Copyright: Tiny Software Inc.


Get it up and running

In This Chapter

Quick Checklist

Conflicting software

Choosing the right computer for sharing

About using DHCP server

Default gateway overview

Multi-operating systems environment (Linux, AS400, Apple)


Quick Checklist

Here is the basic list of settings and rules that, if performed, insure a successful connection of your network to the Internet. Of course a functional Internet connection is a must.

Please note: using Network Address Translation for Internet access out performs proxy technology. There are certain rules to be followed, after that you will experience the connection you would never have achieve with Proxy server.

WinRoute Lite 4.1 is the market leader in NAT based Internet sharing solutions.

Settings and rules at the WinRoute Lite 4.1 computer

1.	On a WinRoute Lite 4.1 PC - Two Interfaces (NIC's)                                                                                                                     Check that the WinRoute Lite 4.1 computer has (at least) two interfaces. One for the Internet connection and one for local /client connection. The interface for the LAN connection is 99% Ethernet card. The interface leading to the Internet might be an Ethernet adapter, DirecPC (PCI) adapter or RAS (Dial-up) lines. Providing the "bridge" between these interfaces WinRoute Lite 4.1 will connect your network to the Internet.

2.	On a WinRoute Lite 4.1 PC - Assign the LAN adapter with IP address
Make sure that you assigned the adapter leading to the local network with an IP address. Such an IP address must be from the "private range" e.g. 192.168.1.1 or 10.10.1.1 etc.

3.	On a WinRoute Lite 4.1 PC - No Gateway on the LAN interface!
Check that there is NO default gateway in the Network properties of the Ethernet interface (network card) linking to the internal network (LAN). Of course the default gateway on the Interface linking to the Internet will be set according to the details from your ISP - either it will be obtained through DHCP or assigned by you.

4.	On a WinRoute Lite 4.1 PC - Choose the right Interface to connect to the Internet!
In the Settings tab you may choose how you would like to connect to the Internet. If you use an Ethernet adapter please make sure that you chose the adapter connecting the Internet and not the adapter leading to a local network.

5.	On the client's PC - The WinRoute Lite 4.1's internal IP address is the default gateway!
The WinRoute Lite 4.1 PC acts as the DEFAULT GATEWAY for all computers in the LAN. As a result, use the IP address of the internal Network Card on the WinRoute Lite 4.1 host (e.g..192.168.1.1) as the Gateway on every internal / client computer. Set this value at each "client" computer OR use WinRoute Lite 4.1's DHCP server (recommended) that will assign this value to your workstations automatically!

6.	On the client's PC - Check DNS!
In most cases you will use WinRoute Lite 4.1's built in DNS forwarder as a DNS server for your networked computers. Make sure that WinRoute Lite 4.1's built in DNS forwarder is ON and configured. Set DNS at all workstations to WinRoute Lite 4.1's internal (LAN) IP address. If using the DHCP server for WinRoute Lite 4.1 you do not have to setup anything.

7.	In general - Use DHCP configuration!
In most cases you will use WinRoute Lite 4.1's DHCP server for automated network configuration. However if your IP address is assigned (static) double check that the pre-defined scope(s) of IP addresses are allocated. You can adjust the range to suit your needs.

8.	Routing Table Issue
Unfortunately Windows 95/98/NT operating systems are not well designed for networking. Even after setting up WinRoute Lite 4.1 with  the correct network settings you may experience some malfunctions. In this case you will need to look at the Routing Table and choose one of following:

•	fix the routes by deleting and adding them again - only for experienced users

•	remove the TCP/IP protocol from your computer completely, reboot the computer and add it back. This will fix the routing table.

See Also

Get it up and running

Conflicting software

Choosing the right computer for sharing

About using DHCP server

Default gateway overview

Multi-operating systems environment (Linux, AS400, Apple)


Conflicting software

There are several issues known about incompatible software:

WinGate

Uninstall WinGate prior to installing WinRoute Lite 4.1. Uninstall both server and client software.

SyGate

Uninstall SyGate prior to installing WinRoute Lite 4.1. Uninstall both server and client software.

MS Proxy Server

Uninstall MS Proxy Server prior to installing WinRoute Lite 4.1. Uninstall both server and client software.

All of the above mentioned proxy server softwares are using drivers that work incorrectly with the lower portions of networking protocols that are operated by WinRoute Lite 4.1.

Client software could have a negative influence on the application software (e.g. browser) making it impossible to set it up for direct access to the Internet. In fact you might think you had set it up but the installed client software would be trying to send the traffic to the proxy server.

WinRoute Lite 4.1 is a fully neutral software router/firewall that does not require any client software running on a client computers.

