT tswj kev hloov pauv ntawm qhov chaw nyob IP chaw nyob thiab tus lej chaw nres nkoj thaum tau txais kev khiav tsheb los ntawm tus tswv tsev sab nraud mus rau tus tswv tsev ntiag tug.

Destination NAT Configuration
Ua ib lub zos web neeg rau zaub mov xa hauv koj LAN muaj rau cov neeg siv khoom sab nraud, ua raws li cov kauj ruam no:

1. Nkag mus rau DNAT teeb tsa.
2. Teem DNAT kom xa cov tsheb khiav hauv Is Taws Nem mus rau koj LAN siv qhov chaw nyob IP pej xeem.

GCC6000 Series - Advanced NAT Guide

Taw qhia

NAT (Network Address Translation) yog cov txheej txheem siv los ntawm router lossis cov cuab yeej zoo sib xws los txhais ib tus IP chaw nyob rau lwm qhov. Qhov kev txhais lus no yog ua los ntawm tus IP chaw nyob rau pej xeem IP chaw nyob thiab rov ua dua. Hauv phau ntawv qhia no, peb yuav teeb tsa NAT qib siab los tswj cov txheej txheem NAT rau qhov chaw thiab qhov chaw tsheb khiav. Peb yuav paub qhov txawv ntawm ob hom

• Neej:
  SNAT thiab DNAT. Cov txheej txheem no tso cai rau peb hloov pauv qhov chaw thiab qhov chaw IP thiab chaw nres nkoj tus lej, ua rau cov neeg siv nkag mus rau hauv internet
• SNAT:
  Source NAT tswj kev hloov pauv ntawm qhov chaw nyob IP thiab txheej 4 chaw nres nkoj tus lej thaum txuas los ntawm tus tswv tsev ntiag tug mus rau lwm tus tswv tsev (LAN rau hauv internet).
• DNAT:
  Destination NAT tswj kev hloov pauv ntawm qhov chaw IP chaw nyob thiab Txheej 4 chaw nres nkoj tus lej thaum tau txais kev khiav tsheb los ntawm tus tswv tsev sab nraud mus rau tus tswv tsev ntiag tug (internet rau LAN).

Ob qhov sib txawv ua haujlwm zoo ib yam nkaus tab sis feem ntau sib txawv ntawm txoj kev sib txuas tau tsim.

Hauv phau ntawv qhia no peb yuav taug kev los ntawm kev teeb tsa DNAT thiab SNAT ntawm GCC601x(W) convergence device.

SNAT Configuration

Peb yuav xav txog cov xwm txheej hauv qab no: xav txog GCC cov cuab yeej txuas nrog ob lub chaw muab kev pabcuam hauv is taws nem sib txawv los tsim kev sib txuas redundancy thiab kev daws teeb meem. Txhua qhov chaw nres nkoj WAN txuas nrog ISP sib txawv. Tam sim no, xav tias peb xav yuam kev khiav tsheb los ntawm lub neej ntawd VLAN siv chaw nres nkoj 1 (ISP 1) thiab tsheb khiav los ntawm lub suab VLAN (VLAN 20) siv chaw nres nkoj 2 (ISP 2). Qhov no tuaj yeem ua tiav los ntawm kev tsim NAT txoj cai.

Thov ua raws li cov kauj ruam hauv qab no:

Configuring WAN 1

1. Mus rau "Firewall Module → Firewall Policy → Advanced NAT → SNAT", tom qab ntawd nyem rau ntawm "Ntxiv" khawm ntxiv SNAT tshiab.
2. Qhib cov xwm txheej
3. Teem cov txheej txheem rau "Ib yam", qhov no txhais tau hais tias qhov NAT txoj cai yuav siv rau txhua lub tsheb los ntawm kev thauj mus los sib txawv (UDP, TCP, ..)
4. Teem lub Source IP chaw nyob network, qhov no yuav yog LAN subnet ntawm lub neej ntawd VLAN: 192.168.80.0/24
5. Teem lub Rewrite Source IP chaw nyob, qhov no yuav yog Public IP chaw nyob muab los ntawm ISP 1, uas peb yuav siv mus cuag hauv internet, qhov no yuav yog: 192.168.6.225
6. Nyob rau hauv pawg lo lus uas peb, xaiv cov hom phiaj pab pawg uas rov sau qhov chaw IP chaw nyob. Hauv peb cov ntaub ntawv, nws yog WAN 1 chaw nres nkoj siv ISP 1.

