<!DOCTYPE html
SYSTEM "about:legacy-compat">
<html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta charset="UTF-8"><meta name="copyright" content="(C) Copyright 2022"><meta name="DC.rights.owner" content="(C) Copyright 2022"><meta name="DC.type" content="concept"><meta name="description" content="This use case describes the configuration of an office where the Mediatrix unit is located directly on the internet and there are other devices in the LAN needing to access the internet."><meta name="prodname" content="All Mediatrix Units"><meta name="version" content="DGW 4849.50.27182809"><meta name="platform" content=""><meta name="DC.date.modified" content="2022-0511-0410"><meta name="DC.date.issued" content="2022-0511-0410"><meta name="DC.date.available" content="2022-0511-0410"><meta name="ChapterNumbering" content="yes"><meta name="DC.format" content="HTML5"><meta name="DC.identifier" content="concept_h1m_1kh_xhb"><link href="https://fonts.googleapis.com/css?family=Open+Sans" rel="stylesheet"><link rel="stylesheet" type="text/css" href="https://documentation.media5corp.com/download/attachments/45482024/commonltr.css"><link rel="stylesheet" type="text/css" href="https://documentation.media5corp.com/download/attachments/45482024/custom.css"><title>Configuring a Mediatrix unit as a NAT and Firewall between the LAN and the Internet</title></head><body><header role="banner"><div class="topicmeta title">Configuring a Mediatrix unit as a NAT and Firewall between the LAN and the Internet</div><div class="topicmeta date">2022-0511-04<10</div><div class="topicmeta product">All Mediatrix Units</div><div class="topicmeta version">DGW 4849.50.2718<2809</div><div class="topicmeta pdf"><a href="https://documentation.media5corp.com/download/attachments/45482024/Configuring%20a%20Mediatrix%20Unit%20as%20a%20NAT%20and%20Firewall%20Between%20the%20LAN%20and%20the%20Internet.pdf" rel="nofollow">Download PDF Document</a></div><hr><span style="float: inline-end;"></span></header><nav role="toc"><ul><li><a href="#concept_h1m_1kh_xhb">Configuring a Mediatrix Unit as a NAT/Firewall Between the LAN and the Internet</a></li><li><a href="#reference_o3x_5cp_k5">Information to Know Before Starting </a></li><li><a href="#reference_a3c_lt3_xhb">Important-Enabling Access of Other Devices through NAT</a></li><li><a href="#topic_title_Getting_Started_d1e17">Getting Started</a><ul><li><a href="#task_ifw_qpc_zp">Logging on to the Mediatrix Unit Web Interface</a></li><li><a href="#task_vxr_d1m_s5">Changing the Login Password </a></li><li><a href="#task_i1q_2pm_ts">Securing SNMP Interface</a></li><li><a href="#task_qdd_jmd_s5">Configuring the Uplink Network Interface to a static IP address</a></li><li><a href="#task_g1k_xml_j5">Configuring the Domain Name Server (DNS)</a></li><li><a href="#task_ofy_g2q_5q">Configuring the SNTP Server to a Static IP Address</a></li><li><a href="#task_jyt_jw5_bhb">Enabling the NAT Service</a></li><li><a href="#task_bn5_rs5_ngb">Enabling IPv4 Forwarding</a></li><li><a href="#task_wx2_h53_xhb">Adding a NAT Rule to Allow the Devices Connect Directly to the Mediatrix Unit</a></li><li><a href="#task_aqj_c3x_23b">Adding a NAT Rule to Allow the LAN Devices Connect to the Internet</a></li><li><a href="#task_drs_vz3_xhb">Configuring your LAN Devices to Access Internet Through the Mediatrix Unit</a></li><li><a href="#task_vjf_fk1_yr">Performing a Configuration Backup to the Unit File Management System</a></li></ul></li><li><a href="#topic_title_Optional_Port_Forwarding_d1e31">Optional Port Forwarding</a><ul><li><a href="#concept_dkr_wbj_xhb">Port Forwarding</a></li><li><a href="#task_gq5_xsv_rs">Setting Port Forwarding</a></li></ul></li><li><a href="#topic_title_Optional_Local_Firewal_Configuration_d1e34">Optional Local Firewal Configuration</a><ul><li><a href="#concept_rzz_fhj_xhb">Local Firewall Configuration and Activation</a></li><li><a href="#task_x4z_y3j_xhb">Allocating Port Range 1 to 5000 to LAN Only</a></li></ul></li><li><a href="#reference_u4w_px4_xhb">Documentation </a></li><li><a href="#concept_fqm_rv4_k4">Copyright Notice</a></li></ul></nav><main role="main"><article role="article" aria-labelledby="ariaid-title1"><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="nested0" aria-labelledby="ariaid-title1" id="concept_h1m_1kh_xhb">
<h1 class="title topictitle1" id="ariaid-title1">Configuring a Mediatrix Unit as a NAT/Firewall Between the LAN and the Internet</h1>
<div class="body conbody"><p class="shortdesc">This use case describes the configuration of an office where the Mediatrix unit is
located directly on the internet and there are other devices in the LAN needing to access the
internet. </p>
<p class="p">These configuration notes are specially designed for the Mediatrix G7 and S7 Series as well as
for the Sentinel 100 and 400 units, which feature Gigabit Ethernet interfaces and a built-in
4-port Ethernet switch.</p>
<p class="p">This diagram represents a network configuration in which the Mediatrix unit is connected to
both Internet (i.e. WAN) and other devices in the local network (i.e. LAN).</p>
<div class="p">
<br><img class="image" id="concept_h1m_1kh_xhb__image_gnb_qd3_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/MediatrixPortForwarding.png" width="800"><br>