See Also

Get it up and running

Quick Checklist

Choosing the right computer for sharing

About using DHCP server

Default gateway overview

Multi-operating systems environment (Linux, AS400, Apple)


Choosing the right computer for sharing

WinRoute Lite 4.1 MUST ALWAYS run on the computer that is connected to the Internet - through the network card, cable, DSL modem, dial-up link or a router.

WinRoute Lite 4.1 always acts as the gateway between the two (or more) networks where each network is represented by one interface. These interfaces may be two or more network cards or a network card and a RAS adapter (in case of Dial-up).

In another popular configuration you would have a RAS line (or Dial-Up Networking connection) as the Internet interface and the NIC as the interface linking to your LAN.

See Also

Get it up and running

Quick Checklist

Conflicting software

About using DHCP server

Default gateway overview

Multi-operating systems environment (Linux, AS400, Apple)


About using DHCP server

Using a DHCP server can significantly simplify configuration of the workstations within your LAN. When using the DHCP server, the only setting you have to perform on the client workstations is to set them to get an IP address dynamically from the DHCP server. (This setting comes by default when adding the TCP/IP protocol in network properties in Windows).

You may use either WinRoute Lite 4.1's built-in DHCP server or any third party DHCP server within your network. Make sure that only ONE DHCP server is running on your network at a time!

See Also

Get it up and running

Quick Checklist

Conflicting software

Choosing the right computer for sharing

Default gateway overview

Multi-operating systems environment (Linux, AS400, Apple)


Default gateway overview

WinRoute Lite 4.1 acts as a router. As such it requires two basic TCP/IP settings for each computer in your network:

•	Assign an IP address – either manually or from a DHCP server (e.g. WinRoute Lite 4.1’s DHCP server)

•	Set default gateway (either manually or have it set automatically when using a DHCP server).

•	The Default gateway on each computer accessing the Internet through the WinRoute Lite 4.1 computer, must be set to the IP address of the Ethernet interface on the WinRoute Lite 4.1 computer that links to the LAN (local) .  If you use a DHCP server all settings are provided automatically.

Example:

The client computer has an IP address 10.10.10.23 while WinRoute Lite 4.1 PC has two interfaces, one linking to the cable modem with an IP from the ISP (like 203.23.14.232) and another one linking to the private network (10.10.10.1). The default gateway at 10.10.10.23 computer will be set to 10.10.10.1. The DHCP server will set it up for you automatically.

•	Note  1: When creating IP address space within your local network you must use the IP address from the same subnet. i.e., if the subnet mask you use is 255.255.255.0 then all addresses must be from 10.10.10.1 to 10.10.10.255.

•	Note 2: You can have more than one network connected to the Internet through WinRoute Lite 4.1. You can have more Interfaces in the WinRoute Lite 4.1 computer, one for each network. Then each of these interfaces (their IP address) represents the default gateway for the rest of the network connected to it.

See Also

Get it up and running

Quick Checklist

Conflicting software

Choosing the right computer for sharing

About using DHCP server

Multi-operating systems environment (Linux, AS400, Apple)


Multi-operating systems environment (Linux, AS400, Apple)

Connecting multiple operating systems environments (Linux, Unix, AS400, Apple)

WinRoute Lite 4.1 is suitable for connecting multiple operating system type environments to the Internet. WinRoute Lite 4.1 acts as a software router. As such, it supports any standard TCP/IP environments. NOTE: A Windows based operating system must host the Winroute lite 4.1 application. Therefore, at least one Windows 95/98/NT based computer is required in the Winroute lite 4.1 network. The host cannot be a UNIX system. However, UNIX can operate as a client system.

See Also

Get it up and running

Quick Checklist

Conflicting software

Choosing the right computer for sharing

About using DHCP server

Default gateway overview


Connecting WinRoute Lite to the Internet

In This Chapter

Cable modem (Bi-directional), DSL, T1, DirecPC or LAN connection

Dial-up or ISDN connection


Cable modem (Bi-directional), DSL, T1, DirecPC or LAN connection

Cable modem, DSL (not PPPoE), T1 or LAN connections require two Network Card Interfaces (NIC) included in the WinRoute Lite 4.1’s computer. One NIC would link to the Internet (cable etc. modem) while another NIC would link to the internal network. UNI-directional cable modems (modem up, cable down) are not supported with WinRoute Lite 4.1. We recommend to look at WinRoute Pro at www.tinysoftware.com.

Before Installation

Make sure that none of your computers has any sort of other Proxy Server software or Proxy Client software installed. Especially make sure that you do not run applications like MS Internet connection Sharing, SyGate, WinGate, WinProxy or MS Proxy. These applications are using very non-standard technology in terms of Internet sharing and typically causes problems.

If you do not have fresh installation of Windows we recommend to take TCP/IP protocol out of your PC, restart the computer and bring it back. This would clean the routing table in your operating system.

