Nokia MW1122 Use and care manual

Nokia MW1122
T66520
ADMINISTRATOR MANUAL
ADSL/WLAN Routerā

C33902001SE_00 ECopyright Nokia Networks Oy
MW1122
ADSL/WLAN Router
Administrator Manual
C33902.20 A0

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
ii
ECOPYRIGHT Nokia Networks Oy 2000
All rights reserved.
Nopartofthispublicationmaybecopied,distributed,transmitted,transcribed,storedinaretrieval
system, or translated into any human or computer language without the prior written permission
of Nokia Networks Oy.
The manufacturer has made every effort to ensure that the instructions contained in the
documents are adequate and free of errors and omissions. The manufacturer will, if necessary,
explain issues which may not be covered by the documents. The manufacturer’s liability for any
errors in the documents is limited to the correction of errors and the aforementioned advisory
services.
The documents have been prepared to be used by professional and properly trained personnel,
and the customer assumes full responsibility when using them.The manufacturer welcomes
customer comments as part of the process of continual development and improvement of the
documentationinthe best waypossible from theuser’sviewpoint.Please submit yourcomments
to the nearest Nokia sales representative.
NOKIA is a registered trademark of Nokia Corporation.
Any other trademarks mentioned in the documents are the property of their respective owners.

ECopyright Nokia Networks Oy
C33902001SE_00 iii
Document History
Document Date Comment
C33902001SE_00 05.07.2000

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
iv

ECopyright Nokia Networks Oy
C33902001SE_00 v
Contents
Chapter 1
Introduction to Nokia MW1122 1-1. . . . . . . . . . . . . . . .
Chapter 2
Applications and features 2-1. . . . . . . . . . . . . . . . . . . . .
2.1 Applications 2-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Internet access 2-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Remote work 2-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
LAN interconnection 2-4. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2 Features 2-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.1 Interfaces 2-5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
LAN and WLAN interfaces 2-6. . . . . . . . . . . . . . . . . . . . . . .
Slaved WLAN operation 2-7. . . . . . . . . . . . . . . . . . . . . . . . .
Internal host/gateway interface 2-7. . . . . . . . . . . . . . . . . . . .
Data VCC operation 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.2 Routing 2-8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.3 Bridging 2-8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.4 Network Address Port Translation 2-8. . . . . . . . . . . . . . . . . . .
2.2.5 Dynamic Host Configuration Protocol 2-10. . . . . . . . . . . . . . . .
2.2.6 ATM and ADSL 2-10. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.7 Point-to-Point Tunneling Protocol (PPTP) 2-10. . . . . . . . . . . . .
2.2.8 Point-to-Point Protocol over Ethernet (PPPoE) 2-12. . . . . . . . . .
2.2.9 Payload encapsulations 2-12. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.10 Access list authorisation 2-12. . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.11 Wireless LAN and radio interface 2-12. . . . . . . . . . . . . . . . . . . .
2.2.12 Wired Encryption Privacy (WEP) 2-13. . . . . . . . . . . . . . . . . . . .
2.2.13 Weighted Fair Queueing (Class of Service) 2-13. . . . . . . . . . . .

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
vi
2.2.14 Management 2-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.15 Dedicated management channel 2-13. . . . . . . . . . . . . . . . . . . . .
Chapter 3
Interfaces and indicator lights 3-1. . . . . . . . . . . . . . . . .
3.1 Interfaces 3-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1.1 Ethernet interface 3-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1.2 ADSL interface 3-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.2 Command line interface 3-3. . . . . . . . . . . . . . . . . . . . . . . . . .
3.3 Indicator lights 3-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 4
Installing Nokia MW1122 4-1. . . . . . . . . . . . . . . . . . . . .
4.1 MW1122 default settings 4-1. . . . . . . . . . . . . . . . . . . . . . . . . .
4.2 Step-by-step installation procedure 4-2. . . . . . . . . . . . . . . . .
Chapter 5
Managing MW1122 5-1. . . . . . . . . . . . . . . . . . . . . . . . . .
5.1 Operational examples 5-1. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.1.1 Routing/tunneling IP only 5-2. . . . . . . . . . . . . . . . . . . . . . . . . .
5.1.2 Routing/tunneling IP, bridging other protocols 5-3. . . . . . . . . .
5.1.3 Routing/tunneling IP, bridging all protocols including IP 5-3. .
5.1.4 Bridging only 5-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.1.5 Routing/tunneling IP only using slaved WLAN 5-4. . . . . . . . .
5.2 Typical configuration tasks 5-5. . . . . . . . . . . . . . . . . . . . . . . .
5.2.1 Configuring DHCP and DNS 5-5. . . . . . . . . . . . . . . . . . . . . . .
5.2.2 Configuring static and dynamic routing 5-6. . . . . . . . . . . . . . .
5.2.3 Encrypting wireless connection 5-7. . . . . . . . . . . . . . . . . . . . . .
5.2.4 Changing WLAN settings through the command line interface 5-8
Changing WLAN network name 5-8. . . . . . . . . . . . . . . . . . .
Changing WLAN channel 5-8. . . . . . . . . . . . . . . . . . . . . . . .
Controlling the access to your network 5-9. . . . . . . . . . . . . .
5.2.5 File system and downloading new firmware using TFTP 5-10. .
Downloading configuration or application from monitor 5-11
5.3 Browser management 5-12. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.1 Opening a connection 5-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.2 Main Page 5-14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.3 Wireless LAN page 5-15. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