</div>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic reference nested0" aria-labelledby="ariaid-title2" id="reference_o3x_5cp_k5">
<h1 class="title topictitle1" id="ariaid-title2">Information to Know Before Starting </h1>
<div class="body refbody"><p class="shortdesc"><span class="keyword wintitle">Before starting to use these configuration
notes, complete the following table to make sure you have the required information
to complete the different steps.</span></p>
<section class="section">
<div class="note important note_important"><span class="note__title">IMPORTANT:</span> <span class="ph">If you are not familiar with the meaning of the fields and
buttons, click <span class="keyword wintitle">Show Help</span>, located at the upper right corner of
the Web page. When activated, the fields and buttons that offer online help will
change to green and if you hover over them, the description will bedisplayed.</span></div>
</section>
<section class="section">
<div class="note note note_note"><span class="note__title">Note:</span> <span class="ph">The Mediatrix unit must be reinitialised to its factory default settings to make sure the configuration can be successfully executed.</span></div>
</section>
<table class="table frame-all" id="reference_o3x_5cp_k5__table_kkj_cdp_k5"><caption></caption><colgroup><col style="width:33.33333333333333%"><col style="width:33.33333333333333%"><col style="width:33.33333333333333%"></colgroup><thead class="thead">
<tr class="row">
<th class="entry colsep-1 rowsep-1" id="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__1">Information</th>
<th class="entry colsep-1 rowsep-1" id="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__2">Value</th>
<th class="entry colsep-1 rowsep-1" id="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__3">Used in Step</th>
</tr>
</thead><tbody class="tbody">
<tr class="row">
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__1">The IP address to access the management interface of your Mediatrix unit.</td>
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__2">
<div class="p">By default <ul class="ul" id="reference_o3x_5cp_k5__ul_gsj_w3p_c3b">
<li class="li">the LAN interface (eth2 on most Mediatrix units) is set with the IP
192.168.0.10/24</li>
<li class="li">the WAN interface is configured for an automatic IPv4 assignation through
DHCP.</li>
</ul></div>
</td>
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__3"><a class="xref" href="#task_ifw_qpc_zp">Logging on to the Mediatrix Unit Web Interface</a></td>
</tr>
<tr class="row">
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__1">Internet connection details:<ul class="ul" id="reference_o3x_5cp_k5__ul_pfz_3fp_k5">
<li class="li">Connection type (Static, DHCP/PPPoE)</li>
<li class="li">If Static IP:<ul class="ul" id="reference_o3x_5cp_k5__ul_xyr_323_xhb">
<li class="li">Static internet IP address</li>
<li class="li">Default Router IP address</li>
</ul></li>
<li class="li">If PPPoE: <ul class="ul" id="reference_o3x_5cp_k5__ul_m4b_ycw_23b">
<li class="li">PPPoE service name</li>
<li class="li">PPPoE user name and password</li>
</ul></li>
</ul></td>
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__2"> </td>
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__3"><a class="xref" href="#task_qdd_jmd_s5">Configuring the Uplink Network Interface to a static IP address</a></td>
</tr>
<tr class="row">
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__1">IP address of each DNS server </td>
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__2"></td>
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__3"><a class="xref" href="#task_g1k_xml_j5">Configuring the Domain Name Server (DNS)</a>
</td>
</tr>
<tr class="row">
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__1">IP address of each SNTP server (optional)</td>
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__2"></td>
<td class="entry colsep-1 rowsep-1" headers="reference_o3x_5cp_k5__table_kkj_cdp_k5__entry__3"><a class="xref" href="#task_ofy_g2q_5q">Configuring the SNTP Server to a Static IP Address</a></td>
</tr>
</tbody></table>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic reference nested0" aria-labelledby="ariaid-title3" id="reference_a3c_lt3_xhb">
<h1 class="title topictitle1" id="ariaid-title3">Important-Enabling Access of Other Devices through NAT</h1>
<div class="body refbody"><p class="shortdesc">When setting the Source Address, the Destination Address, and the New Address, make
sure you type them exactly as shown:</p>
<section class="section">
<ul class="ul" id="reference_a3c_lt3_xhb__ul_j5v_5t3_xhb">
<li class="li">They are case sensitive (the first letter must be uppercase).</li>
<li class="li">For the <span class="keyword wintitle">Source Address</span> and
<span class="keyword wintitle">Destination Address</span> fields, the
<span class="keyword parmname"> Lan1/</span> value represents all devices on the network interface
subnet.</li>
<li class="li">In the <span class="keyword wintitle">New Address</span> field, Lan1
and Uplink represent the IP address of the corresponding interface.</li>
</ul>
