RVS4000, port forwarding - with - IP-based ACL

Similar Questions

• RVS4000 Port forwarding

  I have a RVS4000 put in place as my internet router/gateway to a client of 75 MS Server 2003 network. All network devices receive a static IP address. I used Port Forwarding and Port Range Forwarding on the RVS4000 to allow remote desktop connection to outside network to specific clients within the network. I have used all available space on the RVS4000 software for the seizure of the Port addresses and still needed to connect multiple users more. I bought a second RVS4000 and connected to the first through one of the lan ports, then the network through another lan port.  I have forwarded a range of addresses of the first router to another and then used the second router port forwarding and port forwarding tables range to the IP addresses of each client. Everything seems to be set up correctly and I can access both routers on the network, the individual port forwarding and the addresses of forwarding port on the first router range still work, but the transmitted address range appear not to be through to the second router and then to the customers. What I am doing wrong?

  I think the WRVS4400N has an IP based ACL that you can do to open the ports of the PC. It has a capacity of 1 G more but I don't know if the ACL can handle 25-50 PCs. I suggest you try to contact CISCO technical support so that you can be well informed of the router you need to make it work.

• Port forwarding with PIX 501

  I try to get my PIX 501 to forward traffic on port 1412 with TCP and UDP to use Direct Connect, and the problem I have is I can connect to a DC hub, but cannot establish connections with users.

  I added the following to the default configuration from the factory with a partial success:

  outside access list permit tcp any host 192.168.100.20 eq 1412

  access-list outside permit udp any host 192.168.100.20 eq 1412

  public static tcp (indoor, outdoor) interface 1412 192.168.100.20 1412 netmask 255.255.255.255 0 0

  public static tcp (indoor, outdoor) interface 1412 192.168.100.20 1412 netmask 255.255.255.255 0 0

  In the debug log set to the access list I rule this type of errors:

  Deny tcp src outside other.users.ip.addr/3099 dst within the my.public.ip.addr/1412 by access-group "access_outside_in".

  TCP request discarded outside my.public.ip.addr/45961 other.users.ip.addr/2362

  I'm quite lost as to why it does not work when I think it should. I tried several ways, opening of port ranges and no chance for a transfer of the port sucsessful.

  You can change you, outside the ACL to the following:

  outside access list permit tcp any host eq 1412

  access-list outside permit udp any host eq 1412

  outside access-group in external interface

  Save again with: write mem and also issue: clear xlate

  I would like to know if it works.

  Jay

• Problem setting up Port Forwarding with two routers.

  I can't set up by Linksys RT31P2 and routers port forwarding WRT160Nv3.

  My setup is Webstar Modem = RT31P2 = WRT160N = Mac OS 10.6.5. (No configurable modem and ISP do not prevent port forwarding. It comes with two Linksys routers).

  I had a Monty Python-going around with the support of Cisco cat; and follow up with telephone assistance in which the agent knew nothing about port forwarding and his supervisor expressed the view that it was not possible with two routers. Sigh.

  If anyone can help me with step by step specific and simple instructions to configure routers. I know that the basic procedures. I'm not clear, what exactly changes on routers.

  I read that portforward.com has to say and it does not work so I must be misunderstanding something.

  The ip address of my computer is 192.168.1.103.  Are the last three digits of this speech concluded the two routers in the area on the port forwarding page? What other changes should be done what router?

  I know the port numbers that I use are OK because I can implement successfully if I connect to one or other of the routers (but not both), and my software of p2p shows port are open.

  Any help and suggestions most welcome.

  If you set up as I have suggested that you have only a single LAN that will be using in your addresses * 192.168.15 case. So in your case:

  1. change the address LAN IP of 192.168.1.1 to 192.168.15.2 WRT.
  2 disable the DHCP server.
  3. connect the LAN of the WRT port to port LAN of the RT.

  That's all. Disable the DHCP server will not affect whatever it is that you're connected LAN - LAN and DHCP server on the RT is still operational.

  After the change, previously the WRT computers may require a reboot to get a new address 192.168.15. *.

  Your computer to which you are transferring must have an IP static and not dynamic (or variable). Check the current IP information on this computer. It must have an IP address like 192.168.15.103, mask 255.255.255.0, gateway 192.168.15.1 subnet and DNS 192.168.15.1 server or maybe two other IP addresses instead. Note DNS servers if you do not 192.168.15.1.

  Then configure a static IP address on the computer. Use something like 192.168.15.10, 255.255.255.0 gateway 192.168.15.1 and the DNS servers you found before.

