in the Configure column, the counter appears, displaying the traffic status for that protocol.Network_ipHelperView
Many User Datagram Protocols (UDP) rely on broadcast/multicast to find its respective server, usually requiring their servers to be present on the same broadcast subnet.To support cases where servers lie on different subnets than clients, a mechanism is needed to forward these UDP broadcasts/multicasts to those subnets. This mechanism is referred to as UDP broadcast forwarding. IP Helper helps broadcast/multicast packets to cross a firewall’s interface and be forwarded to other interfaces based on policy. For more information on IP Helper, refer to the IP Helper technote at:
http://www.sonicwall.com/us/support/2134_3424.html
Topics:
• Enable IP Helper - Enables IP Helper features.
IP Helper Policies allow you to forward DHCP and NetBIOS broadcasts from one interface to another interface.
Note The IP Helper is not supported for WAN interfaces or for interfaces that are configured for NAT.
Topics:
• Adding an IP Helper Policy for DHCP
• Adding an IP Helper Policy for NetBIOS
Adding an IP Helper Policy for DHCP
1. Click the Add button under the IP Helper Policies table. The Add IP Helper Policy window is displayed.
2. The policy is enabled by default. To configure the policy without enabling it, clear the Enabled check box.
3. Select DHCP from the Protocol menu.
4. Select a source interface or zone from the From menu.
5. Select a destination Address Group or Address Object from the To menu or select Create a new network to create a new Address Object.
6. Enter an optional comment in the Comment field.
7. Click OK to add the policy to the IP Helper Policies table.
Adding an IP Helper Policy for NetBIOS
1. Click the Add button under the IP Helper Policies table. The Add IP Helper Policy window is displayed.
2. The policy is enabled by default. To configure the policy without enabling it, clear the Enabled check box.
3. Select NetBIOS from the Protocol menu.
4. Select a source Address Group or Address Object from the From menu. Select Create a new network to create a new Address Object.
5. Select a destination Address Group or Address Object from the To menu, or select Create a new network to create a new Address Object.
6. Enter an optional comment in the Comment field.
7. Click OK to add the policy to the IP Helper Policies table.
Click the Edit icon in the Configure column of the IP Helper Policies table to display the Edit IP Helper window, which includes the same settings as the Add IP Helper Policy window.
Click the Delete icon to delete the individual IP Helper policy entry. Click the Delete button to delete all the selected IP Helper policies in the IP Helper Policies table.
IP Helper extends the previous version’s Forwarding Plane to support User-defined protocols and extended policies. As a result, IP Helper’s UI has been completely redesigned. IP Helper also offers better control on existing NetBIOS/DHCP relay applications.
Topics:
• Displaying IP Helper Cache from TSR
Some of the built-in applications that have been extended include:
• DHCP—UDP port number 67/68
• Net-Bios (NetBIOS):
– Net-Bios NS—UDP port number 137
– Net-Bios Datagram—UDP port number 138
• DNS—UDP port number 53
• Time Service (TIME)—UDP port number 37
• Wake on LAN (WOL)
• mDNS—UDP port number 5353; multicast address 224.0.0.251
Each protocol has the following configurable options:
• Name—The name of the protocols. Note that these are case sensitive and must be unique.
• Port 1/2—The unique UDP port number.
• Translate IP—Translation of the source IP while forwarding a packet.
• Timeout—IP Helper cache timeout in seconds at an increment of 10.
• Raw Mode—Unidirectional forwarding that does not create an IP Helper cache. This is suitable for most of the user-defined protocols that are used for discovery, for example WOL/mDNS.
Topics:
• Adding User-Defined Protocols
• Editing User-Defined Protocols
Click the Add button on the lower left side of the protocol list table. The following fields must be configured in order to add a protocol.
Name—Create a unique case-sensitive name.
• Port 1/2—The unique UDP port numbers.
• Timeout—This is optional. IP Helper cache timeout in seconds at an increment of 10. If not specified, a default value of 30 seconds is selected.
• IP Translation—When selected, the firewall translates the source IP of the forwarded packet.
• Raw Mode—When selected, IP Helper does not create a cache; Unidirectional forwarding is supported.
Editing User-Defined Protocols
A user-defined protocol can be deleted by selecting the Delete button next to that protocol. The user can also select the leftmost checkbox of the desired protocol, then click the Delete button, located on the lower left side of the table.