</section>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic nested0 nobody" aria-labelledby="ariaid-title4" id="topic_title_Getting_Started_d1e17">
<h1 class="title topictitle1" id="ariaid-title4">Getting Started</h1>
<article class="topic task nested1" aria-labelledby="ariaid-title5" lang="en-US" id="task_ifw_qpc_zp">
<h2 class="title topictitle2" id="ariaid-title5">Logging on to the Mediatrix Unit Web Interface</h2>
<div class="body taskbody">
<section class="section prereq"><div class="tasklabel"><strong class="sectiontitle tasklabel">Before you begin</strong></div>The computer IP address must be in the same TCP/IP network as the Mediatrix
unit.</section>
<section class="section context"><div class="tasklabel"><strong class="sectiontitle tasklabel">About this task</strong></div>For better performances, it is recommended to use the latest available version of
Microsoft Internet Explorer, Google Chrome, or Mozilla Firefox. <div class="note note note_note"><span class="note__title">Note:</span> You may not be
able to log on to the Mediatrix unit Web interface if you are using older browser
versions. </div></section>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Procedure</strong></div><ol class="ol steps"><li class="li step stepexpand">
<span class="ph cmd">In your Web browser, enter the IP address at which the Web interface of your
Mediatrix unit can be reached.</span>
<ul class="ul choices" id="task_ifw_qpc_zp__choices_kx1_wf3_bq">
<li class="li choice">If your network has an IPv4 DHCP server, connect the primary Ethernet
port of the Mediatrix unit to the network (ETH1 port), use the provided DHCP
server IP address.</li>
<li class="li choice">You can also connect your computer to the secondary Ethernet port of the
Mediatrix unit (ETH2), use the 192.168.0.10 IP address. However, the
computer must also own an IP address in the 192.168.0.0/24 network.</li>
</ul>
</li><li class="li step stepexpand">
<span class="ph cmd">Enter <span class="keyword wintitle">admin</span> as your
username and <span class="keyword wintitle">administrator</span> as the
password.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> You can also use <span class="keyword wintitle">public</span> as a username and
leave the password field empty; it has the full administration rights by
default. </div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="ph uicontrol">Login</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Results</strong></div>The <span class="ph uicontrol">Information</span> page of
the Web interface is displayed.</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks" lang="en-US"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Related tasks</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_vxr_d1m_s5">Changing the Login Password</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title6" id="task_vxr_d1m_s5">
<h2 class="title topictitle2" id="ariaid-title6">Changing the Login Password </h2>
<div class="body taskbody">
<section class="section prereq"><div class="tasklabel"><strong class="sectiontitle tasklabel">Before you begin</strong></div>You must have administrator rights. </section>
<section class="section context"><div class="tasklabel"><strong class="sectiontitle tasklabel">Context</strong></div>For security reasons, it is a best practice to change the Default Login Password
for the admin and public accounts.</section>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step stepexpand">
<span class="ph cmd">Go to <span class="keyword wintitle">Management</span>/<span class="keyword wintitle">Access Control</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">Change the passwords for the admin and public users.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> The password is case sensitive. As a general rule, passwords should be at
least eight characters, with a mix of lowercase letters, uppercase letters,
numbers, and symbols.</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Apply</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>
<br><img class="image" id="task_vxr_d1m_s5__image_tzs_rf3_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/accesscontrol.png" width="800"><br>
</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_i1q_2pm_ts">Securing SNMP Interface</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title7" id="task_i1q_2pm_ts">
<h2 class="title topictitle2" id="ariaid-title7">Securing SNMP Interface</h2>
<div class="body taskbody">
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step">
<span class="ph cmd">Go to <span class="keyword wintitle">Management</span>/<span class="keyword wintitle">SNMP</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">SNMP Configuration</span> table, set
the following parameters:</span>
<ol type="a" class="ol substeps" id="task_i1q_2pm_ts__substeps_mgy_g5m_ts">
<li class="li substep">
<span class="ph cmd">Set <span class="keyword wintitle">Enable SNMP V1</span> to
<span class="keyword wintitle">Disable</span>.</span>
</li>
<li class="li substep">
<span class="ph cmd">Set <span class="keyword wintitle">Enable SNMP V2</span> to
<span class="keyword wintitle">Disable</span>.</span>
</li>
<li class="li substep">
<span class="ph cmd">Set the <span class="keyword wintitle">Privacy Protocol</span>.