  After this implement 192.168.15.10 port forwarding.

• Limited number of ports forwarding with WAG54G2?

  Hello, I have a simple question... I'm looking to buy a WAG54G2, I downloaded the manual to check if there was a limit of ports to send because I know that it was a limitation on previous models, but I've found no information about it.

  Please can someone tell me if there is still such a restriction on this model (I think limit 10 ports on WAG54G)?

  Thank you

  Colin.

  WAG54G2 have still 10 entries for Port Forwarding (see this ), however, you can give a range of ports if you have more than 10 entries... (for example: If you have 11, 36, 48, 1014, 5214, 6452, you can just give him a range say: 11-6452, it will cover all ports between 11 and 6452)...

• port forwarding issues

  I played with port forwarding with my two cams of linksys and other 3 g wireless network web pages on my local network I want to access from the outside world.  I have one to configure them to use other port 8081, but after a few experiments see it as useless.

  I have a router linksys WRT54GL running dd - wrt V23 SP2 firmware and ports 80,81 and 443 (all in the field "port of") transmitted to cam1, cam2 and Western Digital NAS drive respectively. I found that because I'm port forwarding in any case, the two cams can continue to use port 80 and I 80 and 81 in the ' port of "or side defined WAN port 8080 bothers me to my router gui.

  There's the rub for me, it is, I cannot use 80,81 and 443 of the side ports WAN routers forward my port, if I use a different port, I can't access anything whatsoever that is served as a web page. I discovered this when I installed the Transmission torrent client on my NAS drive, it has a web interface as well and uses the port 9091, however when I port transfer it via my router I can't web interface from outside my local network. If I change the WAN or 'port' 80 or 81 and let the 'port' to 9091 I get fine, but I need to disable the port front of webcam that uses this port.

  I was going to get a 3rd and 4th IP Cam but will have the same problem, because it seems that only I can use ports 80, 81 and 443, and they are already exhausted. (I use 443 for secure access to my NAS drive) Change the port number in settings/options to 1024 or anything else works that if I leave it on the side of port forwarding LAN, WAN-side must always be 80 or 81.

  The only way I can see around this is to create a page that will reside on my router or my drive NAS I can show more out of a camera on it - something, I want to do in any case.

  PS. I do not use TZO, but I use dyndns so my dns is myname.dyndns.org.

  Finally understood that there is a problem with blocked ports from my place of work, which is where I tried to connect from. When I connected to the internet with my laptop computer and aircard, I was able to get to ok. My solution when I want to check on the torrents of the work is to connect to my router GUI work, changing the port 80 or 81 and disable the webcam on this address.

• Port Forwarding problem through 2 routers RVS4000 2 subnets

  I modified a building network to be compliant (Visa) PABP where two router and two subnets are required.

  My original CD building network configuration was designed to allow remote access to a server terminal server via the port forwarding on a RVS4000 router. So cables / modems-> xx.xx.xx.xx wan ROUTER lan 192.168.1.1--> subnet 192.168.1.0 with TCP 3389 Port forwarding for 192.168.1.11 (terminal server).

  The new configuration of the network is composed of two routers RVS4000 on two subnets. So the Modem cable-> wan xx.xx.xx.xx ROUTER1 lan 192.168.2.2-> Subnet 192.168.2.0-> DMZ 192.168.2.14 and the second router wan ROUTER2 lan--> subnet 192.168.1.0 192.168.1.1 192.168.2.1.

  ROUTER1 is configured in Bridge mode and ROUTER2 is configured in router mode. Port forwarding on ROUTER1 to port TCP 3389 is 192.168.2.1 (on ROUTER2 wan port). Port forwarding on Router 2 for the TCP 3389 must 192.168.1.11 port (server address terminal server).

  With this new configuration of network I am able to connect to the Terminal Server remotely. No problem with access to the Internet and the 192.168.2.0 subnet from inside the 192.168.1.0 subnet.

  So I think my problem is through two RVS4000 routers port forwarding. Any help on this problem will be appreciated.

  Thank you.

  1. can you access the terminal server server from inside the subnet 192.168.2.0/24 using the IP WAN to Router 2, which is access 192.168.2.1:3389 from inside 192.168.2.0/24.

  2. turn on Router 2 router in Bridge mode. Try again. My guess is that this will make the work of transfer. I think that port forwarding is linked to the NAT/gateway mode. No NAT no transfer. Is not logical to use the transfer when you are able to access the IP directly without NAT. Of course, the web interface does not allow you to forward a port located outside the LAN subnet...

