Port Forwarding
advertisement
Router Configuration for Home Security: Forward your Ports Presenter: Steve Harris SCTE Director Advanced Network Technologies Program Development LINK © 2011 by the SCTE Router Configuration for Home Security 2 Agenda • Describe the relationship of TCP/IP and TCP and UDP ports • Explain the role and function of a NAT enabled GWR in the customer premises network • Demonstrate the configuration of an IP surveillance camera and port forwarding © 2011 by the SCTE Router Configuration for Home Security 3 Introduction 21 23 80 Why? WAN IP 98.225.216.185 Internet Laptop Smartphone Fax HDTV / 3DTV eMTA STB / DVR / PVR Wireless GWR remote devices Printer Desktop PC Cordless Analog Phone LAN IP 192.168.1.x/24 © 2011 by the SCTE Router Configuration for Home Security 5 What is TCP/IP? © 2011 by the SCTE Router Configuration for Home Security 6 TCP/IP • Ubiquitous Communication Protocol • Suite of protocols (65,535) • Client / Server model © 2011 by the SCTE Internet Cable Operator Router Configuration for Home Security 7 TCP/IP • Internet devices have at least one IP address – e.g., 192.168.1.120 • TCP/IP defined 216 ports (65,535) per IP address • Devices send data using port number from source to destination © 2011 by the SCTE Router Configuration for Home Security 8 What is a port (socket)? • TCP/IP uses an abstract destination point called a protocol port. • Ports are identified by a positive integer value, e.g. 80. • Operating Systems provide some mechanism that processes use to specify a port. TCP/IP © 2011 by the SCTE 53 DNS port 443 SSL port 80 HTTP port CM/eMTA GWR Router Configuration for Home Security 9 Port Numbers http://www.iana.org/assignments/port-numbers 0 = no port has been allocated Well-known ports 0 – 1023 HTTP, FTP, SSL, Telnet, SSH, DNS, etc… Registered ports or vendor-specific applications 1024 to 49,151 Dynamically or Private Ports 49,152 to 65535 © 2011 by the SCTE Router Configuration for Home Security 10 Port Names DNS = 53 HTTP = 80 © 2011 by the SCTE Router Configuration for Home Security 11 What is the OSI model? © 2011 by the SCTE Router Configuration for Home Security 12 Network Model Layers DATA TCP UDP Port Numbers IPv4/6 ICMP Protocol Numbers DOCSISī/ PacketCable™ RF © 2011 by the SCTE Router Configuration for Home Security 13 User Datagram Protocol • Connectionless • Unreliable • Datagram Delivery • Video traffic © 2011 by the SCTE Source Port Destination Port Length Checksum Data Router Configuration for Home Security 14 Transmission Control Protocol • Connectionoriented • Reliable • Full-duplex • Byte-Stream • Voice & data traffic © 2011 by the SCTE Source Port Destination Port Sequence Number Acknowledgement Number offset Reser. TCP Flags Window Checksum Urgent Pointer TCP Options (if any) Data Router Configuration for Home Security 15 Common Ports http://www.iana.org/assignments/port-numbers 80 22 Application Layer Transport Layer © 2011 by the SCTE 80 Internet 22 F T P T e l n e t 21 23 S S H S M T P D N S H T T P 22 25 53 80 TCP N E T B I O S S N M P H T T P S 137139 161 443 UDP Router Configuration for Home Security 16 Network Address Translation Port Address Translation 21 23 80 What is NAT & PAT? © 2011 by the SCTE Router Configuration for Home Security 18 NAT public private side 192.168.1.123 68.10.0.171#29225 192.168.1.125 Remote PC CM Internet 192.168.1.1 192.168.1.123 iPad2 192.168.1.124 scte.org Inside © 2011 by the SCTE Inside Local IP Address 192.168.1.123 192.168.1.124 192.168.1.125 Inside Global IP Address 68.10.0.171#29225 68.10.0.171#29226 68.10.0.171#29227 Router Configuration for Home Security Outside 19 NAT © 2011 by the SCTE Router Configuration for Home Security 20 Example 21 23 80 Connect Surveillance Camera LAN IP 192.168.1.x/24 1.120 1.1 eMTA GWR 1.121 © 2011 by the SCTE Router Configuration for Home Security 22 Connect Surveillance Camera http://192.168.1.120 LAN IP 192.168.1.x/24 1.1 eMTA Wireless Setup Page GWR 1.121 © 2011 by the SCTE Router Configuration for Home Security 23 DHCP Client Table © 2011 by the SCTE Router Configuration for Home Security 24 Wireless Setup XXXXXXX © 2011 by the SCTE Router Configuration for Home Security 25 Surveillance Camera is Wireless http://192.168.1.120 LAN IP 192.168.1.x/24 1.1 eMTA Wireless Setup Page GWR 1.121 © 2011 by the SCTE Router Configuration for Home Security 26 DHCP or Static? © 2011 by the SCTE Router Configuration for Home Security 27 GWR Config http://192.168.1.1 1.1 LAN IP 192.168.1.x/24 eMTA GWR Config GWR 1.121 © 2011 by the SCTE Router Configuration for Home Security 28 Port Forwarding © 2011 by the SCTE Router Configuration for Home Security 29 Port Range Forwarding © 2011 by the SCTE Router Configuration for Home Security 30 Port Triggering Port triggering is a configuration option on a GWR with NAT to allows a host to dynamically and automatically forward a specific port back to itself. © 2011 by the SCTE Router Configuration for Home Security 31 What the inside global IP (outside)? http://www.ipchicken.com © 2011 by the SCTE Router Configuration for Home Security 32 Let’s test it! Laptop Smartphone Fax HDTV / 3DTV eMTA Broadband Connection Wireless GWR STB / DVR / PVR Printer Cordless Analog Phone Desktop PC SMC Port 10 TCP / UDP 10.1.10.2 to 10.1.10.9 are static local inside IP address © 2011 by the SCTE Router Configuration for Home Security 34 NETGEAR © 2011 by the SCTE Router Configuration for Home Security 35 You try Camera 1 8085 1024 140 Camera 2 8086 1025 141 Camera 3 8087 1026 142 192.168.1.1 98.24.56.15 .140 .141 Internet http://98.24.56.15:8085 http://98.24.56.15:8086 .142 © 2011 by the SCTE http://98.24.56.15:8087 Router Configuration for Home Security 36 Summary • Described the relationship of TCP/IP and TCP and UDP ports • Explained the role and function of a NAT enabled GWR in the customer premises network • Demonstrated the configuration of an IP surveillance camera and port forwarding © 2011 by the SCTE Router Configuration for Home Security 37