ECopyright Nokia Networks Oy
C33902001SE_00 vii
5.3.4 WLAN Clients page 5-17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Enabling access control 5-17. . . . . . . . . . . . . . . . . . . . . . . . . .
Encrypting wireless connection 5-18. . . . . . . . . . . . . . . . . . . .
5.3.5 Service Providers pages 5-22. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.6 Local Network pages 5-24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Local ports 5-24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
DHCP 5-25. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
NAPT 5-27. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Routing page 5-28. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.7 Statistics page 5-29. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.8 Restart page 5-30. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.9 Save Config page 5-31. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.4 Command line interface (CLI) 5-31. . . . . . . . . . . . . . . . . . . . .
5.4.1 Main mode commands 5-34. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.4.2 Configuration mode commands 5-58. . . . . . . . . . . . . . . . . . . . . .
Root level commands 5-59. . . . . . . . . . . . . . . . . . . . . . . . . . .
System level commands 5-60. . . . . . . . . . . . . . . . . . . . . . . . .
Password level command 5-61. . . . . . . . . . . . . . . . . . . . . . . .
Ethernet level commands 5-61. . . . . . . . . . . . . . . . . . . . . . . .
WLAN level commands 5-64. . . . . . . . . . . . . . . . . . . . . . . . .
VCC (ATM channel) commands 5-72. . . . . . . . . . . . . . . . . . .
Vbridge commands 5-77. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Dedicated management channel commands 5-78. . . . . . . . . .
Common commands 5-79. . . . . . . . . . . . . . . . . . . . . . . . . . . .
Appendix A
Technical specifications A-1. . . . . . . . . . . . . . . . . . . . . . .
A.1 Mechanical construction and power supply A-3. . . . . . . . . .
A.2 Ambient conditions, EMC and safety A-3. . . . . . . . . . . . . . .
Ambient conditions A-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
EMC A-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Safety A-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Glossary

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
viii

Introduction to Nokia MW1122
ECopyright Nokia Networks Oy
C33902001SE_00 1-1
Chapter 1
Introduction to Nokia MW1122
Nokia MW1122 is an integrated ADSL (Asymmetric Digital
SubscriberLine) bridge and router which enables high-speed Internet
access for your wireless (WLAN) and Ethernet local area networks
(LAN). It multiplies the capacity of the already installed telephone
lines used traditionally for telephone and dial-up modem services.
MW1122 brings high-speed connections available for home users,
small offices and telecommuters.
Figure 1-1 Nokia MW1122
MW1122 allows you to connect your desktop and laptop PCs to
remote networks. Your PCs must be equipped with either 10Base-T
Ethernetinterface orIEEE 802.11b standard compliant wireless LAN
card, for example Nokia C110 or Nokia C111 PC card. There are also