</span>
</li>
<li class="li substep">
<span class="ph cmd">In the <span class="keyword wintitle">Privacy Password</span>
field, enter a password of your choosing.</span>
</li>
</ol>
</li><li class="li step">
<span class="ph cmd">Click <span class="keyword wintitle">Apply</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>
<br><img class="image" id="task_i1q_2pm_ts__image_pld_z5m_ts" src="https://documentation.media5corp.com/download/attachments/45482024/SNMPConfiguration_Disable.png" width="800"><br>
</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_qdd_jmd_s5">Configuring the Uplink Network Interface to a static IP address</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title8" id="task_qdd_jmd_s5">
<h2 class="title topictitle2" id="ariaid-title8">Configuring the <span class="keyword wintitle">Uplink</span> Network
Interface to a static IP address</h2>
<div class="body taskbody">
<section class="section prereq"><div class="tasklabel"><strong class="sectiontitle tasklabel">Before you begin</strong></div>Your Internet Service Provider must provide the following information: <ul class="ul" id="task_qdd_jmd_s5__ul_wx1_2np_c3b">
<li class="li">The assigned static IP address and its network mask (also known as CIDR)</li>
<li class="li">The IP address of the network gateway</li>
</ul><p class="p">If your Internet Service Provider is using another method, such as DHCP or
PPPoE, refer to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Network+Interfaces" target="_blank">DGW Configuration Guide - Network
Interfaces</a> document published on the <a class="xref" href="https://documentation.media5corp.com/" target="_blank">Media5 Documentation Portal</a>.</p></section>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step stepexpand">
<span class="ph cmd">Go to <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">Interfaces</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Network Interface Configuration</span> table, from the <span class="keyword wintitle">Link</span> selection list located next to <span class="keyword wintitle">Uplink</span>, leave the default
value, i.e. eth1.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Type</span>
selection list, select <span class="keyword wintitle">IpStatic (IPv4 Static)</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Static IP Address</span> field, set the assigned static IP address followed by the subnet CIDR prefix
(for example: 203.0.113.0/24, 198.51.100.0/27, 10.1.2.3/8, etc.).</span>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Static Default Router</span> field,
enter the IP address of the default gateway supplied by your internet service
provider.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Activation</span>
selection list, select <span class="keyword wintitle">Enable</span>. </span>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Apply</span> to apply
all changes to the configuration.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> Once the changes are applied, the connection with the unit might be lost.
You may need to reconnect to the Web page using the new address.</div>
</div>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>The unit can be reached (via the Web) through the Uplink static IP address. <br><img class="image" id="task_qdd_jmd_s5__image_v3g_gp3_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/Uplink_staticip.png" width="800"><br>
</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_g1k_xml_j5">Configuring the Domain Name Server (DNS)</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title9" id="task_g1k_xml_j5">
<h2 class="title topictitle2" id="ariaid-title9">Configuring the Domain Name Server (DNS)</h2>
<div class="body taskbody">
<section class="section prereq"><div class="tasklabel"><strong class="sectiontitle tasklabel">Before you begin</strong></div>Although it is possible to use public DNS servers you should always ask your
internet service provider to provide at least the primary and secondary DNS
servers.</section>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step">
<span class="ph cmd">Go to <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">Host</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">DNS Configuration</span> table, form the <span class="keyword wintitle">Configuration Source</span>
selection list, select <span class="keyword wintitle">Static</span>.</span>
</li><li class="li step">
<span class="ph cmd">For each DNS used, enter the IP address of the DNS. </span>
</li><li class="li step">
<span class="ph cmd">Click <span class="keyword wintitle">Apply</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>
<br><img class="image" id="task_g1k_xml_j5__image_zl2_fmq_55" src="https://documentation.media5corp.com/download/attachments/45482024/DNSConfigurationStatic.PNG" width="800"><br>
</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_ofy_g2q_5q">Configuring the SNTP Server to a Static IP Address</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title10" id="task_ofy_g2q_5q">
<h2 class="title topictitle2" id="ariaid-title10">Configuring the SNTP Server to a Static IP Address</h2>
<div class="body taskbody">
<section class="section prereq"><div class="tasklabel"><strong class="sectiontitle tasklabel">Before you begin</strong></div>Make sure there is an SNTP server available.</section>
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step stepexpand">
<span class="ph cmd">Go to <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">Host</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">SNTP Configuration</span> table,
from the <span class="keyword wintitle">Configuration Source</span>
selection list, select <span class="keyword wintitle">Static</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">Provide an IP address or domain name and port numbers for each SNTP server you
