Configuring Mulitple Static IP Addresses
70
For devices using the Public Network addresses, simply configure the device to use the IP address (subnet
mask and default gateway) as assigned by the ISP. The gateway will automatically detect the usage of a
broadband IP address on the LAN network and correctly route the return traffic to the appropriate LAN
device. Once a broadband IP address has been detected by the gateway as being statically coded on the
device, its entry in the Address Allocation page will no longer be displayed.
Note:
The ability to use DHCP in assigning WAN addresses to LAN devices is different from how
some other routers operate. These other routers usually require that the address be hard coded
on the LAN device.
Upon successful configuration of the gateway, refresh the IP address of the network device (this may require
restarting that device). It should now have the desired public, or private, IP address assigned by the
3700HGV-B. Confirm proper configuration by attempting to access the public Internet.
Figure 2
Step 3: Configure Firewall Rules
LAN devices using addresses from the Public Network are still protected by the gateway firewall. To allow
unsolicited inbound traffic to any of these LAN devices, you must modify the firewall settings specified for
that device. That is, a LAN device can receive inbound traffic associated with outbound traffic (e.g., web
browsing) but needs to have a firewall rule established to function as a server.
To change the firewall settings, access the Firewall - Settings page of the MDC or the Firewall Settings page
of the standard web pages to configure the Hosted applications allowed for each device to be used with
unsolicited traffic.
Note:
This is different from how some other routers operate. These other routers automatically
allow all traffic to pass through from the WAN to the LAN devices configured with WAN IP
addresses.
The type of traffic to be received by the device determines the type of firewall configuration required:
•
If the device only requires the public IP address then no rules need to be established.
•
In some cases, all broadband traffic destined for a device is to be passed to that device. In this case,
the 3700HGV-B should be configured to
Allow all applications
for the specific device.
•
In other cases, only the traffic associated with a specific application (e.g., ftp server) is to be passed to
a device. In this case, the “hosted application” feature of the 3700HGV-B will be used to configure
which traffic to send to the device.
Note:
The 2Wire firewall only allows traffic for a public network IP address to be directed to a
local LAN device with the same public network IP address. That is, except for traffic sent to the
single broadband IP address assigned to the router and shared through NAPT, traffic sent to other
specific broadband IP addresses associated with the connection cannot be directed to local LAN
devices that may be using private IP addresses.