WinRoute Lite 4.1/Network Configuration

1.	Before you will configure WinRoute Lite 4.1 make sure that you have two interfaces in your WinRoute Lite 4.1 PC (one linking to cable or DSL modem and another one linking to your LAN) and you can connect to the Internet from that PC.

2.	Check TCP/IP configuration of the interface linking to your LAN. It has to have private class (non routable) IP address assigned (for example 192.168.1.1) It must not have default gateway set up (in other words - no default gateway!).

3.	Set TCP/IP settings your client computers to get IP address automatically from DHCP server.

4.	In WinRoute Lite 4.1 go to menu Settings and choose that you will connect to the Internet via 2nd network adapter card interface (T1, Cable modem, DSL, LAN, DirecPC, etc).

This is all you have to do. You may further customize certain settings according to your specific needs. You may customize: scope of assigned IP addresses, whether you will allow to share files across WinRoute Lite 4.1 etc.

To customize other settings go to menu Settings and click on Advanced button. Refer to chapter Advanced Settings for further explanation.

•	Note! If you would follow up steps 1.-4. in WinRoute Lite 4.1/Network configuration and the connection would not work make sure that you uninstalled other sharing software and that you performed Uninstall/install of TCP/IP (routing table issue).

DirecPC

If you have DirecPC connection you will choose 2nd Ethernet adapter choice too and in combo select the DirecPC card. You will have to set up DirecPC software to dial out. Other settings are same as above mentioned settings for Ethernet card connection.

See Also

Connecting WinRoute Lite to the Internet

Dial-up or ISDN connection


Dial-up or ISDN connection

Dial-up or ISDN connection

If you have dial-up 56K or ISDN access to the Internet WinRoute Lite 4.1 must run on a computer that includes:

 Modem attached to the phone or ISDN line

 Network Card Interface (NIC) leading to the internal network.

Before the connection

Before connecting to the Internet, double check the following:

 TCP/IP protocol is properly installed and configured (see checklist or Setting up network chapter).

 Dial-up networking (Windows 95/98) or RAS service (WindowsNT) is properly installed and configured.

 Modem is attached to the WinRoute Lite 4.1 host PC.

WinRoute Lite 4.1 uses Dial-up Networking or RAS services available in your operating system for your Internet connection.  It is recommended to connect the Internet from the computer where WinRoute Lite 4.1 is to be installed PRIOR to installing and running WinRoute to assure that the connection is correctly configured and dial-up networking or RAS properly working.

Before Installation

Make sure that none of your computers has any sort of other Proxy Server software or Proxy Client software installed. Especially make sure that you do not run applications like MS Internet connection Sharing, SyGate, WinGate, WinProxy or MS Proxy. These applications are using very non-standard technology in terms of Internet sharing and typically causes problems.

Routing table clean-up

If you do not have fresh installation of Windows we recommend to take TCP/IP protocol out of your PC, restart the computer and bring it back. This would clean the routing table in your operating system.

WinRoute Lite 4.1 Configuration

1.	Before you will configure WinRoute Lite 4.1 make sure that you have modem attached to your WinRoute Lite 4.1 PC as well as Ethernet card for the LAN connectivity

2.	Check TCP/IP configuration of the Ethernet interface linking to your LAN. It has to have private class (non routable) IP address assigned (for example 192.168.1.1) It must not have default gateway set up (in other words - no default gateway!).

3.	In WinRoute Lite 4.1 go to menu Settings and choose that you will connect to the Internet via Dial-UP

4.	Choose one of pre-configured RAS (Dial-up networking for 95/98 users) connections and put the user name and password for that connection. You may also create the new connection.

This is all you have to do. You may further customize certain settings according to your specific needs. You may customize: scope of assigned IP addresses, whether you will allow to share files across WinRoute Lite 4.1 etc.

Client computers configuration

Automatic configuration - recommended: Set TCP/IP settings your client computers to get IP address automatically from DHCP server.

Manual configuration - not recommended: Assign each computer with its own IP address. Set Default Gateway of each computer as the IP address of WinRoute computer. Set DNS of each computer as either IP address of WinRoute computer or according to your ISP.

To customize other settings go to menu Settings and click on Advanced button. Refer to chapter Advanced Settings for further explanation.

•	Note! If you would follow up steps in WinRoute Lite 4.1/Network configuration and the connection would not work make sure that you uninstalled other sharing software and that you performed Uninstall/install of TCP/IP (routing table issue).

Dial-on-Demand issue

WinRoute Lite 4.1 will automatically initiate the connection based on the traffic (packets) coming from local network (computers behind WinRoute Lite 4.1). However the connection will not established automatically based on the activity from the computer where WinRoute Lite 4.1 is installed.

If dial on demand would not work most likely TCP/IP routing table is corrupted by Windows. To fix it follow up steps described above in Routing table clean-up paragraph.

