IP Passthrough
Expert Function
Swisscom recommends that this function only be configured by experienced IT specialists. Misconfigurations can lead to significant security risks, which can negatively affect both the customer installation and Swisscom's reputation.
IP Passthrough is a function that allows a specific device in your network to be directly connected to the internet. All incoming internet traffic is forwarded directly to this device. This is particularly useful if you host servers, perform remote desktop sessions, or use other applications that require direct access from the internet.
Configure IP Passthrough
- In the router portal, under the Network tab --> Passthrough
- Activate IP Passthrough
Configure IP Passthrough
- Connect the external gateway/firewall to the Centro Business
- WAN type as Ethernet with static IP
- IP Address = 172.31.255.6
- Subnet Mask = 255.255.255.252
- Gateway = 172.31.255.5
Restrictions
- Not available with BNS/EC-S contract
- Firewall on the Centro Business is ineffective
FAQ - IP Passthrough
Why does Swisscom declare "IP Passthrough" as an expert function?
IP Passthrough is an expert function because it requires special technical knowledge and configurations that go beyond the basic settings. If downstream devices such as a firewall have not been configured 100% security-compliant, attacks on the customer infrastructure can occur.
TIP: We recommend ensuring the requirement with the DMZ function instead, so that failover works.
To which Ethernet port is Passthrough configured?
- On the Centro Business 2.0, IP Passthrough is always activated on LAN Port 1.
- On the Centro Business 3.0, IP Passthrough is always activated on LAN Port 5.
What can the use of IP Passthrough cause?
Since your device is directly exposed to the internet, it can be more vulnerable to attacks. It is important to take appropriate security measures.
What is the difference between IP Passthrough and PPP Passthrough?
- IP Passthrough: With IP Passthrough, all incoming internet traffic is forwarded directly to your device.
- PPP Passthrough: With PPP Passthrough, all internet traffic is forwarded to your device in the network, which establishes the PPPoE connection (Point-to-Point Protocol over Ethernet). This device receives the public IP address of the router and can communicate directly with the internet. All Swisscom services such as VoIP, BlueTV, etc., continue to run via the Centro Business.
Which MTU size must be configured?
With IP Passthrough, the standard MTU value of 1500 bytes can be set. This ensures smooth and efficient data transmission by preventing fragmentation of packets, which can lead to performance degradation.
Is something missing here? Provide feedback! pilot@swisscom.com Describe in which area what is expected or what could be improved.