Configure for applications behind SUA

Tested SUA/NAT Applications (e.g., Cu-SeeMe, ICQ, NetMeeting)

- Introduction

Generally, SUA makes your LAN appear as a single machine to the outside world. LAN users are invisible to outside users. However, some applications such as Cu-SeeMe, and ICQ will need to connect to the local user behind the Prestige. In such case, a SUA server must be entered in menu 15.2.1 to forward the incoming packets to the true destination behind SUA. Generally, we do not need extra settings of menu 15.2.1 for an outgoing connection. But for some applications we need to configure the menu 15.2.1 to make the outgoing connection work. After the required menu 15.2.1 settings are completed the internal server or client applications can be accessed by using the Prestige's WAN IP address.

- SUA Supporting Table

The following are the required menu 15.2.1 settings for the various applications running SUA mode.

ZyXEL SUA Supporting Table1

Application | Required Settings in Menu 15.2.1 Port/IP
Outgoing Connection | Incoming Connection
HTTP | None | 80/client IP
FTP | None | 21/client IP
TELNET | None | 23/client IP (and remove Telnet filter in WAN port)
POP3 | None | 110/client IP
SMTP | None | 25/client IP
mIRC | None for Chat. For DCC, please set Default/Client IP | .
Windows PPTP | None | 1723/client IP
ICQ 99a | None for Chat. For DCC, please set: ICQ -> preference -> connections -> firewall and set the firewall time out to 80 seconds in firewall setting. | Default/client IP
ICQ 2000b | None for Chat | None for Chat
ICQ Phone 2000b | None | 6701/client IP
Cornell 1.1 Cu-SeeMe | None | 7648/client IP
White Pine 3.1.2 Cu-SeeMe2 | 7648/client IP & 24032/client IP | Default/client IP
White Pine 4.0 Cu-SeeMe | 7648/client IP & 24032/client IP | Default/client IP
Microsoft NetMeeting 2.1 & 3.013 | None | 1720/client IP 1503/client IP
Cisco IP/TV 2.0.0 | None | .
RealPlayer G2 | None | .
VDOLive | None | .
Quake1.064 | None | Default/client IP
QuakeII2.305 | None | Default/client IP
QuakeIII1.05 beta | None | .
StartCraft. | 6112/client IP | .
Quick Time 4.0 | None | .
pcAnywhere 8.0 | None | 5631/client IP 5632/client IP 22/client IP
IPsec (ESP tunneling mode) | None (one client only) | Default/Client
Microsoft Messenger Service 3.0 | 6901/client IP | 6901/client IP
Microsoft Messenger Service 4.6/ 4.7/ 5.0 (none UPnP)6 | None for Chat, File transfer ,Video and Voice | None for Chat, File transfer, Video and Voice
Net2Phone | None | 6701/client IP
Network Time Protocol (NTP) | None | 123 /server IP
Win2k Terminal Server | None | 3389/server IP
Remote Anything | None | 3996 - 4000/client IP
Virtual Network Computing (VNC) | None | 5500/client IP 5800/client IP 5900/client IP
AIM (AOL Instant Messenger) | None for Chat and IM | None for Chat and IM
e-Donkey | None | 4661 - 4662/client IP
POLYCOM Video Conferencing | None | Default/client IP
iVISTA 4.1 | None | 80/server IP
Microsoft Xbox Live7 | None | N/A

1 Since SUA enables your LAN to appear as a single computer to the Internet, it is not possible to configure similar servers on the same LAN behind SUA.

2 Because White Pine Cu-SeeMe uses dedicate ports (port 7648 & port 24032) to transmit and receive data, therefore only one local Cu-SeeMe is allowed within the same LAN.

3 In SUA mode, only one local NetMeeting user is allowed because the outsiders can not distinguish between local users using the same internet IP.

4 Certain Quake servers do not allow multiple users to login using the same unique IP, so only one Quake user will be allowed in this case. Moreover, when a Quake server is configured behind SUA, Prestige will not be able to provide information of that server on the internet.

5 Quake II has the same limitations as that of Quake I.

6 Prestige 650 series support MSN Messenger 4.6/ 4.7/ 5.0 video/ voice pass-through NAT since the following firmware version. In addition, for the Windows OS supported UPnP (Universal Plug and Play), such as Windows XP and Windows ME, UPnP supported in Prestige is a alternative solution to pass through MSN Messenger video/ voice traffic. The following firmware support UPnP function as well. For mote detail, please refer to UPnP application note.

P650R-11 since version 3.40(ES.4)
P650R-13 since version 3.40(FU.4)
P650H-11 since version 3.40(FR.2)
P650H-13 since version 3.40(FV.2)
P650HW-11 since version 3.40(GG.2)
P650-HW-13 since version 3.40(GH.2)

7 Prestige 650 series support Microsoft Xbox Live since the following firmware version. If your Prestige firmware is too old to support such function, you may have a work-around solution, please refer to ZyXEL website -> Support -> Xbox Live service http://www.zyxel.com/support/xbox.htm

P650R-11 since version 3.40(ES.5)
P650R-13 since version 3.40(FU.5)
P650H-11 since version 3.40(FR.2)
P650H-13 since version 3.40(FV.3)
P650HW-11 since version 3.40(GG.2)
P650-HW-13 since version 3.40(GH.2)

- Notes

1. In 1.5x and 2.2x versions, if a SMTP (port 25) server is configured in menu 15 the POP3 ( port 110) packets will also be forwarded to the same SMTP server by the Prestige automatically. There is no need to configure additional POP3 server in menu 15, unlike 2.2x and 1.5x versions, SMTP & POP3 servers are handled by the Prestige separately in V2.3 and above versions. So, two ports (25 & 110) must be configured in menu 15 to support both SMTP and POP3 services.
2. NetMeeting, RealPlayer, IP/TV and Quick Time are supported in V2.3 and above versions.

- Configurations

For example, if the workstation operating Cu-SeeMe has an IP of 192.168.1.34, then the default SUA server must be set to 192.168.1.34. The peer Cu-SeeMe user can reach this workstation by using Prestige's WAN IP address which can be obtained from menu 24.1.

`Menu 15.2.1 - NAT Server Setup (Used for SUA Only)
Rule Start Port No. End Port No. IP Address
---------------------------------------------------
1. Default Default 192.168.1.34
2. 0 0 0.0.0.0
3. 0 0 0.0.0.0
4. 0 0 0.0.0.0
5. 0 0 0.0.0.0
6. 0 0 0.0.0.0
7. 0 0 0.0.0.0
8. 0 0 0.0.0.0
9. 0 0 0.0.0.0
10. 0 0 0.0.0.0
11. 0 0 0.0.0.0
12. 0 0 0.0.0.0`

`Press ENTER to Confirm or ESC to Cancel:
`

All contents copyright (c) 2002 ZyXEL Communications Corporation.