Download
1 / 37
370 likes | 514 Vues
Router Configuration for Home Security:. Forward your Ports Presenter: Steve Harris SCTE Director Advanced Network Technologies Program Development. LINK. Agenda. Describe the relationship of TCP/IP and TCP and UDP ports
E N D
Router Configuration for Home Security: Forward your Ports Presenter: Steve Harris SCTE Director Advanced Network Technologies Program Development
LINK Router Configuration for Home Security
Agenda • Describe the relationship of TCP/IP and TCP and UDP ports • Explain the role and function of a NAT enabled GWR in the customer premises network • Demonstrate the configuration of an IP surveillance camera and port forwarding Router Configuration for Home Security
Introduction 21 23 80
Why? HDTV / 3DTV Laptop Internet WAN IP98.225.216.185 Smartphone Fax STB / DVR / PVR Wireless GWR eMTA remote devices Printer Cordless Analog Phone Desktop PC LAN IP 192.168.1.x/24 Router Configuration for Home Security
What is TCP/IP? Router Configuration for Home Security
TCP/IP Internet • Ubiquitous Communication Protocol • Suite of protocols (65,535) • Client / Server model Cable Operator Router Configuration for Home Security
TCP/IP • Internet devices have at least one IP address • e.g., 192.168.1.120 • TCP/IP defined 216 ports (65,535) per IP address • Devices send data using port number from source to destination Router Configuration for Home Security
What is a port (socket)? • TCP/IP uses an abstract destination point called a protocol port. • Ports are identified by a positive integer value, e.g. 80. • Operating Systems provide some mechanism that processes use to specify a port. 53 DNS port 443 SSL port CM/eMTA 80 HTTP port GWR TCP/IP Router Configuration for Home Security
Port Numbers http://www.iana.org/assignments/port-numbers 0 = no port has been allocated Well-known ports 0 – 1023 HTTP, FTP, SSL, Telnet, SSH, DNS, etc… Registered ports or vendor-specific applications 1024 to 49,151 Dynamically or Private Ports 49,152 to 65535 Router Configuration for Home Security
Port Names DNS = 53 HTTP = 80 Router Configuration for Home Security
What is the OSI model? Router Configuration for Home Security
Network Model DATA Layers TCP UDP Port Numbers Protocol Numbers IPv4/6 ICMP DOCSIS/ PacketCable™ RF Router Configuration for Home Security
Source Port Destination Port Length Checksum Data User Datagram Protocol • Connectionless • Unreliable • Datagram Delivery • Video traffic Router Configuration for Home Security
Transmission Control Protocol • Connection-oriented • Reliable • Full-duplex • Byte-Stream • Voice & data traffic Source Port Destination Port Sequence Number Acknowledgement Number offset Reser. TCP Flags Window Checksum Urgent Pointer TCP Options (if any) Data Router Configuration for Home Security
Common Ports http://www.iana.org/assignments/port-numbers 80 80 Internet 22 22 FTP Telnet SSH SMTP DNS HTTP NETBIOS SNMP HTTPS Application Layer 137- 139 21 23 22 25 53 80 161 443 Transport Layer TCP UDP Router Configuration for Home Security
Network Address TranslationPort Address Translation 21 23 80
What is NAT & PAT? Router Configuration for Home Security
NAT public private side 192.168.1.123 68.10.0.171#29225 192.168.1.125 Remote PC Internet CM 192.168.1.1 192.168.1.123 iPad2 192.168.1.124 scte.org Inside Local IP Address 192.168.1.123 192.168.1.124 192.168.1.125 Inside Global IP Address 68.10.0.171#29225 68.10.0.171#29226 68.10.0.171#29227 Inside Outside Router Configuration for Home Security
NAT Router Configuration for Home Security
Example 21 23 80
Connect Surveillance Camera LAN IP 192.168.1.x/24 1.120 1.1 GWR eMTA 1.121 Router Configuration for Home Security
Connect Surveillance Camera LAN IP 192.168.1.x/24 http://192.168.1.120 1.1 eMTA GWR Wireless Setup Page 1.121 Router Configuration for Home Security
DHCP Client Table Router Configuration for Home Security
Wireless Setup 1. 2. 3. 4. XXXXXXX Router Configuration for Home Security
Surveillance Camera is Wireless LAN IP 192.168.1.x/24 http://192.168.1.120 1.1 eMTA GWR Wireless Setup Page 1.121 Router Configuration for Home Security
DHCP or Static? Router Configuration for Home Security
GWR Config 1.1 eMTA GWR http://192.168.1.1 LAN IP 192.168.1.x/24 GWR Config 1.121 Router Configuration for Home Security
Port Forwarding Router Configuration for Home Security
Port Range Forwarding Router Configuration for Home Security
Port Triggering Port triggering is a configuration option on a GWR with NAT to allows a host to dynamically and automatically forward a specific port back to itself. Router Configuration for Home Security
What the inside global IP (outside)? http://www.ipchicken.com Router Configuration for Home Security
Let’s test it! Laptop HDTV / 3DTV Smartphone Fax STB / DVR / PVR eMTA Broadband Connection Wireless GWR Printer Cordless Analog Phone Desktop PC
SMC TCP / UDP Port 10 10.1.10.2 to 10.1.10.9 are static local inside IP address Router Configuration for Home Security
NETGEAR Router Configuration for Home Security
You try Camera 1 8085 1024 140 Camera 2 8086 1025 141 142 1026 Camera 3 8087 192.168.1.1 98.24.56.15 Internet .140 .141 http://98.24.56.15:8085 http://98.24.56.15:8086 .142 http://98.24.56.15:8087 Router Configuration for Home Security
Summary • Described the relationship of TCP/IP and TCP and UDP ports • Explained the role and function of a NAT enabled GWR in the customer premises network • Demonstrated the configuration of an IP surveillance camera and port forwarding Router Configuration for Home Security