  3. are you sure that you can access internet through Router 2 in router mode on the LAN subnet router 2? Usually in the NAT their own LAN subnet routers only bridge mode but not others. If the RVS4000 not NAT a different subnet that would be good to know.

• Static translation with Port forwarding

  Hello

  I have a scenario in which two public ip address (the one with HTTP requests & other with query SMTP/SSL for OWA) must be translated on a single inside the ip of the ISA Server in the DMZ. Please suggest which is the best practice. I know that we cannot do a NAT because the two addresses ip cannot translate into one. Use the static translation with forwarding Port of best practice to access the ISA server for OWA? What is the best security that can be applied at the moment? I'm going to redirect only requests to port 80,8080,25,443,110. I'll also create access list to only allow as these ports.

  I need to recommend this to a client. Please advice.

  Thank you

  Kevin

  Port forwarding is the best way to go here. As you already know, you can enter a static for two outside IP pointing to an inside (or vice versa), but statically mapping ports just will be fine. Similarly, simply allow these ports in your incoming ACL and you'll be good to go.

  You want something like the following:

  static (inside, outside) tcp XXX1 80 a.a.a.1 80

  static (inside, outside) XXX1 8080 a.a.a.1 8080 tcp

  static (inside, outside) tcp x.x.x.2 25 a.a.a.1 25

  static (inside, outside) tcp x.x.x.2 110 a.a.a.1 110

  public static x.x.x.2 a.a.a.1 443 tcp (indoor, outdoor) 443

  list of allowed inbound tcp access any host XXX1 eq 80

  list of allowed inbound tcp access any host XXX1 eq 8080

  list of allowed inbound tcp access any eq 25 x.x.x.2 host

  list of allowed inbound tcp access any host x.x.x.2 eq 110

  list of allowed inbound tcp access any host x.x.x.2 eq 443

  Access-group interface incoming outside

  where x.x.x. [1 | 2] is your public IP address and a.a.a.1 your home server.

• Need help with the port forwarding for a XBox remote Streaming

  I have a router R6200v2 and need help with port forwarding.

  I came across this set of instructions for setting up stream port forwarding XBox remotely from anywhere

  http://kinkeadtech.com/2015/07/how-to-stream-Xbox-one-to-Windows-10-from-anywhere-with-Internet/

  I have no idea when it comes to such things and I want to make sure I do it correctly without messing up my existing home network.

  Port Forwarding and triggering Port pages setup look very different from what the guy uses. Can someone walk me through what I do to set up please?

  Hi @varxtis,

  You must enter them in the field for a start external Port and external completion Port. You will need to send individually except for the range of 49000-65000. The steps are as follows.

  1. create a Service name (it could be something else that you cannot use the same service name twice. Ex. XBOX1, XBOX2 and so forth.)

  2. Select the type of service (TCP, UDP or both)

  3 entry 5050 times a start external Port and external endpoints.

  4. Select the IP address of your XBOX.

  5. Select apply.

  6 do the same for other port numbers. To the beach, use 49000 for the external departure Port and for the external completion Port 65000.

  Kind regards

  Dexter

  The community team

• Implementation of IPSec Port Forwarding on a Windows 2012 with a LRT224 Server

  Hi all I hope someone can help me validate my troubleshooting. I'm deploying a Server Windows 2012 that will server as a server vpn for customers. In place is a LRT224 with 4 VLANS set up. I have enabled port forwarding for IPSec (UDP/500), L2TP (UDP/1701) and L2TP (UDP/4500) to go on the server.

  In my Initial test, I put the LRT224 on the same network as the client of my test and realized the Test Client (10 Windows) to try to connect to the WAN of the LRT224 interface. I get this message:

  

  Thinking it could be the configuration of the server, I then put the client system on the same vlan on the LRT224 server. When I tried to connect to it directly by using the IP address of the server as a destination, he succeeded.  It is leading me to believe that it is the LRT224.

  I confirmed that VPN passthrough is enabled.

  The firmware version is by: v1.0.5.03 (February 22, 2016 10:12:17)

  Currently, the firewall is disabled (I would activate once I'm working)

  If anyone has ideas or notice a fault in my tests, I would really appreciate the feedback.

  If additional information would be useful, please let me know what you want and I can work for it.

  Thanks to all in advance.

  FreeFallFour wrote:

  I then put the client system on the same vlan on the LRT224 server. When I tried to connect to it directly by using the IP address of the server as a destination, he succeeded.  It is leading me to believe that it is the LRT224.

