I see in the router wan and LAN address,
LAN address refers to a router in the LAN IP address,
IP addresses in the wan address does a router in the outside network, namely
Outside the network address assigned to the router?
If so, that is to say, both the IP address is
The same router?

CodePudding user response:

Can understand so, distribution networks outside general from operators to obtain the address of the automatically; LAN address user controllable, users to assign the private network address, can be obtained through DHCP dynamic, can also be manually specify static,

CodePudding user response:

A little strange: since the wan and LAN IP refer to the same router, I'm trying to use a browser to access the LAN IP, can open the router Settings page. I want to use a browser to access the wan IP (whether in or outside of the Internet network in the network), can not, excuse me, is this why?

CodePudding user response:

"Both IP address" refers to the same router? Can't understand it, because the IP address refers to the respective interfaces on a router,

CodePudding user response:

The same router so different, if the router didn't do other restrictions, generally is also possible

CodePudding user response:

Wan port is not open port 80 or 443, and the wan port operators to provide IP is their network the IP address of the DHCP pool, these addresses are not allowed to open ports 80 and 443, HTTP and HTTPS is unable to open access,

CodePudding user response:

That can understand like this: a router on the wan and LAN mouth mouth, binding respectively two mesh, there is the IP address of the wan network card and the IP address of the LAN card,

CodePudding user response:

Say first conclusion,
First of all, indeed, a LAN port IP and WAN port IP refers to the same device;
Second, the network access WAN can't access, because operators do the restrictions, all operators default will be banned 80443, some operators will also banned 8080 these non-standard ports;
Again, the network can not access the WAN port, it doesn't like upstairs operators limit, because your traffic also didn't go out in the gateway device, haven't to the operator, is cannot access is because for security reasons, most of the routers are not allowed to from WAN side access, this is the router itself security measures, part of the router can let go of this limitation, but must be off by default,

Existence lies in LAN and WAN, both for local area network (LAN) to provide the basis of network structure, and isolates internal network and external network, forming a controllable safety brake,
Fire on the wall there is a trust, the concept of untrust, said an area is trusted or not to be trusted, network is a typical trust region, the network is a typical untrust zone (this is why most of the routers are not allowed to WAN side access),
In addition to the concept of regional and there is a direction of the concept of the two elements (including port and direction), from network access to the LAN port, the traffic belongs to "LAN into the direction of the mouth," from the outside network access WAN, this belongs to "into the direction of the WAN port,"
Combined is: traffic access WAN interface, the default as a non secure access, stop all traffic, be sure to artificially screened and release corresponding firewall policy (add); While traffic access LAN interface as the default security, of course also can according to their own needs to restrict by the manager,

In fact, the firewall even the WAN/LAN this concept may not exist, it only CARES about the interface, the interface work in what mode (routing and NAT), which is the inside of which is the outside, how to map, how to route, on the interface, from which direction to stop, and from which direction release,