are using.</span>
<div class="itemgroup info">
<div class="p">
<div class="note note note_note"><span class="note__title">Note:</span> The best practice is to use the servers supplied by your Internet
Service Provider, then complement with servers from a different network
close to your geographical area. For example: <a class="xref" href="http://time.nist.gov" target="_blank">time.nist.gov</a> (USA), <a class="xref" href="http://ntp4.sptime.se" target="_blank">ntp4.sptime.se</a> (Sweden), <a class="xref" href="http://time1.isu.net.sa" target="_blank">time1.isu.net.sa</a> (Saudi Arabia), <a class="xref" href="http://ntp.nict.jp" target="_blank">ntp.nict.jp</a> (Japan), <a class="xref" href="http://time.google.com" target="_blank">time.google.com</a> (Worldwide),
<a class="xref" href="http://pool.ntp.org" target="_blank">pool.ntp.org</a> or one of their regional server pools (see
<a class="xref" href="https://www.ntppool.org/" target="_blank">https://www.ntppool.org/</a> for more information).</div>
</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">If necessary, change the value of the <span class="keyword wintitle">Synchronisation Period</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">If necessary, change the value of the <span class="keyword wintitle">Synchronisation Period on Error</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Apply</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>The SNTP host name and port will be displayed in the <span class="keyword wintitle">Host Status</span> table under <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">Status</span>. <br><img class="image" id="task_ofy_g2q_5q__image_dz5_rmq_55" src="https://documentation.media5corp.com/download/attachments/45482024/SNTPConfigurationStatic.png" width="800"><br></section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_jyt_jw5_bhb">Enabling the NAT Service</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title11" id="task_jyt_jw5_bhb">
<h2 class="title topictitle2" id="ariaid-title11">Enabling the NAT Service</h2>
<div class="body taskbody">
<section id="task_jyt_jw5_bhb__steps_w4x_lw5_bhb"><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps" id="task_jyt_jw5_bhb__steps_w4x_lw5_bhb"><li class="li step">
<span class="ph cmd">Go to <span class="keyword wintitle">System</span>/<span class="keyword wintitle">Services</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">User Service</span>
table, on the same line as Network Address Translation (NAT), set the <span class="keyword wintitle">Startup Type</span> to <span class="keyword wintitle">Auto</span>.</span>
</li><li class="li step">
<span class="ph cmd">Click <img class="image" id="task_jyt_jw5_bhb__image_p13_ww5_bhb" src="https://documentation.media5corp.com/download/attachments/45482024/fleche.jpg" width="15">.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>
<br><img class="image" id="task_jyt_jw5_bhb__image_wvk_fx5_bhb" src="https://documentation.media5corp.com/download/attachments/45482024/natservice.png" width="800"><br>
</section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_bn5_rs5_ngb">Enabling IPv4 Forwarding</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title12" id="task_bn5_rs5_ngb">
<h2 class="title topictitle2" id="ariaid-title12">Enabling IPv4 Forwarding</h2>
<div class="body taskbody">
<section id="task_bn5_rs5_ngb__steps_vpr_vs5_ngb"><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps" id="task_bn5_rs5_ngb__steps_vpr_vs5_ngb"><li class="li step">
<span class="ph cmd">Go to <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">IP Routing</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">IP Routing configuration</span>
table, select <span class="keyword wintitle">Enable</span>.</span>
</li><li class="li step">
<span class="ph cmd">Click <span class="keyword wintitle">Save</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>If IP Forwarding is disabled, the <span class="keyword wintitle">Advanced IP Routes</span> table is greyed
out. <br><img class="image" id="task_bn5_rs5_ngb__image_qxg_1z5_ngb" src="https://documentation.media5corp.com/download/attachments/45482024/IPRoutingConfiguration.png" width="800"><br></section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_wx2_h53_xhb">Adding a NAT Rule to Allow the Devices Connect Directly to the Mediatrix Unit</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title13" id="task_wx2_h53_xhb">
<h2 class="title topictitle2" id="ariaid-title13">Adding a NAT Rule to Allow the Devices Connect Directly to the Mediatrix Unit</h2>
<div class="body taskbody">
<section id="task_wx2_h53_xhb__steps_a5m_453_xhb"><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps" id="task_wx2_h53_xhb__steps_a5m_453_xhb"><li class="li step">
<span class="ph cmd">Go to <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">NAT</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">Source Network Address Translation Rules</span> field, click <img class="image" id="task_wx2_h53_xhb__image_lyh_1v3_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/Plusbleu.jpg" width="15">.</span>
</li><li class="li step">
<span class="ph cmd">From the <span class="keyword wintitle">Activation</span>
selection list, choose <span class="keyword wintitle">Enable</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">Source Address</span>
field, enter <span class="keyword wintitle">Lan1/</span> (The uppercase "L" and trailing slash
are important).</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">Destination Address</span> field,
enter <span class="keyword wintitle">Lan1/</span> (The uppercase "L" and trailing slash are
important).</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">New Address</span>