  It does normally not as I KNOW because the VPN in an outside in the process. You should test the VPN connection outside the server's IP subnet.

  You have the server configuration that the DNS server in the router to DHCP with DNS Proxy is disabled?

  Are you doing load balancing Internet connection?

• with vlc and wvc54c port forwarding

  I have an old wvc54c work with vlc through the LAN, but it won't work from WAN through a port forward.

  I have installation of redirection of WAN port correctly with airport extreme - I have other new wvc54gcn cameras that operate through thin WAN but the same exact transfer configuration (changing only the local ip address) will not work with the former wvc54c.

  What's wrong with the new WVC54gcn but the more wvc54c? Is there a work around I should use?

  I tried using port 1024 instead of 80, as suggested by some other posts here.

  Thanks for any clarification!

  OK, I thought about it. When installing the camera, I had not put something in the primary 'gateway' or 'dns '. I put them both to the IP of the router and who nailed him.

  Thanks for the help!

• Setting up Port Forwarding on router WRT54G, working with a WVC54GCA Wireless CAmers

  I have the equipment in question and you need to know a few things when it come to put in place for Internet access. Before I aske the question, however, I have the following IP addresses associated with this project: WVC54GCA - 192.168.2.102, router WRT54G - 192.168.2.1, the questions are:

  1. How do you define Port Forwarding on every element.
  2. Should the two articles have static IP addresses.
  3. Once the port forwarding is set, what is the structure of the URL to access the camera?

  Any help would be appreciated, summer tear my hair on it. Seems simple, but obviously not. I'm missing something.

  Thank you

  For port forwarding, you will first need to set the camera to a fixed LAN IP address (static).

  If your router uses the range of 192.168.2.100 thanks 192.168.2.149 DHCP servers, then 192.168.2.102 is an unauthorised fixed address.  With the Linksys routers, any fixed LAN IP address must be outside the range of the DHCP server.

  Here are the rules of use of the fixed LAN IP addresses with Linksys routers.  (Note: these rules were written for the 192.168.1.x subnet.)  Since you're using the 192.168.2.x subnet, change all addresses accordingly):

  With Linksys, routers, a fixed (static) IP LAN addresses must be assigned in the device that uses the address. If you need to enter the fixed address to the computer, printer or camera, not in the router.

  When you use a Linksys router, any fixed LAN IP address must be outside the DHCP server rank (typically 192.168.1.100 thru 192.168.1.149), and may not end with 0, 1 and 255.

  That's why any fixed LAN IP address would normally be of the order of
  192.168.1.2 thru 192.168.1.99 or
  192.168.1.150 thru 192.168.1.254
  assuming that you always use the default DHCP server line.

  In addition, in the computer, when you configure a static LAN IP address, you need to set the "Subnet mask" 255.255.255.0 and the 'default gateway' on 192.168.1.1 and "DNS server" to 192.168.1.1.  Note that some network devices can not use server proxy DNS at 192.168.1.1.  In this case, the value "DNS server" your real address of Internet DNS server (found in the router when connected to the Internet).

  It is also important that the same value static LAN IP address no two devices on your network.

  **********************

  After you gave your camera at a fixed LAN IP address, then go in "Port Redirection" in the router and configuring the ports one (or more) to the address LAN IP fixed camera.

  In order to access your camera from the Internet, you will need to either:

  (1) get a fixed Internet IP address (static) address from your ISP and configure your router to use this address, or

  (2) use a free service such as DDNS.  DDNS allows you to use a dynamic Internet IP address, but can connect you by using the same URL.

  I hope this helps.

• Problems with WRT610N v2 + WAG54GS v1.0 of port forwarding

  Background:

  I have a WAG54GS v1.0 (Appendix A) that I use to manage my home network and my ADSL connection. I bought a WRT610N v2 (which I will refer to as the router) with the intention that he would replace the functions of networking of the WAG54GS (which I will call the modem), who could be relegated to handling just the Internet connection. Both are running their latest firmware.

  I got this configuration to work, but with a problem: I lost a lot of flexibility with regard to port forwarding. The problem is the only way I managed to get the Internet to work with the 192.168.0.1 router and the modem to 192.168.1.1. If I try and that you have both 192.168.0.x or 192.168.1.x then connect to Internet no longer works under any configuration options, I've tried.

