1. Router Configuration for Home Security: Forward your Ports Presenter: Steve Harris SCTE Director Advanced Network Technologies Program Development

2. © 2011 by the SCTE2Router Configuration for Home Security LINK

3. Agenda Describe the relationship of TCP/IP and TCP and UDP ports Explain the role and function of a NAT enabled GWR in the customer premises network Demonstrate the configuration of an IP surveillance camera and port forwarding © 2011 by the SCTE3Router Configuration for Home Security

4. Introduction 21 23 80

5. Why? HDTV / 3DTV STB / DVR / PVR eMTA Wireless GWR Printer Cordless Analog Phone Desktop PC Smartphone Laptop Fax Internet remote devices LAN IP 192.168.1.x/24 WAN IP 98.225.216.185 © 2011 by the SCTE5Router Configuration for Home Security

6. What is TCP/IP? © 2011 by the SCTERouter Configuration for Home Security6

7. TCP/IP Ubiquitous Communication Protocol Suite of protocols (65,535) Client / Server model Internet Cable Operator Cable Operator © 2011 by the SCTE7Router Configuration for Home Security

8. TCP/IP Internet devices have at least one IP address – e.g., 192.168.1.120 TCP/IP defined 2 16 ports (65,535) per IP address Devices send data using port number from source to destination © 2011 by the SCTE8Router Configuration for Home Security

9. What is a port (socket)? TCP/IP uses an abstract destination point called a protocol port. Ports are identified by a positive integer value, e.g. 80. Operating Systems provide some mechanism that processes use to specify a port. 53 443 DNS port SSL port TCP/IP 80 HTTP port GWR CM/eMTA © 2011 by the SCTE9Router Configuration for Home Security

10. Port Numbers Well-known ports 0 – 1023 HTTP, FTP, SSL, Telnet, SSH, DNS, etc… Dynamically or Private Ports 49,152 to 65535 http://www.iana.org/assignments/port-numbers Registered ports or vendor-specific applications 1024 to 49,151 0 = no port has been allocated © 2011 by the SCTE10Router Configuration for Home Security

11. Port Names DNS = 53 HTTP = 80 © 2011 by the SCTE11Router Configuration for Home Security

12. What is the OSI model? © 2011 by the SCTERouter Configuration for Home Security12

13. Network Model RF DOCSIS  / PacketCable ™ IPv4/6 TCP UDP Layers ICMP DATA Port Numbers Protocol Numbers © 2011 by the SCTE13Router Configuration for Home Security

14. User Datagram Protocol Connectionless Unreliable Datagram Delivery Video traffic Source PortDestination Port LengthChecksum Data © 2011 by the SCTE14Router Configuration for Home Security

15. Transmission Control Protocol Connection- oriented Reliable Full-duplex Byte-Stream Voice & data traffic Destination Port TCP Options (if any) Data Source Port Sequence Number Acknowledgement Number offsetReser.TCP FlagsWindow ChecksumUrgent Pointer © 2011 by the SCTE15Router Configuration for Home Security

16. UDPTCP Common Ports 80 22 Internet 218023222553161443 Application Layer Transport Layer © 2011 by the SCTE16Router Configuration for Home Security http://www.iana.org/assignments/port-numbers 137- 139

17. Network Address Translation Port Address Translation 21 23 80

18. What is NAT & PAT? © 2011 by the SCTERouter Configuration for Home Security18

19. NAT © 2011 by the SCTERouter Configuration for Home Security19 192.168.1.123 iPad2 192.168.1.124 192.168.1.1 192.168.1.125 Inside Outside 192.168.1.12368.10.0.171#29225 Internet Inside Local IP Address 192.168.1.123 192.168.1.124 192.168.1.125 Inside Global IP Address 68.10.0.171#29225 68.10.0.171#29226 68.10.0.171#29227 scte.org private side public Remote PC CM

20. NAT © 2011 by the SCTE20Router Configuration for Home Security

21. Example 21 23 80

22. Connect Surveillance Camera © 2011 by the SCTERouter Configuration for Home Security22 GWR eMTA LAN IP 192.168.1.x/24 1.120 1.121 1.1

23. Connect Surveillance Camera © 2011 by the SCTERouter Configuration for Home Security23 GWR eMTA LAN IP 192.168.1.x/24 1.121 1.1 http://192.168.1.120 Wireless Setup Page

24. DHCP Client Table © 2011 by the SCTERouter Configuration for Home Security24

25. Wireless Setup XXXXXXX © 2011 by the SCTE25Router Configuration for Home Security

26. Surveillance Camera is Wireless © 2011 by the SCTERouter Configuration for Home Security26 GWR eMTA LAN IP 192.168.1.x/24 1.121 1.1 http://192.168.1.120 Wireless Setup Page

27. DHCP or Static? © 2011 by the SCTERouter Configuration for Home Security27

28. GWR Config © 2011 by the SCTERouter Configuration for Home Security28 GWR eMTA LAN IP 192.168.1.x/24 1.121 1.1 http://192.168.1.1 GWR Config

29. Port Forwarding © 2011 by the SCTE29Router Configuration for Home Security

30. Port Range Forwarding © 2011 by the SCTE30Router Configuration for Home Security

31. Port Triggering Port triggering is a configuration option on a GWR with NAT to allows a host to dynamically and automatically forward a specific port back to itself. © 2011 by the SCTE31Router Configuration for Home Security

32. What the inside global IP (outside)? © 2011 by the SCTERouter Configuration for Home Security32 http://www.ipchicken.com

33. HDTV / 3DTV STB / DVR / PVR eMTA Broadband Connection Wireless GWR Printer Cordless Analog Phone Desktop PC Smartphone Laptop Fax Let’s test it!

34. SMC © 2011 by the SCTERouter Configuration for Home Security34 10.1.10.2 to 10.1.10.9 are static local inside IP address TCP / UDP Port 10

35. NETGEAR © 2011 by the SCTERouter Configuration for Home Security35

36. You try © 2011 by the SCTERouter Configuration for Home Security36 Internet 192.168.1.198.24.56.15 Camera 1 80851024140.140.141.142 Camera 2 8086 1025 141 Camera 38087 1026 142 http://98.24.56.15:8085 http://98.24.56.15:8086 http://98.24.56.15:8087

37. Summary Described the relationship of TCP/IP and TCP and UDP ports Explained the role and function of a NAT enabled GWR in the customer premises network Demonstrated the configuration of an IP surveillance camera and port forwarding © 2011 by the SCTE37Router Configuration for Home Security