If WinRoute Lite 4.1 continuously establishes the connection

Check the applications in your network. Most likely there there would be some application producing either DNS requests or packets that intend to go to the Internet. Disable such application. If you cannot disable such application you may consider to look at WinRoute Pro at www.tinysoftware.com.

See Also

Connecting WinRoute Lite to the Internet

Cable modem (Bi-directional), DSL, T1, DirecPC or LAN connection


Inside WinRoute Lite

In This Chapter

The Architecture

How NAT works

Port Mapping

DHCP Server


The Architecture

WinRoute Lite 4.1 Architecture

For advanced Internetworking, it's helpful to understand how WinRoute Lite 4.1 works. From the explanation and examples listed below, WinRoute Lite 4.1 proves to be an excellent solution for almost any network configuration.

1.	Total Security
WinRoute Lite 4.1 works below the TCP stack at the IP level. In other words - it captures both outgoing and incoming packets BEFORE they have the chance to enter your computer (TCP stack).

The advanced design makes WinRoute Lite 4.1's security almost unbreakable

2.	Total Protocol Support
WinRoute Lite 4.1 is a software ROUTER.  Winroute lite 4.1 allows almost any Internet protocol to pass through. At the same time Winroute lite 4.1 checks each packet utilizing the advanced security and firewall features inherent in the software design.  With systems running Windows 95 and 98, Winroute lite 4.1 handles the routing of packets. On systems running Windows NT, the NT operating system performs the routing and WinRoute Lite 4.1 manages the NAT functionality and other data.

3.	Total Flexibility
WinRoute Lite 4.1 performs NAT (Network Address Translation) on the interfaces of your choice automatically. In another words - choosing the interface for Internet connection you will choose automatically on which interface the NAT will be performed. NAT should be performed always on the Interface linking to the Internet.

See Also

Inside WinRoute Lite

How NAT works

Port Mapping

DHCP Server


How NAT works

Network Address Translation (NAT) is a process that modifies packets sent from/to the local area network to/from the Internet or other IP based networks.

On the way out
Packets passing through the address translator engine on the way from the LAN are changed or translated to look as if they came from the computer running NAT (this computer is directly connected to the Internet). What actually happens is the "source" IP address is changed in the header and replaced by (public) IP address of "NAT" computer.

The NAT engine also creates a record table of information for each packet that passed through to the Internet.

On the way back
Packets passing through the NAT on the way TO the LAN are searched against to the records kept by the NAT engine. There the "destination" IP address is changed (based on the records in the database) back to the specific internal private class IP address in order to reach the computer on the LAN .

Remember the packet came with the public IP address of the NAT computer as a "destination" originally. The NAT engine had to change this information in order to deliver the packet to the correct recipient within the local network.

See Also

Inside WinRoute Lite

The Architecture

Port Mapping

DHCP Server


Port Mapping

WinRoute Lite 4.1 performs NAT, which makes the protected network inaccessible from outside. By using port mapping, public services like a WWW server or an FTP server, and others running on your private network may become accessible from the Internet.

How Port Mapping Works

Each packet received from the outside network (from the Internet) is checked as to whether its attributes (that is the protocol, destination port, and destination IP address) comply with an entry in the port mapping table (Port Number, IP Address, and Protocol). If the arriving packet meets the desired criteria, the packet is modified and sent to the protected network, to the IP address defined as the "Local computer IP" in the table's entry and to the port defined as "Port Number".

For example you are running a web server at internal IP 192.168.1.3 and you would like to allow users from the Internet to access it. There will be requests from Internet users, coming to your WinRoute Lite 4.1 computer with an external IP address that is equal to a DNS record for your web server www.your domain.com. As all requests to your web server are coming in on port 80 you will set up port mapping to say that all TCP communication on port 80 will be diverted to the internal IP address 192.168.1.3.

Port Mapping Configuration

To set Port Mapping

1.	Go to menu Settings->Advanced->Port mapping

2.	Add new port mapping:

Description

Assigns your specific Port Mapping setting with the name (e.g. the name of the game application).

Incoming packet's port number

This is the most important value you should know, this is the application you want to get through WinRoute Lite 4.1. The packets sent by the external application not only has the IP address as the destination but also the port number. Based on this port number you may specify that certain packets will be routed to a specific computer behind WinRoute Lite 4.1. Example: all packets going to the web server are going to port 80.

Forward to the local computer with IP address

Here you have to enter the IP address within your local network where the server that is answering incoming packets are running  (web server, FTP server, game etc.).

Protocol

Select the protocol rule used by the application/service. Some applications/services use TCP and UDP protocol together. For example WinRoute Lite 4.1 Administrator module

See Also

Inside WinRoute Lite

The Architecture

How NAT works

DHCP Server


DHCP Server

In a network, each computer has to have its TCP/IP protocol properly configured. This means an IP address, network mask, default gateway address, DNS server address, etc. must be configured on each computer. If the administrator has to set the parameters manually on a large number of workstations, it can be difficult avoiding mistakes, (e g. using an address twice) this will cause collisions and consequently an incorrect function of the entire network.