field, enter <span class="keyword wintitle">Lan1</span> (Here without the trailing slash).</span>
</li><li class="li step">
<span class="ph cmd">Click <span class="keyword wintitle">Save & Apply</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>The NAT rule 1 that was created will allow LAN devices to directly connect to the
Mediatrix device.<br><img class="image" id="task_wx2_h53_xhb__image_csf_pkx_23b" src="https://documentation.media5corp.com/download/attachments/45482024/natrules.png" width="800"><br></section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_aqj_c3x_23b">Adding a NAT Rule to Allow the LAN Devices Connect to the Internet</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title14" id="task_aqj_c3x_23b">
<h2 class="title topictitle2" id="ariaid-title14">Adding a NAT Rule to Allow the LAN Devices Connect to the Internet</h2>
<div class="body taskbody">
<section id="task_aqj_c3x_23b__steps_gb5_f3x_23b"><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps" id="task_aqj_c3x_23b__steps_gb5_f3x_23b"><li class="li step">
<span class="ph cmd">Go to <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">Interfaces</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">Source Network Address Translation Rules</span> field, click <img class="image" id="task_aqj_c3x_23b__image_lyh_1v3_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/Plusbleu.jpg" width="15">.</span>
</li><li class="li step">
<span class="ph cmd">From the <span class="keyword wintitle">Activation</span>
selection list, choose <span class="keyword wintitle">Enable</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">Source Address</span>
field, enter <span class="keyword wintitle">Uplink</span>
(The uppercase "U" is important, without any trailing slash).</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">Destination Address</span> field,
leave the field empty.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>The NAT rule 2 that was created will allow LAN devices to connect to the
internet.<br><img class="image" id="task_aqj_c3x_23b__image_o2d_4kx_23b" src="https://documentation.media5corp.com/download/attachments/45482024/natrules-LandevicestoInternet.png" width="800"><br></section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_drs_vz3_xhb">Configuring your LAN Devices to Access Internet Through the Mediatrix Unit</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title15" id="task_drs_vz3_xhb">
<h2 class="title topictitle2" id="ariaid-title15">Configuring your LAN Devices to Access Internet Through the Mediatrix Unit</h2>
<div class="body taskbody">
<section class="section context"><div class="tasklabel"><strong class="sectiontitle tasklabel">Context</strong></div>Configuring your LAN devices to access internet through the Mediatrix unit can be
done two ways: </section>
<section id="task_drs_vz3_xhb__steps_tc1_j1j_xhb"><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps" id="task_drs_vz3_xhb__steps_tc1_j1j_xhb"><li class="li step">
<span class="ph cmd">By configuring a DHCP server on the Mediatrix unit (see the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Configuring+the+DHCP+Server" target="_blank">Tehcnical Bulletin - Configuring the DHCP
Server</a> document published on the <a class="xref" href="https://documentation.media5corp.com/" target="_blank">Media5 Documentation Portal</a>), or </span>
</li><li class="li step">
<span class="ph cmd">Manually by consulting each device manual to setup the following:</span>
<ol type="a" class="ol substeps" id="task_drs_vz3_xhb__substeps_e2q_rmr_c3b">
<li class="li substep">
<span class="ph cmd">IP address (in the 192.168.0.xxx range by default).</span>
</li>
<li class="li substep">
<span class="ph cmd">Subnet Mask (255.255.255.0 or /24).</span>
</li>
<li class="li substep">
<span class="ph cmd">Default Gateway (the IP address of the Mediatrix unit, by default
192.168.0.10).</span>
</li>
<li class="li substep">
<span class="ph cmd">DNS servers and SNTP servers if needed.</span>
</li>
</ol>
</li></ol></section>
</div>
<nav role="navigation" class="related-links"><div class="linklist relinfo reltasks"><div class="linklistlabel"><strong class="sectiontitle linklistlabel">Next Step</strong></div><ul class="linklist"><li class="linklist"><a class="link" href="#task_vjf_fk1_yr">Performing a Configuration Backup to the Unit File Management System</a></li></ul></div></nav></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title16" id="task_vjf_fk1_yr">
<h2 class="title topictitle2" id="ariaid-title16">Performing a Configuration Backup to the Unit File Management System</h2>
<div class="body taskbody">
<section id="task_vjf_fk1_yr__steps_wgj_nv1_yr"><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps" id="task_vjf_fk1_yr__steps_wgj_nv1_yr"><li class="li step stepexpand">
<span class="ph cmd">Go to <span class="keyword wintitle">Management</span>/<span class="keyword wintitle">Backup and Restore</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">File Name</span>
field, indicate the name of your backup.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> The file name is case sensitive. As a best practice, add the .xml
extension. Make sure to indicate the firmware version the backup was made
from because a backup file can not be restored on an older firmware version
than the one it was taken from.</div>
</div>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> Remember, if you have several units with several configurations and plan
to reuse the configuration on another unit, the name must be explicit.
Indicate the date of your backup, the interfaces used, the device model,
etc.</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Transfer Protocol</span> selection
list, select <span class="keyword wintitle">File</span>.