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
1-2
PCIcardsandPCcardadapterswhichcanbeusedwithdesktopPCs.If
you want to have more than one PC connected to a Nokia MW1122
modem through the Ethernet interface, you must use a multi-port
Ethernet hub in between the PCs and Nokia MW1122 modem.
Awirelessnetworkathomeorofficeisapowerful,easytousenetwork
that is similar to any other Ethernet-like local area network. The only
difference is the lack of cables needed on the traditional LAN. This
enablesflexibilityandmobilitythathasnotbeenavailablebefore.You
can use your laptop anywhere within the range of your wireless LAN
coveringyouhomeoroffice.WirelessLAN,definedbyIEEE802.11b
standard, provides a capacity of 1, 2, 5.5 and 11 Mbit/s capacity and
supportfor32concurrentwirelessLANclientsandacoverageof20to
50 metres depending on the inner walls of your apartment, house or
office.
The ADSL high-speed Internet access may be delivered to you over
thesamecopperpairofwiresthatisusedforyourtraditionaltelephony
services. As both services utilise the same pair of wires, a filter is
needed to separate them. This is called a POTS filter and it is a small
external device connected between your telephone and the telephone
wall socket.
Your Nokia MW1122 interconnects with a Digital Subscriber Line
Access Multiplexer (DSLAM) installed and maintained by your
access provider in their central office. MW1122 ADSL technology is
basedon DiscreteMultitone (DMT)modulationallowingamaximum
of8 Mbit/sdatatransmission fromthenetwork and800 kbit/stowards
the network. However, these figures illustrate the maximum
performance of the technology and are subjected to the physical line
conditions and the distance from you to the central office. MW1122 is
capable of adapting to the physical line conditions and guarantees the
maximum transmission rate possible on the particular line. MW1122
adapts its speed to the line conditions in steps of 32 kbit/s. In addition
to these physical limitations affecting your data throughput, your
Internet Service Provider (ISP) may limit your access according to
their service provisioning policy and based on your service contract.

Applicationsand features
ECopyright Nokia Networks Oy
C33902001SE_00 2-1
Chapter 2
Applications and features
In thischapter, we present the mostcommon applicationsand features
of MW1122. The use and configuration of your Nokia MW1122 may
bedifferentfrom the configurationspresentedin this manual,evenfor
similar applications. The configurations presented in this manual
represent a typical way of using MW1122 for the corresponding
applications.
2.1 Applications
Thethree typical applications discussed below are theInternetaccess,
remote work, and office LAN interconnection.
Internet access
Your access to the Internet is provided by your Internet Service
Provider(ISP). Nokia MW1122 connects you throughyour telephone
line and the ATM (Asynchronous Transfer Mode) network to the
network of your ISP, which, in turn, is connected to the Internet.
Hence, all your data goes through the ISP’s network. If you are using
onlyone ISPforyour Internet access, your ISPmaygiveyoua limited
set of IP addresses belonging to its address space that you may utilise
in your desktop and laptop computers on your home network.
However, in many cases it is more practical to separate your own
private LAN from the ISP’s public network by using private IP
addresses. This way you are not limited to the number of public IP
addressesprovided byyourISPbutyou canmanageyourownaddress
space independently. For this you will need to use NAPT (Network
Address Port Translation) feature available in your MW1122 modem.

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
2-2
This mode of operation reduces the need to have more than one public
Internet address. Furthermore, it prevents others from seeing and
accessing your private network and therefore it acts as a simple
firewall.
LAN
10Base-T ATM
network
RAN
Wireless
LAN
Customer
premises
DSLAM
Internet connection
Internet
Wireless
LAN
Figure 2-1 High-speed Internet access

Applicationsand features
ECopyright Nokia Networks Oy
C33902001SE_00 2-3
Remote work
Another application for MW1122 is remote work. In this case the
end-to-end architecture can, for example, use PPP over Ethernet,
whereadial-up-typePPPconnectioniscreatedbetweenyourhomePC
andyourcorporatenetworksPPPaccessserverbasedonthe username
and password you issue in your PC. The same set up could be used for
accessingthe publicInternetwith adifferentuser nameandpassword.
This example naturally presumes that your ISP supports this type of
approach for providing remote work services for our company.
Nokia MW1122
10Base-T ATM
network
Corporate
network
Remote
worker 1
Remote
worker 2
Remote
worker 3
Company
router
DSLAM
Wireless
LAN
PPPoE RAN L2TP
Figure 2-2 Remote work using MW1122 as a standard router

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
2-4
LAN interconnection
MW1122 can also be used for corporate branch office LAN
interconnection. Especially, when the branch office is a small and
possibly a temporary site without any existing LAN infrastructure
available, the MW1122 is highly suitable for this purpose. In such
circumstances the wireless LAN is an excellent technology to have
office coverage fast and without any additional wiring installations.
Local file and printer servers, if needed, may be connected with the
10Base-TEthernetinterfacetoMW1122andallclientPCsandlaptops
may be using wireless LAN to access the servers, the printer, and the
corporate intranet. As a bridge, MW1122 enables all network
protocols to be used on the corporate network.
LAN
10Base-T
ATM
network
Company
bridge
wireless
LAN
Remote
office 1
Remote
office 3
Corporate
network
DSLAM
Remote
office 2
Wireless
LAN
Figure 2-3 LAN interconnection
2.2 Features
MW1122 can operate as a bridge and/or Internet Protocol (IP) router
between Ethernet, wireless LAN and the virtual channels of
ADSL/ATM interfaces supporting both dynamic and static routing.