To simplify the task, Dynamic Host Configuration Protocol has been created. DHCP is used for a dynamic configuration of the TCP/IP protocol on computers. During start-up, the DHCP client computer sends a request. When the DHCP server receives the request, it chooses TCP/IP configuration parameters for the client. The parameters are the IP address, network mask, default gateway, DNS server address and the client's domain name, etc. Using these parameters, the server creates an answer and sends it to the client.

The server will assign an IP address to the client for a limited time only (the so-called lease time). The server always assigns the IP address so that it does not collide with any other address assigned through DHCP to another client.

With a DHCP server available, it suffices to enable the "Obtain IP address from DHCP server" (from the TCP/IP properties window located in the control panel, network icon) option.  The DHCP server takes over the responsibility for proper configuration of TCP/IP on workstations. This may help to significantly lower the network maintenance and management costs.

See Also

Inside WinRoute Lite

The Architecture

How NAT works

Port Mapping


Running ICQ, voice over IP, video conferencing

In This Chapter

Running ICQ behind NAT

IRC - Internet Relay Chat

PPTP over NAT

CITRIX Metaframe

Internet telephony - BuddyPhone

video conferencing

PC Anywhere

Cu-YouSeeMe


Running ICQ behind NAT

Running ICQ

ICQ is the online chat system that establishes either a direct connection between two users or they communicate via the ICQ server. Basically users have to have a direct connection to the Internet or their Internet sharing solution must support Port Mapping.

WinRoute Lite 4.1 offers this unique support for all ICQ users. All ICQ services including direct chat and file transfers are available for each user without any settings.

See Also

Running ICQ, voice over IP, video conferencing

IRC - Internet Relay Chat

PPTP over NAT

CITRIX Metaframe

Internet telephony - BuddyPhone

video conferencing

PC Anywhere

Cu-YouSeeMe


IRC - Internet Relay Chat

There are no special settings for IRC required. It will work automatically if you connect to standard server ports (6661,6662,6663,6665,6666,6667,6668)

Even DCC (Direct Chat/Send(Receive) Files) will work automatically if you use the standard port 6667 in you IRC.

Using anything other than the standard port will cause DCC not to work.

See Also

Running ICQ, voice over IP, video conferencing

Running ICQ behind NAT

PPTP over NAT

CITRIX Metaframe

Internet telephony - BuddyPhone

video conferencing

PC Anywhere

Cu-YouSeeMe


PPTP over NAT

There are no settings required to run PPTP clients behind WinRoute Lite 4.1 (NAT), accessing corporate resources out of a local area network.

See Also

Running ICQ, voice over IP, video conferencing

Running ICQ behind NAT

IRC - Internet Relay Chat

CITRIX Metaframe

Internet telephony - BuddyPhone

video conferencing

PC Anywhere

Cu-YouSeeMe


CITRIX Metaframe

WinRoute Lite 4.1 fully supports the CITRIX Metaframe protocol as well as the MS Terminal Server protocol. To access CITRIX Metaframe server or MS Terminal server running inside of the WinRoute Lite 4.1 network from the Internet you will have to perform following Port Mapping:

For MS Terminal Server:

Description: Enter MS Terminal Server

When incoming packet's port number is equal to: 3389

Forward packet to local computer with IP address: 192.168.1.1

Advanced Setting This rules applies to protocol:

Protocol: TCP

For CITRIX Metaframe:

Description: Enter CITRIX Metaframe

When incoming packet's port number is equal to: 1494

Forward packet to local computer with IP address: 192.168.1.1

Advanced Setting This rules applies to protocol:

Protocol: TCP

You may create more mapped ports and access more servers simultaneously. In order to do this, you will need to pre-set on the clients computer which port they will use to access the server. This may be specified in the .ini file of the client PC, when you create the connection icon.

See Also

Running ICQ, voice over IP, video conferencing

Running ICQ behind NAT

IRC - Internet Relay Chat

PPTP over NAT

Internet telephony - BuddyPhone

video conferencing

PC Anywhere

Cu-YouSeeMe


Internet telephony - BuddyPhone

WinRoute Lite 4.1 has become industries first software router/firewall that brings the Internet telephony to a serious level. Together with the BuddyPhone application (www.buddyphone.com) WinRoute Lite 4.1 allows you to place calls through the Internet from one network to another.

Support for BuddyPhone works best with ICQ. Register this free instant messenger software and you will enjoy "one-touch-button" operation when calling your friends.

All users active in your ICQ buddy list will appear in your BuddyPhone phone book and placing a call is as easy as selecting a user on the list.

There are no settings required as long as you use BuddyPhone and ICQ together.  The destination port is 700. This is the port number used by BuddyPhone.

