HP X Unified Security Platform Series Manual de usuario descargar pdf (Pagina 100)

Chapter 4 Firewall

84 X Family LSM User’s Guide V 2.5.1

Configuring Virtual Servers

For device maximum configurable values, see “Appendix D‚ “Device Maximum Values”. The following

information applies to Virtual Server configuration:

• Virtual Server traffic is subject to firewall rules. You must set up a firewall rule to allow the traffic for

the desired services through the device firewall. To allow incoming traffic, use the IP address, or the

zone containing the IP address of the LAN device as the destination address of the firewall rule.

• When a Virtual Server is created for all services on the external IP interface of the device, all incoming

sessions, not otherwise intercepted as other private LAN servers for other services, are directed to the

server’s IP address. This configuration will result in loss of management access to the device from the

WA N .

Virtual Servers Configuration Parameters

The following table describes the configuration parameters for Virtual Servers.

Table 4–6: Virtual Servers Configuration Parameters

Column Description

Service The name of the Services or Service Group that are allowed to run on the Virtual

Server.

Local IP The IP address of the server on the LAN to which the Virtual Server is

redirecting traffic. Through one-to-one NAT or PAT, accesses to the public IP

address will be changed to accesses to the Local IP address/Port.

Public IP

Address

The IP address for users to access the service or group of services, that is, the

Virtual Server IP address:

•Select Use external IP interface address to use the external IP interface

address for the device

•Select IP address and then type an IP address that is part of the device’s WAN

IP subnet, but different from the one the device is currently using.

PAT

Local Port

Check PAT to enable Port Address Translation. Then, specify a local port number

to map a service to a different local port.

Normally, the Service would use its default port number, but PAT or NAPT

(Network Address Port Translation) performed by the device allows a user to

translate this to a different port number. This would allow, for example, the LAN

server to run multiple instances of a Web server.

Function(s) The functions available for the Virtual Servers:

• Edit a the configuration for a Virtual Server. (Click the linked Virtual Server

name to edit the schedule).

• Delete a Virtual Server.

1 2 ... 95 96 97 98 99 100 101 102 103 104 105 ... 332 333

Sin comentarios

HP X Unified Security Platform Series Manual de usuario Pagina 100