network:operational_modes [IG Manual]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Operational modes ======

By default the Internet Gate is a router. It can however also work in other modes, see below. You select operational mode on the [[web GUI:Network page]].

**Operational modes:**

===== Router =====
Router, NAT and firewall. The unit is placed inbetween the Internet and your computers. [[wp>Router]] [[wp>NAT]] [[wp>Firewall_(computing)|firewall]]

Once operational modes Telephone Adapter or any of the SIParator modes has been selected the only way to get back to Router mode is to perform a reset to factory defaults. To save your SIP configuration you can backup your settings on the Administrator page before the reset, and read them back on the SIP pages after it.

===== Telephone Adapter =====
ATA-box converting your analogue phone into a SIP VoIP phone. The unit is placed between an existing firewall (or directly to Internet) and an analogue phone. [[wp>Analog_telephone_adapter|ATA-box]]

NOTE: The unit's ET0((Units without ET0 port use ET4 port as UPLINK)) port becomes an UPLINK port and shall be connected to your existing local network. The unit's ET1-ET4 ports become a switched hub allowing connection of PC-s to your existing local network. The wireless (AIR) interface remains NAT-ed to a separate subnet.

===== SIParator =====
(requires purchase of [[:license]]) SIP- and RTP-proxy allowing SIP clients behind a non-SIP-aware firewall to connect to the Internet. The unit is placed in parallel with your existing firewall.

{{:network:siparator.jpg|}}

NOTE: The unit's WAN interface shall be connected to the Internet and require its own global IP address. The unit's ET1 port is a LAN port and shall be connected to your LAN.
In SIParator mode the following configuration has to be made:
  * Set ET1 IP address to a free unused IP address on your LAN.
  * Turn off DHCP server on the unit's ET1 port.
  * All SIP clients on the LAN must be setup to use the IP address of the unit's ET1 port as their outbound SIP proxy.

===== WAN SIParator 1 =====
(requires purchase of [[:license]]) Like SIParator, but bridging the WAN port to an existing firewall connected to the ET4 port, and sharing a single IP address with that unit.

{{:network:wansiparator1.jpg|}}

NOTE: Older units without ET0 port cannot be configured to WAN SIParator 1 mode.

===== WAN SIParator 2 =====
(requires purchase of [[:license]]) A bridged mode like above, but having the WAN port and the existing firewall using two separate IP addresses.

{{:network:wansiparator2.jpg|}}

The WAN SIParator 1 and WAN SIParator 2 modes, with their resp. bridge settings, are reflected on the Network Advanced page, under the box [[web_gui:advanced_network_configuration#Bridge (802.1D) WAN to ET4|"Bridge (802.1D) WAN to ET4"]].

NOTE: Older units without ET0 port cannot be configured to WAN SIParator 2 mode.

===== LAN SIParator =====
(only visible if port ET0 is used as WAN connection, requires purchase of [[:license]]) SIP- and RTP-proxy allowing SIP clients behind a non-SIP-aware firewall to connect to the Internet. The unit is placed behind the existing firewall.

{{:network:lansiparator.jpg|}}

NOTE: The unit's ET0 port becomes an UPLINK port and shall be connected to your existing local network (the existing firewall's LAN port). The unit's ET1-ET4 ports become a switched hub allowing connection of PC-s to your existing local network. The wireless (AIR) interface remains NAT-ed to a separate subnet.

In LAN SIParator mode the following configuration has to be made:
  * The outside IP address of the existing firewall (i.e. the public IP address from the ISP) has to be filled in.
  * TCP and UDP port range 35000 - 35100 is recommended for the SIP media streams.
  * The same port range must be opened in the existing firewall and redirected to the unit.
  * The SIP UDP and TCP ports 5060 must also be opened in the existing firewall and redirected to the unit.
  * All SIP clients on the LAN must be setup to use the IP address of the unit as their outbound SIP proxy.