Using BuddyPhone without ICQ

WinRoute Lite 4.1 allows you to divert the calls coming from the Internet to the right recipient in the local network based on the port number. To enter port numbers go to, settings=> Advanced settings=> Port Mapping=> Add=> Edit mapped port.

Under description you will enter: BuddyPhone, the incoming port number equal to: 710 for the first user with BuddyPhone, forward packets to the user's internal IP address 192.168.1.2    Advanced Settings: the protocol that applies is UDP.

It will be necessary to configure each user individually in WinRoute Lite 4.1,  with their port number and local IP address.

Use ports 710 and up to assign the local users with their proprietary port.

Example:

You have three users in your LAN using BuddyPhone.

User name	User's IP internal IP address	Port assigned to user
John	192.168.1.2	710
Quido	192.168.1.3	711
Bob	192.168.1.4	712
Then you will set the Port Mapping:

Port number	Local IP address	Destination Port
710	192.168.1.2	710
711	192.168.1.3	711
712	192.168.1.4	712
Placing a phone call to the user will be as easy as entering the company.com:port# in the BuddyPhone direct dial dialog. For example sales.winroute lite 4.1.com:711.

•	Note! It is not a mistake in our documentation! The destination port is really 700. This is the port number used by BuddyPhone to work.  WinRoute Lite 4.1 will provide the routing based on this information.

See Also

Running ICQ, voice over IP, video conferencing

Running ICQ behind NAT

IRC - Internet Relay Chat

PPTP over NAT

CITRIX Metaframe

video conferencing

PC Anywhere

Cu-YouSeeMe


video conferencing

WinRoute Lite 4.1 has become industries first software router/firewall that brings videoconferencing to a serious business level. Together with ICUii a video conferencing application (www.icuii.com) WinRoute Lite 4.1 allows you to establish video conferencing sessions through the Internet from one network to another.

For the first time ever you may establish a video conference call from one private network to another. To use the ICUii application you have to map the following ports:

Description: Enter ICUii

When incoming packet's port number in range from: 2000-2038

Forward packet to local computer with IP address: 192.168.1.2 (client computer)

Advanced Setting This rule applies to protocol:

Protocol: TCP

See Also

Running ICQ, voice over IP, video conferencing

Running ICQ behind NAT

IRC - Internet Relay Chat

PPTP over NAT

CITRIX Metaframe

Internet telephony - BuddyPhone

PC Anywhere

Cu-YouSeeMe


PC Anywhere

WinRoute Lite 4.1 includes the best support for Symantec's PC AnyWhere, of any software router on the market. PC AnyWhere allows the user to access and manage computers inside of the network. In order to do this you have to apply the following configuration:

1.	Managed computer will run PC Anywhere Host.

2.	Remote computer will run PC Anywhere Remote

3.	Port Mapping in the WinRoute Lite 4.1 computer will be configured this way:

Description: PC AnyWhere

When incoming packet's port number in range from: 5631-5632

Forward packet to local computer with IP address of PC Anywhere Host inside of your network (e.g.192.168.1.12)

Advanced Setting This rules applies to protocol:

Protocol: TCP/UDP

See Also

Running ICQ, voice over IP, video conferencing

Running ICQ behind NAT

IRC - Internet Relay Chat

PPTP over NAT

CITRIX Metaframe

Internet telephony - BuddyPhone

video conferencing

Cu-YouSeeMe


Cu-YouSeeMe

The following Port Mapping is necessary to receive CU-SeeMe calls through the NAT:

Description: CU-SeeMe

When incoming packet's port number is equal to: 7648

Forward packet to local computer with IP address of the workstation that runs the CU-SeeMe client

Advanced Setting This rule applies to protocol:

Protocol: UDP

Description:CU-SeeMe

When incoming packet's port number is equal to: 7649

Forward packet to local computer with IP address of the workstation that runs the CU-SeeMe client

Advanced Setting This rule applies to protocol:

Protocol: UDP

Limitations:

•	Presently, it is not possible to run more that one CU-SeeMe client on the local area network.

•	It is not possible to connect to a "reflector" protected by a password.

See Also

Running ICQ, voice over IP, video conferencing

Running ICQ behind NAT

IRC - Internet Relay Chat

PPTP over NAT

CITRIX Metaframe

Internet telephony - BuddyPhone

video conferencing

PC Anywhere


Gaming section

In This Chapter

About running games behind NAT

StarCraft

MSN Gaming zone access only

Asheron's Call

Quake

Half-Life

Battle.net (Blizzard)

More games ...


About running games behind NAT

Playing Games

Many games today support a multi-user environment. Users may fight each other over the Internet, LAN or they can join an existing game servers on the Internet. Users can also host their own game servers and allow friends, family or total strangers the excitement of playing games together.