Nco tseg
Qhov chaw IP chaw nyob yuav siv tau los qhia meej lub cuab yeej uas cov tsheb yuav raug xa mus rau sab hauv

Configuring WAN 2

1. Mus rau "Firewall Module → Firewall Policy → Advanced NAT → SNAT", tom qab ntawd nyem rau ntawm "Ntxiv" khawm ntxiv SNAT tshiab.
2. Qhib cov xwm txheej
3. Teem cov txheej txheem rau "Ib yam", qhov no txhais tau hais tias qhov NAT txoj cai yuav siv rau txhua lub tsheb los ntawm kev thauj mus los sib txawv (UDP, TCP, ..)
4. Teem lub Source IP chaw nyob network, qhov no yuav yog LAN subnet ntawm Lub Suab VLAN: 192.168.20.0/24
5. Teem lub Rewrite Source IP chaw nyob, qhov no yuav yog Public IP chaw nyob muab los ntawm ISP 2, uas peb yuav siv mus cuag internet. qhov no yuav yog 192.168.6.229
6. Nyob rau hauv pab pawg neeg lo lus uas peb, xaiv cov hom phiaj pab pawg uas rov sau qhov chaw IP chaw nyob. Hauv peb cov ntaub ntawv, nws yog WAN 2 chaw nres nkoj siv ISP 2.

Pej xeem IP chaw nyob ntawm ob WAN tuaj yeem pom ntawm lub network module ntawm GCC ntaus ntawv, nyob rau hauv txoj kev Network
Chaw => WAN:

DNAT configuration

DNAT tuaj yeem ua tau zoo heev rau kev teeb tsa chaw nres nkoj xa mus, qhov sib txawv tsuas yog hauv DNAT, koj tsis tas yuav tsum qhia qhov chaw nres nkoj xa mus, nws yog ntau dua ntawm kev ua IP xa mus, los ntawm Is Taws Nem, mus rau LAN, peb yuav saib. ntawm no examphauv qab no kom meej meej:

Xav txog tias peb xav ua peb lub zos web neeg rau zaub mov xa tawm hauv peb LAN, muaj rau peb cov neeg siv khoom sab nraud LAN, tab sis peb tsis xav kom lawv paub tus IP chaw nyob ntawm peb lub zos. web server, es tsis txhob, peb xav kom lawv siv ib tug pej xeem IP chaw nyob rau hauv lub web server, peb tuaj yeem ncav cuag qhov siv DNAT, thiab ua raws li cov kauj ruam hauv qab no:

1. Mus rau "Firewall Module → Firewall Policy → Advanced NAT → DNAT", tom qab ntawd nyem rau ntawm "Ntxiv" khawm ntxiv DNAT tshiab.
2. Qhib txoj cai DNAT
3. Teem hom raws tu qauv rau "Ib yam", qhov no yuav suav nrog txhua hom kev thauj mus los raws txoj cai tuaj rau peb LAN.
4. Teem Pab Pawg Source rau WAN1, qhov no yog peb lub neej WAN
5. pab pawg lo lus uas peb yuav yog lub neej ntawd VLAN qhov twg hauv zos Web server txuas nrog
6. Rewrite lo lus uas peb IP Chaw nyob yuav yog tus IP chaw nyob ntawm tus kheej web server.

Cov txiaj ntsig yuav yog, thaum cov neeg siv xav nkag mus rau peb lub zos web neeg rau zaub mov, lawv tuaj yeem siv qhov chaw nyob IP uas tau hais tseg, tsis tas lawv paub peb tus neeg rau zaub mov ntiag tug IP chaw nyob.