</span>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Content</span>
selection list, choose the elements you wish to include to the backup.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">If you wish to use encryption for backup operations, complete the <span class="keyword wintitle">Privacy Parameters</span>. </span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> Media5 corp strongly recommends to use a privacy algorithm (encryption) to
protect certificates and passwords.</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Apply and Backup Now</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>The configuration will be saved in the unit file management system. The backup file
will appear at the end of the list of the <span class="keyword wintitle">File</span> page, under <span class="keyword wintitle">Management</span>/<span class="keyword wintitle">File</span>.<br><img class="image" id="task_vjf_fk1_yr__image_gl4_fj4_1s" src="https://documentation.media5corp.com/download/attachments/45482024/ImageConfiguration_FileManagement.png" width="800"><br></section>
</div>
</article></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic nested0 nobody" aria-labelledby="ariaid-title17" id="topic_title_Optional_Port_Forwarding_d1e31">
<h1 class="title topictitle1" id="ariaid-title17">Optional Port Forwarding</h1>
<article class="topic concept nested1" aria-labelledby="ariaid-title18" id="concept_dkr_wbj_xhb">
<h2 class="title topictitle2" id="ariaid-title18">Port Forwarding</h2>
<div class="body conbody"><p class="shortdesc">The Port Forwarding feature allows a connection from a remote device (for example,
computers on the Internet) to a specific computer or device within a private local-area network
(LAN) behind the Mediatrix unit.</p>
<p class="p">To allow remote users access a local IP-enable PBX, or intranet server, it is possible to map a
TCP/IP port on the Mediatrix unit WAN interface and forward its packets to the wanted IP/port
combination on the LAN.</p>
<p class="p">A typical scenario would be to map port 8080 on the Mediatrix unit WAN interface to a Web
server on the LAN side, with the new address 192.168.0.99:80 for example.</p>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title19" id="task_gq5_xsv_rs">
<h2 class="title topictitle2" id="ariaid-title19">Setting Port Forwarding</h2>
<div class="body taskbody">
<section><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps"><li class="li step">
<span class="ph cmd">Go to <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">NAT</span>.</span>
</li><li class="li step">
<span class="ph cmd">In the <span class="keyword wintitle">Destination Network
Address Translation Rules</span> table, click <img class="image" id="task_gq5_xsv_rs__image_nxk_cwv_rs" src="https://documentation.media5corp.com/download/attachments/45482024/Plusbleu.jpg" width="16">.</span>
</li><li class="li step">
<span class="ph cmd">Set the following parameters:</span>
<ol type="a" class="ol substeps" id="task_gq5_xsv_rs__substeps_nlt_dwv_rs">
<li class="li substep">
<span class="ph cmd">Set <span class="keyword wintitle">Activation</span> to <span class="keyword wintitle">Enable</span>.</span>
</li>
<li class="li substep">
<span class="ph cmd">Leave <span class="keyword wintitle">Source Address</span> field
blank.</span>
</li>
<li class="li substep">
<span class="ph cmd">Set <span class="keyword wintitle">Destination Address</span>
to <span class="keyword wintitle">Uplink</span>.</span>
</li>
<li class="li substep">
<span class="ph cmd">Set the <span class="keyword wintitle">Protocol</span> to reflect
your desired configuration.</span>
</li>
<li class="li substep">
<span class="ph cmd">Set the <span class="keyword wintitle">Destination Port</span> to
the desired port you want to forward to.</span>
</li>
<li class="li substep">
<span class="ph cmd">Set the <span class="keyword wintitle">New Address</span> to the
desired location.</span>
</li>
</ol>
</li><li class="li step">
<span class="ph cmd">Click <span class="keyword wintitle">Save & Apply</span>.</span>
</li><li class="li step">
<span class="ph cmd">Repeat the steps <strong class="ph b">2</strong> to <strong class="ph b">4</strong> for additional routes.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>
<br><img class="image" id="task_gq5_xsv_rs__image_dqb_jxv_rs" src="https://documentation.media5corp.com/download/attachments/45482024/DestinationNetworkAddressTranslationRule.png" width="800"><br>
</section>
</div>
</article></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic nested0 nobody" aria-labelledby="ariaid-title20" id="topic_title_Optional_Local_Firewal_Configuration_d1e34">
<h1 class="title topictitle1" id="ariaid-title20">Optional Local Firewal Configuration</h1>
<article class="topic concept nested1" aria-labelledby="ariaid-title21" id="concept_rzz_fhj_xhb">
<h2 class="title topictitle2" id="ariaid-title21">Local Firewall Configuration and Activation</h2>
<div class="body conbody"><p class="shortdesc">By default, the Local Firewall service is in Automatic mode and configured with a
default policy to accept all traffic.</p>
<p class="p">There are different approaches to security, but in this section we will give a simple example
that will restrict a range of ports from 1 to 5000 to everyone except the LAN. Note: Our range
stops at 5000, as the later ports are used for telephony 5004 (RTP), 5006 (SRTP), 5060 (SIP),
5061 (TLS), 16000-16xxx (Endpoint persistent connections), etc.</p>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic task nested1" aria-labelledby="ariaid-title22" id="task_x4z_y3j_xhb">
<h2 class="title topictitle2" id="ariaid-title22">Allocating Port Range 1 to 5000 to LAN Only</h2>
<div class="body taskbody">
<section id="task_x4z_y3j_xhb__steps_sgr_tnj_xhb"><div class="tasklabel"><strong class="sectiontitle tasklabel">Steps</strong></div><ol class="ol steps" id="task_x4z_y3j_xhb__steps_sgr_tnj_xhb"><li class="li step stepexpand">
<span class="ph cmd">Go to <span class="keyword wintitle">Network</span>/<span class="keyword wintitle">Local Firewall</span></span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Local Firewall Rules</span> table,
click <img class="image" id="task_x4z_y3j_xhb__image_v3t_xnj_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/Plusbleu.jpg" width="15">.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> The first rule is to allow traffic for LAN devices.</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Activation</span>