Applicationsand features
ECopyright Nokia Networks Oy
C33902001SE_00 2-5
2.2.1 Interfaces
MW1122 has the following interfaces:
DEthernet interface (LAN)
DWireless LAN interface (WLAN)
D8 ATM VCC interfaces
DATM VCC management interface
DGateway/bridgemanagement interface. This interface is usedasa
bridge host interface or gateway interface depending on the
operation mode. In this manual it is called VBRIDGE. On the
MW1122 web pages, the interface is called gateway or bridge IP
interface.
MW1122 can operate in four different main modes:
DBridging only
DRouting/tunneling IP only
DRouting/tunneling IP, bridging all but IP
DRouting/tunneling IP and bridging all, including IP
ThemodeinwhichMW1122operatesdependsontheconfigurationof
the unit’s interfaces. Table 2-1 shows the operational modes and the
corresponding interface configurations.
LAN interface WLAN inter-
face ATM VCC inter- faces Vbridge (gateway/host
interface)
Bridge only
Bridging Bridging or
slaved to LAN
interface (single
subnet).
Bridging. Used as a man-
agement (host)
interface for all
bridged inter-
faces in case
such is needed.
Route/tunnel IP only
Routing (IP ad-
dress confi-
gured)
Routing (IP ad-
dress confi-
gured) or slaved
to LAN interface
(single subnet).
Routing (IP ad-
dress confi-
gured) or PPTP
local tunneling
activated for
each active
ATM VCC.
Not used in this
case. The unit
can be man-
aged through
any of the LAN,
WLAN or ATM
interface IP ad-
dresses.

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
2-6
LAN interface Vbridge
(gateway/host
interface)
ATM VCC inter-
faces
WLAN inter-
face
Route/tunnel IP, bridge all other traffic
Routing (IP ad-
dress confi-
gured) and
bridging acti-
vated.
Routing (IP ad-
dress confi-
gured) and
bridging acti-
vated or slaved
to LAN interface
(single subnet).
VCCs that only
route or tunnel
have routing (IP
address confi-
gured) or PPTP
local tunneling
activated.
VCCs that both
bridge and
route have addi-
tionally bridging
activated. This
requires ETH-
LLC encapsula-
tion to be used
on those VCCs.
VCCs that only
bridge have
only bridging
activated.
Typically not
used in this
case. The unit
can be man-
aged locally
through LAN
and WLAN in-
terfaces and re-
motely through
a separate
management
VCC or the ATM
VCCs which
have routing
activated.
Route/tunnel IP, bridge all other including IP
Bridging acti-
vated Bridging acti- vated or slaved
to LAN interface
(single subnet).
VCCs that only
route or tunnel
have routing (IP
address confi-
gured) or PPTP
local tunneling
activated.
VCCs that only
bridge have
only bridging
activated.
Used as a com-
mon IP gateway
interface for
both LAN and
WLAN inter-
faces.
Table 2-1 Operational modes
LAN and WLAN interfaces
LAN and WLAN interfaces can be configured individually to bridge
and route packets. There are three different operational modes in both
LAN and WLAN interfaces:

Applicationsand features
ECopyright Nokia Networks Oy
C33902001SE_00 2-7
DBridging only; only bridging is activated in the interface. In this
case the interface bridges all protocols.
DRoutingonly;onlyIPaddressisconfiguredintheinterface.Inthis
case, the interface routes IP packets.
DBridgingand routing; Bridging is activated in the interface andIP
address is configured in the interface. In this case, the interface
routes IP packets and bridges all other packets.
Slaved WLAN operation
The wireless LAN interface can be configured to operate as a slave to
the Ethernet interface. In this case, there is no need to configure the IP
address or bridging to the wireless LAN interface. The Ethernet and
the wireless LAN interface are bridged together internally and both
interfaces are treated as a single LAN interface. All LAN
configurationparametersdefiningbridgingandIP-relatedparameters,
suchasIPaddress,admin-disabled andRIP configurationaddress,are
used for both LAN and WLAN interfaces.
Internal host/gateway interface
There is a special host/gateway logical IP interface within MW1122
called VBRIDGE. This interface has a specific purpose in MW1122.
InapplicationswheresomeATMvirtualchannelconnectionsareused
for bridging IP traffic and some other ATM virtual channel
connections are used for routing IP traffic, the VBRIDGE interface
must be used instead of LAN/WLAN IP addresses. Alternatively, this
interface is used in bridge only application when the IP address is
required for remote management purposes.
Data VCC operation
MW1122 supports the following encapsulations in each ATM data
virtual channel individually:
DRFC2684 LLC encapsulation for bridged IP (ETH-LLC)
DRFC2684 LLC encapsulation for routed IP (IP-LLC)
DRFC2364 Virtual circuit multiplexed PPP over AAL5 (PPP-VC)
DRFC2364 Virtual circuit multiplexed PPP over AAL5 used to
tunnel LAN/WLAN/VBRIDGE PPTP packets
(TUNNELED-PPP-VC)
If an IP address is given to a virtual channel interface and bridging is
enabled at that interface, then IP data at that interface is routed and all
otherprotocolsarebridged.Theonlyencapsulationwhichallowsboth
bridging and routing simultaneously is ETH-LLC. For example, it is

