74 Chapter 4 User NotesNN47922-500Allowing remote management of a LAN-connected BCM501 Create the appropriate NAT server rules to add the BCM50.Go to SUA/NAT / SUA Server, and create two server rules for HTTPS andElement Manager access:One named BCM_HTTPS, with port number 443, and the IP address of theBCM50One named BCM_EM, with the port number 5989, and the IP address of theBCM50Note: In DHCP Server mode, the BCM50 IP address will be the lowestaddress in the pool.2 Create the appropriate Firewall rules to add BCM50 access.Go to FIREWALL / Summary, and create two WAN-to-LAN firewall rules:One rule allowing access from allowed remote computer IP addresses, to theBCM50 IP address, for service type HTTPS(TCP:443)One rule allowing access from allowed remote computer IP addresses, to theBCM50 IP address, for custom port TCP:5989Setting up the router for guest accessThe recommended approach to provide guest access is by creating an IP Alias,and using static addressing for the corporate equipment, to make it a member ofthe defined Alias subnet. Then use firewall rules to restrict access of the guestequipment. NOTE: if a BCM50 is used, it will also need to be assigned a static IPaddress.1 Go to LAN / IP Alias, and Enable IP Alias 1.2 Define a subnet for the corporate equipment.3 Statically assign addresses to the corporate equipment that are within the IPAlias subnet.4 Set up LAN / IP to enable DHCP Server, with an address range that will beused for guest equipment.