There are many games that do not require any settings in WinRoute Lite 4.1. Prior to attempting to configure Winroute lite 4.1 for a specific game, we recommend trying the game first. Unlike Proxy Servers, the basic architecture of Winroute lite 4.1 supports many games directly "off the shelf."

Certain games require that specific ports be configured in WinRoute Lite 4.1 in order to get them up and running. Ports are used for further identification of the player at the game server (in general).

If the game has a specific port associated with it, this is not a problem for Winroute lite 4.1! Just configure WinRoute Lite 4.1's Port Mapping to forward packets arriving at your network to the player's computer behind the firewall.

The ports used will vary from game to game. Please refer to the documentation accompanying each game or call technical support of the game vendor for more information. This manual contains several examples of settings for the most popular games.

See Also

Gaming section

StarCraft

MSN Gaming zone access only

Asheron's Call

Quake

Half-Life

Battle.net (Blizzard)

More games ...


StarCraft

Playing StarCraft

WinRoute Lite 4.1 includes unique support for all StarCraft (Blizzard Entertainment) players. Multiple players on the network connected to the Internet through WinRoute Lite 4.1 will enjoy the fun of playing the game with their virtual "enemies" on the Internet.

At present fully automatic support only works in cases where all players joining the game from one network, are at the computers behind WinRoute Lite 4.1, not on the WinRoute Lite 4.1 PC.

For more details visit www.winroute lite 4.1.com

See Also

Gaming section

About running games behind NAT

MSN Gaming zone access only

Asheron's Call

Quake

Half-Life

Battle.net (Blizzard)

More games ...


MSN Gaming zone access only

The following configuration was tested to play MechWarior3 thoroughly on MSN Gaming Zone. Only one machine can access MSN at a time.

1.	Go to menu Settings->Port Mapping

2.	Add new Port Mapping

For clients connecting to MechWarrior3

Description: Enter MechWarior3

When incoming packet's port number in range from 2300-2400

Forward packet to local computer with IP address of the machine you want to connect to MechWarior3

Advanced Setting This rules applies to protocol:

Protocol: TCP

For clients connecting to MSN Gaming Zone

Description: Enter MSN Gaming Zone

When incoming packet's port number in range from: 28800-28912

Forward packet to local computer with IP address of the machine you want to connect to MSN

Advanced Setting This rules applies to protocol:

Protocol: UDP

See Also

Gaming section

About running games behind NAT

StarCraft

Asheron's Call

Quake

Half-Life

Battle.net (Blizzard)

More games ...


Asheron's Call

Asheron's call is a popular game on Microsoft Gaming Zone. In order to play this game from the computer behind WinRoute Lite 4.1 you have to perform following Port Mapping settings:

1.	Go to menu Settings->Advanced->Port Mapping

2.	Perform following settings:

Name:	S1	S2	S3	S4	S5
Port number:	2300-2400	9000-9013	6667	28800 - 29000
Destination IP:	IP of PC with game	IP of PC with game	IP of PC with game	IP of PC with game	IP of PC with game
Protocol:	TCP/UDP	UDP	TCP	TCP
See Also

Gaming section

About running games behind NAT

StarCraft

MSN Gaming zone access only

Quake

Half-Life

Battle.net (Blizzard)

More games ...


Quake

Quake 3

Quake 2/3 clients

No special settings necessary

Quake 2/3 Server

For clients connecting to Master server:

Description: Enter Quake Master Server

When incoming packet's port number is equal to  8002

Forward packet to local computer with IP address of the machine you want to connect to Quake

Advanced Setting This rules applies to protocol:

Protocol: UDP

For clients connecting to Quake3 Arena server:

Description: Enter MSN Gaming Zone

When incoming packet's port number is equal to 27960

Forward packet to local computer with IP address of the machine you want to connect to Quake3 Arena server:

Advanced Setting This rules applies to protocol:

Protocol: UDP

See Also

Gaming section

About running games behind NAT

StarCraft

MSN Gaming zone access only

Asheron's Call

Half-Life

Battle.net (Blizzard)

More games ...


Half-Life

For clients connecting to Half-Life

     Description: Enter Quake Master Server

When incoming packet's port number is equal to 27015

Forward packet to local computer with IP address of the machine you want to connect to Half-Life

Advanced Setting This rules applies to protocol:

     Protocol: TCP/UDP

See Also

Gaming section

About running games behind NAT

StarCraft

MSN Gaming zone access only

Asheron's Call

Quake

Battle.net (Blizzard)

More games ...


Battle.net (Blizzard)

Starcraft

WinRoute Lite 4.1 allows multiple players to join the online battles with Starcraft on the Internet. There is one condition:  WinRoute Lite 4.1 must be installed on a separate (gateway) computer so that users will be (physically) behind it. This way multiple players behind WinRoute Lite 4.1 will be allowed to play at a time.

Other games

The following Port Mapping must be set in order to play games on battle.net. Only one player can play at a time.