By hovering the cursor over a protocol or policy’s Statistics icon in the Configure column, the counter appears, displaying the traffic status for that protocol.
Displaying IP Helper Cache from TSR
The TSR will show all the IP Helper caches, current policies, and protocols:
#IP_HELPER_START
IP Helper
-----IP Helper Global Run-time Data-------
IP Helper is OFF
IP Helper - DHCP Relay is OFF
IP Helper - Netbios Relay is OFF
Total Number Of Fwded Packets :0
Total Number Of Dropped Packets :0
Total Number Of Passed Packets :0
Total Number Of Unknown Packets :0
Total Number Of record create failure :0
Total Number Of element create failure :0User-defined
-----IP Helper Applications -------
Name: DHCP
Port: 67, 68, Max Record: 4000, Status: OFF
CanBeDel: NO, ChangeIp: 1, Raw: NO
Max Element: 8000, Timeout: 3, index: 1, proto: 1,
Record Count: 0, Element Count: 0,
Fwded: 0, Dropped: 0, Passed: 0
Name: NetBIOS
Port: 138, 137, Max Record: 4000, Status: OFF
CanBeDel: NO, ChangeIp: 1, Raw: NO
Max Element: 8000, Timeout: 4, index: 2, proto: 1,
Record Count: 0, Element Count: 0,
Fwded: 0, Dropped: 0, Passed: 0
Name: DNS
Port: 53, 0, Max Record: 8000, Status: OFF
CanBeDel: NO, ChangeIp: 1, Raw: NO
Max Element: 16000, Timeout: 3, index: 3, proto: 1,
Record Count: 0, Element Count: 0,
Fwded: 0, Dropped: 0, Passed: 0
Name: TIME
Port: 37, 0, Max Record: 8000, Status: OFF
CanBeDel: NO, ChangeIp: 1, Raw: NO
Max Element: 16000, Timeout: 3, index: 4, proto: 1,
Record Count: 0, Element Count: 0,
Fwded: 0, Dropped: 0, Passed: 0
Name: WOL
Port: 7, 9, Max Record: 8000, Status: OFF
CanBeDel: NO, ChangeIp: 1, Raw: YES
Max Element: 16000, Timeout: 3, index: 5, proto: 1,
Record Count: 0, Element Count: 0,
Fwded: 0, Dropped: 0, Passed: 0
Name: mDNS
Port: 5353, 0, Max Record: 8000, Status: OFF
CanBeDel: NO, ChangeIp: 1, Raw: YES
Max Element: 16000, Timeout: 3, index: 6, proto: 1,
Record Count: 0, Element Count: 0,
Fwded: 0, Dropped: 0, Passed: 0
----------GEN APP Relay Policy-----------
----------------------------------Record Table----------------------------
Record(hash)[ClientIP, ClientIf, ClientMac, Proto, Vpn, transId, Age(pkts)]
Elmnt(hash)[serverIp, serverIf, srcIp, dhcpMac, transId, Vpn, proto(fm,to)]
---------------------------------------------------------------------------
----------DHCP Relay Policy-----------
--------NETBIOS Relay Policy-----------#IP_HELPER_END
To enable Apple support for iRemote, iTunes, and Apple TV, the mDNS protocol must be enabled. A policy is needed to forward these packets. The following graphic illustrates the process of how Enhanced IP Helper works with mDNS Forwarding:
To configure SonicOS to support mDNS, perform the following steps:
1. Navigate to the Network > IP Helper page.
2. Select the Enable IP Helper checkbox.
3. In the Relay Protocols section, click the Enable checkbox for mDNS.
4. In the Policies section, click the Add... button.
5. In the Add IP Helper Policy window, select mDNS from the Protocol drop-down menu.
6. Select the source interface from the From: drop-down menu.
7. Select the destination subnet from the To: drop-down menu.
8. Click the OK button.
DHCP Relay Leases
This section displays the following information about each DHCP relay lease:
• Client’s IP Address
• Interface
• Client’s MAC Address
• Server’s IP Address
• Lease Time
• Remaining Time
To update the displayed information, click the Refresh button.
To display a subset of the leases, enter an IP Address, MAC Address or a name in the filter field and then click the Filter button. The syntax is:
• ip:1.1.1.1/24
• mac:00:01:02:03:04:05
• name:darkkrred