HP VPN Firewall Appliances NAT and ALG Configuration Guide

15
Item Descri
p
tion
Global Port
Specify the global port numbers for the internal server.
This option is available when 6(TCP) or 17(UDP) is selected as the protocol type. You
can:
• For common configuration—Use the single box to specify a global port. 0
represents the default port of the specified service type. If the selected service type is
any(TCP) or any(UDP), the global port is any port. Use the double boxes to specify
a range of global ports, which have a one-to-one correspondence with the specified
range of internal IP addresses.
• For advanced configuration—Set the global port only when the protocol type is
6(TCP) or 17(UDP). Use the single box to specify a fixed port and 0 represents the
specified internal port. Use the double boxes to specify a range of global ports that
have a one-to-one correspondence with the specified range of internal IP addresses.
Internal VPN Instance
Specify a name of the VPN instance to which the internal server belongs.
If no internal VPN instance is specified, this indicates that the internal server is a
common private network server that does not belong to any VPN instance.
Internal IP
Specify the internal IP addresses for the internal server.
• For common configuration: Use the single box to specify a fixed internal IP address
if you use the single box for Global Port to set a global port. Use the double boxes
to specify a range of internal IP addresses if you use the double boxes for Global
Port to set a range of global ports. The specified range of internal IP addresses has
a one-to-one correspondence with the specified range of global ports. The number
of internal IP addresses must be identical to the number of specified global ports.
• For advanced configuration: When the protocol type is neither 6(TCP) nor 17(UDP),
or you specify a fixed global port in the single box for Global Port, specify a fixed
internal IP address in the single box. When the protocol type is 6(TCP) or 17(UDP),
and you set a range of global ports in the double boxes for Global Port, specify a
range of internal IP addresses in the double boxes. The specified range of internal
IP addresses has a one-to-one correspondence with the specified range of global
ports. The number of internal addresses must be identical to the number of specified
global ports.
Service
Specify the service type provided by the internal server. (Only supported by common
configuration)
IMPORTANT:
The port number of the internal server is the default port number of the selected service. If
the selected service type is any(TCP) or any(UDP), the internal port is any port.
Internal Port
Specify the internal port number of the internal server. (Only supported by advanced
configuration.)
This option is available when 6(TCP) or 17(UDP) is selected for the protocol type. If you
enter 0 in the text box, all types of services are provided. This configuration indicates
a static connection between internal addresses and external addresses.
ACL Specify an ACL for internal server.