NAT Reflection

NAT kev xav, tseem hu ua NAT loopback, tso cai rau cov neeg siv khoom hauv network nkag mus rau cov kev pabcuam uas tau tuav ntawm tib lub network hauv zos tab sis hais los ntawm pej xeem IP. Hauv peb qhov kev teeb tsa, peb siv DNAT (Ntawm NAT) tso cai rau cov neeg siv khoom sab nraud koj LAN nkag mus rau hauv ib cheeb tsam. web neeg rau zaub mov los ntawm daim ntawv qhia pej xeem IP rau ib tus kheej. NAT kev xav los ua si thaum cov khoom siv sab hauv ntawm tib LAN (xws li koj lub xov tooj IP lossis cov cuab yeej scanning) kuj yuav tsum nkag mus rau qhov no web server, tab sis koj xav kom lawv siv tib tus IP chaw nyob uas cov neeg siv sab nraud siv.
Nov yog qhov nws ua haujlwm:

• Tsis muaj NAT kev xav:
  Yog tias koj cov khoom siv sab hauv (piv txwv li, xov tooj) sim nkag mus rau web server siv nws tus IP pej xeem, qhov kev thov yuav nquag tawm mus rau hauv internet thiab rov qab mus rau LAN, uas tuaj yeem ua tsis tau lossis ua haujlwm qeeb yog tias lwm cov kev cai firewall raug siv.
• Nrog NAT kev xav:
  Lub router kuaj pom tias qhov kev thov yog los ntawm LAN tab sis raug xa mus rau pej xeem IP. Es tsis txhob routing cov tsheb khiav tawm sab nraud, nws qhia txog cov tsheb khiav sab hauv, ua rau kev sib txuas sai dua thiab hla cov phab ntsa sab nraud. Cov web server tseem pom cov tsheb khiav los ntawm LAN, txawm tias nws tau hais rau pej xeem IP.

Cov khoom siv txhawb nqa

Ntaus qauv

Firmware Yuav tsum tau

GCC 6010 W	1.0.1.7+
GCC6010	1.0.1.7+
GCC6011	1.0.1.7+

Xav tau kev pab?
Nrhiav tsis tau cov lus teb koj tab tom nrhiav? Tsis txhob txhawj peb nyob ntawm no los pab!
Hu rau kev txhawb nqa

Cov lus nug nquag

• Q: Qhov txawv ntawm SNAT thiab DNAT yog dab tsi?
  A: SNAT tswj kev hloov pauv ntawm qhov chaw nyob IP thiab tus lej chaw nres nkoj thaum txuas los ntawm tus tswv tsev sab hauv mus rau lwm tus tswv tsev, thaum DNAT tswj kev hloov pauv ntawm qhov chaw IP chaw nyob thiab tus lej chaw nres nkoj thaum tau txais kev khiav tsheb los ntawm tus tswv tsev sab nraud mus rau tus tswv tsev ntiag tug.
• Q: Kuv tuaj yeem teeb tsa SNAT rau ntau qhov kev pabcuam hauv internet li cas cov neeg muab kev pabcuam?
  A: Koj tuaj yeem teeb tsa SNAT rau ntau ISPs los ntawm kev teeb tsa cov cai raws li VLANs lossis tshwj xeeb LAN subnets, muab txhua tus mus rau qhov sib txawv WAN chaw nres nkoj txuas mus rau ISP tus IP chaw nyob.

Cov ntaub ntawv / Cov ntaub ntawv

	GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions [ua pdf] Cov neeg siv phau ntawv qhia GCC601x W, GCC6000 Series UC Plus Networking Convergence Solutions, GCC6000 Series, UC Plus Networking Convergence Solutions, Networking Convergence Solutions, Convergence Solutions, Solutions
	GRANDSTREAM GCC6000 Series UC Plus Networking Convergence [ua pdf] Cov neeg siv phau ntawv qhia GCC6000 Series UC Plus Networking Convergence, GCC6000 Series, UC Plus Networking Convergence, Networking, Convergence
	GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions [ua pdf] Cov neeg siv phau ntawv qhia GCC6000, GCC6000 Series UC Plus Networking Convergence Solutions, GCC6000 Series, UC Plus Networking Convergence Solutions, Networking Convergence Solutions, Convergence Solutions, Solutions

Cov ntaub ntawv

• Cov neeg siv phau ntawv