Tested SUA/NAT Applications (e.g., Cu-SeeMe, ICQ, NetMeeting)


Generally, SUA makes your LAN appear as a single machine to the outside world. LAN users are invisible to outside users. However, some applications such as Cu-SeeMe, and ICQ will need to connect to the local user behind the Prestige. In such case, a SUA server must be entered in menu 15 to forward the incoming packets to the true destination behind SUA. Generally, we do not need extra settings of menu 15 for an outgoing connection. But for some applications we need to configure the menu 15 to make the outgoing connection work. After the required menu 15 settings are completed the internal server or client applications can be accessed by using the Prestige's WAN IP address.
 

The following are the required menu 15 settings for the various applications running SUA mode.

ZyXEL SUA Supporting Table1

Application 

Required Settings in Menu 15
Port/IP

Outgoing Connection

Incoming Connection

HTTP

None

80/client IP

FTP

None

21/client IP

TELNET

None

23/client IP
(and remove Telnet filter in WAN port)

POP3

None

110/clinet IP

SMTP

None

25/client IP

mIRC

None for Chat.
For DCC, please set
Default/Client IP

.

Windows PPTP 

None

1723/client IP

ICQ 99a

None for Chat.
For DCC, please set:
ICQ -> preference -> connections -> firewall and set the firewall time out to 80 seconds in firewall setting.

Default/client IP

 

 

ICQ 2000b

None for Chat

None for Chat

ICQ Phone 2000b

None

6701/client IP

Cornell 1.1 Cu-SeeMe

None

7648/client IP

White Pine 3.1.2 Cu-SeeMe2

7648/client IP &
24032/client IP 

Default/client IP

White Pine 4.0 Cu-SeeMe

7648/client IP &
24032/client IP

Default/client IP

Microsoft NetMeeting 2.1 & 3.013

None

1720/client IP
1503/client IP

Cisco IP/TV 2.0.0

None

.

RealPlayer G2

None

.

VDOLive

None

.

Quake1.064

None

Default/client IP

QuakeII2.305

None

Default/client IP

QuakeIII1.05 beta

None

.

StartCraft.

6112/client IP

.

Quick Time 4.0

None

.

pcAnywhere 8.0

None

5631/client IP
5632/client IP
22/client IP

IPsec (ESP tunneling mode,
           NAT-T tunnel/transport)

None (one client only)

Default/Client

Microsoft Messenger Service 3.0 

6901/client IP

6901/client IP

Microsoft Messenger Service 4.6/ 4.7/ 5.0 (none UPnP)6 

None for Chat, File transfer ,Video and Voice

None for Chat, File transfer, Video and Voice

Net2Phone

None

6701/client IP

Network Time Protocol (NTP)

None

123 /server IP

Win2k Terminal Server

None

3389/server IP

Remote Anything

None

3996 - 4000/client IP

Virtual Network Computing (VNC)

None

5500/client IP
5800/client IP
5900/client IP

AIM (AOL Instant Messenger)

None for Chat and IM

None for Chat and IM

e-Donkey

None

4661 - 4662/client IP

POLYCOM Video Conferencing

None

Default/client IP

iVISTA 4.1

None

80/server IP

Microsoft Xbox Live7

None

N/A

1 Since SUA enables your LAN to appear as a single computer to the Internet, it is not possible to configure similar servers on the same LAN behind SUA. For example, you can have two WEB servers using TCP:80 in the same LAN. They must have different port numbers.

2 Because White Pine Cu-SeeMe uses dedicate ports (port 7648 & port 24032) to transmit and receive data, therefore only one local Cu-SeeMe is allowed within the same LAN.

3 In SUA mode, the remote NetMeeting user is allowed to connect only one local user, it is because the outsiders can not distinguish between local users using the same internet IP. However, the local user can connect to multiple remote users.

4 Certain Quake servers do not allow multiple users to login using the same unique IP, so only one Quake user will be allowed in this case. Moreover, when a Quake server is configured behind SUA, Prestige will not be able to provide information of that server on the internet.

5 Quake II has the same limitations as that of Quake I.  

6 Prestige series support MSN Messenger 4.6/ 4.7/ 5.0 video/ voice pass-through NAT. In addition, for the Windows OS supported UPnP (Universal Plug and Play), such as Windows XP and Windows ME, UPnP supported in Prestige is an alternative solution to pass through MSN Messenger video/ voice traffic. The following model and firmware support UPnP function. For mote detail, please refer to UPnP application note.

7 Prestige series support Microsoft Xbox Live since V3.52 firmware version. If your firmware is too old to support such function, you may have a work-around solution, please refer to ZyXEL website -> Support -> Xbox Live service http://www.zyxel.com/support/xbox.htm 

  1. In 1.5x and 2.2x versions, if a SMTP (port 25) server is configured in menu 15 the POP3 ( port 110) packets will also be forwarded to the same SMTP server by the Prestige automatically. There is no need to configure additional POP3 server in menu 15, unlike 2.2x and 1.5x versions, SMTP & POP3 servers are handled by the Prestige separately in V2.3 and above versions. So, two ports (25 & 110) must be configured in menu 15 to support both SMTP and POP3 services.
  2. NetMeeting, RealPlayer, IP/TV and Quick Time are supported in V2.3 and above versions.

For example, if the workstation operating Cu-SeeMe has an IP of 192.168.1.34, then the default SUA server must be set to 192.168.1.34. The peer Cu-SeeMe user can reach this workstation by using Prestige's WAN IP address which can be obtained from menu 24.1.  


                         Menu 15 - SUA Server Setup
 

                     Port #         IP  Address
                     ------       ---------------
                   1.Default      192.168.1.34
                   2. 0           0.0.0.0 
                   3. 0           0.0.0.0
                   4. 0           0.0.0.0
                   5. 0           0.0.0.0
                   6. 0           0.0.0.0
                   7. 0           0.0.0.0
                   8. 0           0.0.0.0

              

 


All contents copyright (c) 2006 ZyXEL Communications Corporation.