selection list, choose <span class="keyword wintitle">Enable</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Source Address</span>
field, enter Lan1/ (the uppercase "L" and trailing slash are important).</span>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Protocol</span>
selection list choose <span class="keyword wintitle">All</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Action</span>
selection list, choose <span class="keyword wintitle">Accept</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Local Firewall Rules</span> table,
click <img class="image" id="task_x4z_y3j_xhb__image_yjs_ksj_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/Plusbleu.jpg" width="15">.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> The second rule is block traffic to system ports by TCP.</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Activation</span>
selection list, choose <span class="keyword wintitle">Enable</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Protocol</span>
selection list choose <span class="keyword wintitle">TCP</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Destination Port</span> field, enter 1-5000.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Action</span>
selection list, choose <span class="keyword wintitle">Drop</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Local Firewall Rules</span> table,
click <img class="image" id="task_x4z_y3j_xhb__image_knq_3sj_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/Plusbleu.jpg" width="15">.</span>
<div class="itemgroup info">
<div class="note note note_note"><span class="note__title">Note:</span> The second rule is block traffic to system ports by UDP.</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Activation</span>
selection list, choose <span class="keyword wintitle">Enable</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">From the <span class="keyword wintitle">Protocol</span>
selection list choose <span class="keyword wintitle">UDP</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Destination Port</span> field, enter 1-5000.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">In the <span class="keyword wintitle">Action</span>
selection list, choose <span class="keyword wintitle">Drop</span>.</span>
</li><li class="li step stepexpand">
<span class="ph cmd">Click <span class="keyword wintitle">Save & Apply</span>.</span>
</li></ol></section>
<section class="section result"><div class="tasklabel"><strong class="sectiontitle tasklabel">Result</strong></div>Destination Ports 1 to 5000 are used only by Lan1/<br><img class="image" id="task_x4z_y3j_xhb__image_qwz_xsj_xhb" src="https://documentation.media5corp.com/download/attachments/45482024/LocalFirewall-Port1-5000onLANonly.PNG" width="800"><br></section>
</div>
</article></article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic reference nested0" aria-labelledby="ariaid-title23" id="reference_u4w_px4_xhb">
<h1 class="title topictitle1" id="ariaid-title23">Documentation </h1>
<div class="body refbody">
<section class="section">For more details, refer to the following documents published on the <a class="xref" href="https://documentation.media5corp.com/" target="_blank">Media5 Documentation Portal</a>.<div class="p">
<ul class="ul" id="reference_u4w_px4_xhb__ul_vrt_qy4_xhb">
<li class="li">To configure the DHCP server, refer to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Configuring+the+DHCP+Server" target="_blank">Technical Bulletin - Configuring the DHCP Server</a>
document.</li>
<li class="li">For more information on Local firewalls, refer to refer to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Configuring+Local+Firewalls" target="_blank">DGW Configuration Guide - Configuring Local
Firewalls</a> document published on our documentation portal.</li>
<li class="li">For mire information on configuration of Network Firewalls, refer to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Configuring+the+Network+Firewall" target="_blank">DGW Configuration Guide -Configuring the Network
Firewall</a> Firmware Guide published on our documentation portal.</li>
<li class="li">For more information on Securing the Mediatrix unit, refer to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Securing+a+Mediatrix+Unit" target="_blank">Technical Bulletin - Securing a Mediatrix Unit</a>
technical bulletin published on our documentation portal.</li>
<li class="li">For more information on Enabling NAt and Routing in DGW, refer to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Enabling+NAT+and+Routing+in+Dgw" target="_blank">Technical Bulletin -Enabling NAT and Routing in
DGW</a> technical bulletin published on our documentation portal.</li>
<li class="li">For more information on Configuring Port Forwarding for a Web Server Located on the
LAN, refer to the <a class="xref" href="https://documentation.media5corp.com/display/DGWLATEST/Configuring+Port+Forwarding+for+a+Web+Server+Located+on+the+LAN" target="_blank">Technical Bulletins - Configuring Port Forwarding for a
Web Server Located on the LAN</a> document published on our documentation
portal.</li>
</ul>
</div></section>
<section class="section">
<p class="p"></p>
</section>
</div>
</article><hr><span style="float: inline-end;"><a href="#">Top</a></span><article class="topic concept nested0" aria-labelledby="ariaid-title24" id="concept_fqm_rv4_k4">
<h1 class="title topictitle1" id="ariaid-title24">Copyright Notice</h1>
<div class="body conbody"><p class="shortdesc">Copyright © 2022 Media5 Corporation.</p>
<p class="p">This document contains information that is proprietary to Media5 Corporation.</p>
<p class="p">Media5 Corporation reserves all rights to this document as well as to the Intellectual Property
of the document and the technology and know-how that it includes and represents.</p>
<p class="p">This publication cannot be reproduced, neither in whole nor in part, in any form whatsoever,
without written prior approval by Media5 Corporation.</p>
<p class="p">Media5 Corporation reserves the right to revise this publication and make changes at any time
and without the obligation to notify any person and/or entity of such revisions and/or
changes.</p>
</div>
</article></article></main></body></html> |