  What wants to say that when I go to port forwarding of installation in the modem, I can only forward to clients on 192.168.1.x, but the router can only transmit to 192.168.0.x. The only things that I can go to work are situations where triggering serial port can be applied, so that when a connection is made to the relevant port to an external IP address, and then this external IP address to communicate on this port. As you can guess this covers almost all cases.

  Question:

  Would it not be possible to have the router and the modem on 192.168.0.x or 192.168.1.x, allowing port translation work as expected. Which should in principle be possible with the modem bridge mode except that it is impossible to configure the PPPoA settings needed to connect to my ISP.

  Or I'll have to rethink the configuration of the network (i.e. buy a dedicated ADSL modem and remove entirely my WAG54GS?)

  In fact in the end what I figured out was that according to my WRT610N concerned my WAG54GS is my ISP and that was all he needed to know on the Internet connection. So I had to connect to the WAG54GS with an IP address static, stuck that IP in the DMZ of the WAG54GS and left the WRT610N to manage port forwarding like all devices that connect will make it through that. (Yes, I've disabled features wireless of the WAG54GS)

  I'm reasonably sure that I tried the combination of settings you suggested (including moving the WAG54GS off the Internet port on the WRT610N, which I wanted to avoid in any case as I have four devices permanently connected in any case) and found that it still does not. And I wasn't saying two to 192.168.1.1 set at any point, my darkened auto focus was that change only the last block of the IP address doesn't have to work for Internet access.

• Problems with static IP setting for the port forward through 2 routers

  I currently have cable internet connected to a router (Linksys E2000 w / v1.0.03 firmware). This router is connected to another router, a Linksys E3200 with firmware v1.0.02. In order to correctly forward ports through the E3200, I understand that I need to set up a static IP address on the router.

  I almost followed the steps in this video, but when I enter all the IP addresses for the static IP address settings, it allows me to access the router configuration page. I try to get the new IP address that I gave (which he tries to move automatically once I have save settings) and the connection times out. I am able to access internet otherwise, however. From here, I have to do a factory reset on the router and start from square one.

  Anyone have any ideas? I'm quite frustrated and would like to get ports forwarded so I can get my server properly set in place.

  1. If it has connected LAN - LAN you will need to disable the DHCP server on the E3200.

  2. the best option would be to use the 'bridge' on the E3200 mode (in the latest firmware) and connect the internet port to the main router.

  3. If connected LAN - LAN (or in Bridge mode) all internet related functions on the E3200, including ports are not relevant. There is no need to set up the port on the E3200 redirects. All shipping is done only on the E2000 and nowhere else.

  4. What is the address LAN IP of the E3200? What is the address LAN IP of the E2000?

• Problem with Port Forwarding (When PPTP is upward) in the WRT-160N

  Hello world!

  I'm looking for more help with Port Forwarding in my new Linksys router. I bought the daysago afew router and was pretty surprised when I discovered that there is no DD - WRT firmware is installed in it (the router was 100% NEW when I bought it). I downloaded latest firmware original and flashed Linksys file successfully.

  But I still have the problem (even that I was on DD - WRT firmware too) with the port forwarding for my DC ++ and Vuze (app from torrents): I wrote port forward for ports 49151 (for Vuze) and 4000 (for DC ++) to pass on to my desktop computer (IP 192.168.1.201) - I saw a post on this forum, that there could be a problem If you transfer to an IP address, which is within the local area of DHCP, so I forwarded to IP.201 (my local DHCPzone is 192.168.1.100-. 149) But does not forwardind (())

  What's wrong?

  My configuration:

  Router IP: 192.168.1.1

  PPTP (I my ISP)

  IP address: 192.168.226.127

  Default gateway: 192.168.226.2

  DNS 1: 192.168.1.1

  2 & 3 DNS: 0.0.0.0

  The IP address of the PPTP server: 192.168.226.2

  User name: *.

  Password: *.

  _____________________

  Simple Port Forwarding:

  Name of the external port application port internal protocol for IP address Enabled

  Vuze 49151 49151 times checked 192.168.1.201

  DC 4000 4000 checked two 192.168.1.201

  As you mentioned in your post that your ISP has provided you with a PPTP connection with an IP address: 192.x.x.x. The IP address that is provided by your ISP is in a private beach, and if you try to transfer all the ports on your router, it will not work, as long as your ISP modem is blocking this port. If you need get a public IP address from your ISP.

  As you get Private IP of your ISP, if this connection is called as NAT behind NAT and your Modem behaves like a router.

  So now you have 2 options, get the public IP address from your ISP or change the type of connection.