Cisco Small Business RV 120W Wireless-N VPN Firewall ...

Configuring the FirewallConfiguring Access Rules4STEP 6In the Source IP field, configure the IP address to which the firewall rule applies:• Any—The rule applies to traffic originating from any IP address in the localnetwork.• Single Address—The rule applies to traffic originating from a single IPaddress in the local network. Enter the address in the Start field.• Address Range—The rule applies to traffic originating from an IP addresslocated in a range of addresses. Enter the starting IP address in the Startfield, and the ending IP address in the Finish field.STEP 7If you are configuring an inbound firewall access rule:a. Destination Network Address Translation (DNAT) maps a public IP address(your dedicated WAN address) to an IP address on your private network. In theSend to Local Server (DNAT IP) field, specify an IP address of a machine on theLocal Network which is hosting the server.b. The router supports multi-NAT, so your Internet Destination IP address does nothave to be the address of your WAN. On a single WAN interface, multiple publicIP addresses are supported. If your ISP assigns you more than one public IPaddress, one of these can be used as your primary IP address on the WANport, and the others can be assigned to servers on the LAN. In this way, theLAN can be accessed from the internet by its aliased public IP address. Checkthe Enable box and enter the IP address you want to use.c. Under Rule Status, choose Enabled or Disabled. You may want to configure arule and choose Disabled if you want to enable it at a later time.If you are configuring an outbound firewall access rule:a. In the Destination IP field, configure the IP address to which the firewall ruleapplies:• Any—The rule applies to traffic going to any IP address.• Single Address—The rule applies to traffic going to a single IP address.Enter the address in the Start field.• Address Range—The rule applies to traffic going to an IP address locatedin a range of addresses. Enter the starting IP address in the Start field, andthe ending IP address in the Finish field.b. You can configure Secure Network Address Translation (SNAT) to map a publicIP address (your Dedicated WAN address, Optional WAN address, or anotheraddress) to an IP address on your private network. Under Use This SNAT IPAddress, check Enable and enter the SNAT IP Address.Cisco RV120W Administration Guide 70