MW1122 Administrator Manual
ECopyright Nokia Networks Oy C33902001SE_00
2-8
possibletorouteETH-LLCencapsulated packets andatthe same time
bridge, for example, PPPoE packets (PPPoE packets are transported
directly over Ethernet frame, not within IP packets).
2.2.2 Routing
Routing is based on routing entries in a routing table. Static routes are
addedviathemanagementinterfaceanddynamicroutingisdoneusing
RIP and RIPv2. Routing is done between the Ethernet 10Base-T
interface, the wireless LAN interface and the virtual channel
connection(VCC)oftheATM/ADSLinterface.MW1122supportsup
to 8 simultaneous VCCs.
MW1122 supports IGMP (Internet Group Management Protocol)
proxy receive function for IP multicast applications.
2.2.3 Bridging
Bridging is supported to provide full protocol transparency. Bridging
can be used simultaneously with IP routing. MW1122 works as a
self-learning bridge supporting up to 1024 MAC addresses. Bridging
is done between the Ethernet 10Base-T interface, the wireless LAN
interface and each ATM VCC interface. Optionally, the bridging
between the VCCs can be disabled.
2.2.4 Network Address Port Translation
MW1122 supports Network Address Port Translation (NAPT) for
TCP/IP,UDP/IPandICMP/IPprotocols.WhenNAPTisused,asingle
IP address is allocated to a VCC which leads to the public IP network.
The Ethernet subnet has private IP addressing and is not visible to the
VCC. NAPT translates the IP source address and source port number
dynamically to the VCC IP address and port number. Similarly,
packets coming from the VCC are mapped back to the original
destination addresses. NAPT allows up to hundreds of hosts to sharea
singleVCCIPaddresstothepublicnetwork.TheprincipleofNetwork
Address Port Translation is presented in Figure 2-4.

Applicationsand features
ECopyright Nokia Networks Oy
C33902001SE_00 2-9
NAPT router
192.168.1.254
195.112.12.161
src:192.168.1.112:1228
dst:194.112.11.111:80
src:194.112.11.111:80
dst:192.168.1.112:1228
src:195.112.12.161:50001
dst:194.112.11.111:80
src:194.112.11.111:80
dst:195.112.12.161:50001
Home network (LAN) Internet (WAN)
Figure 2-4 Principle of Network Address Port Translation
NAPT may restrict the operation of some IP applications. NAPT also
operates as a simple IP firewall because translation is only allowed
whenthefirstpacketistransmittedfromtheLAN.This meansthat the
NAPTtable entry is created only when a packet issent from thehome
network to the Internet. With server support capability, the user can
add static entries to the NAPT table allowing the translation always in
both directions. This capability is used to add servers (HTTP, NNTP,
and FTP), which are visible to the public IP network via the VCC, on
the LAN subnet.
NAPT supports most IP-based protocols. Because NAPT operateson
the IPand transportlayer, the application that includes IP address and
portwithinthepayloadwillnotworkproperlythroughNAPT.Inmany
cases, these applications can be passed through the NAPT using
Application Layer Gateway functionality (ALG). MW1122 has ALG
for the following protocols/applications:
DICMP
DFTP
DH.323 including NetMeeting
DCUSeeMe
DPPTP
DIRC
DIPSEC ESP tunnel mode and IKE
Note,thatmostIPSECimplementationswillfailwhenpassedthrough
NAPT. A typical reason is that the identification may fail if the
identification is based on IP address. Also, only tunnel mode without
Authentication Header (AH) works.