Description: Enter Starcraft

When incoming packet's port number is equal to 6112

Forward packet to local computer with IP address of the machine you want to connect to Starcraft

Advanced Setting This rules applies to protocol:

Protocol: TCP/UDP

See Also

Gaming section

About running games behind NAT

StarCraft

MSN Gaming zone access only

Asheron's Call

Quake

Half-Life

More games ...


More games ...

Please check our web site www.winroute lite 4.1.com for the latest information about supported games. The list is growing extensively and new games are added frequently.

See Also

Gaming section

About running games behind NAT

StarCraft

MSN Gaming zone access only

Asheron's Call

Quake

Half-Life

Battle.net (Blizzard)


IP address

An IP address is the unique 32-bit number, which identifies the computer in an IP networks. The unique IP address is assigned to each computer on the Internet. Each packet passing across the Internet contains the information, from which address it was sent (source IP address) and to which address it should be delivered (destination IP address).


NAT

With NAT - Network Address Translator - you may connect the Internet to the Internet by means of a single IP address and the computers inside of the network will use the Internet as if they were connected directly to the Internet (certain limitations applies).

The connection of an entire network using a single registered IP address is made possible since, the NAT module rewrites the source address in the packets sent, from computers in the local area network with the address of the computer WinRoute is running on.

NAT differs significantly from various proxy servers and application-level gateways they will in principle never be able to support so many protocols as NAT does.


Network interface

The network interface is the device which connects the computer with other computers by means of a communication medium. A network interface may be an Ethernet card, modem, ISDN card, etc. The computer sends and receives packets by means of the network interface.


Network Mask

Network mask is used to group IP addresses together. There is a group of addresses assigned to each network segment. For example, the mask 255.255.255.0 groups together 254 IP addresses. If we have, for example,a sub-network 194.196.16.0 with mask 255.255.255.0, the addresses we may assign to computers on the sub-network are 194.196.16.1 through194.196.16.254.


Packet

A packet is a basic communication data unit used when transmitting data from one computer to another. Each packet contains a certain amount of data. The maximum length of a packet depends on the communication medium. As an example, in Ethernet networks the maximum length is1500 bytes. In each layer, we may divide the contents of the packet into two parts: the header part and the data part. The header contains control information of the particular layer, the data part contains data that belong to the upper layer. More detailed information on the structure of the packet may be found below in the section on packet filtering.


Port Mapping

Port mapping is the process in which packets arriving at the interface, are checked by the port number and IP address they want to reach. Based on the port number and IP address found these packets are forwarded to the pre-defined private class IP address on the local network.


POP3

POP3 protocol is used mostly by email client software to pick up the email from mailboxes at the POP3 compliant mail server. WinRoute's mail server has such capability too, i.e. it can pick up the email automatically at any POP3 compliant mail server and further distribute it to the mailboxes of local recipients.

POP3 protocol is a TCP protocol working on port 110. If you want to access this protocol mail server running behind or on the WinRoute computer (to pick up your email FROM the Internet) you have to perform Port Mapping for TCP protocol, port 110 sent to private class IP address of the PC running the Mail Server.


Port

A port is a 16-bit number (the allowed range being 1 through 65535) used by the protocols of the transport layer - the TCP and UDP protocols. Ports are used to address applications (services) which run on a computer. If there was only a single network application running on the computer, there would be no need for port numbers and the IP address only would suffice for addressing services.

However, several applications may run at once on a particular computer and we need to differentiate among them. This is what port numbers are used for. Thus, a port number may be seen as an address of an application within the computer.


PPTP

PPTP - Point To Point Tunnelling Protocol - is a VPN protocol used by Microsoft operating system to create the encrypted connection between two computers.


Proxy

Proxy is another method of sharing of Internet access. Proxy operates with the data on a higher protocol level so that Internet sharing with Proxy servers was never reliable and also required a special application gateway for each networking protocol.


SMTP

SMTP (Simple Mail Transfer Protocol) is used for direct communication between Mail Servers (such as the Mail Server in Winroute and the Mail Server of your ISP) and for sending out email from your email client software. SMTP is a  "one way" protocol - i.e.  email may be sent or received by the mail server but cannot pick up the email at some other mail server using this protocol.

SMTP protocol is a TCP protocol working on Port 25. If you want to access this protocol with the mail server running behind or on the WinRoute computer (to allow other mail server to send you email or to use this mail server for your outgoing email if you are on your LAN) you have to perform Port Mapping for TCP protocol, port 25 sent to a private class IP address of the PC running Mail Server.


TCP/IP

TCP/IP is a sum of networking protocols used for communication between computers.  All protocols are packet based, i.e. all data sent through are divided into the small parts and sent across the network.

The TCP/IP protocols are: IP, TCP, UDP, ICMP, and others based on IP.