Allow external ip

Hello Nicolas,

As mentioned by Rfcat please be more specific on your setup.

However, by the screenshots, you shared, under Destination host/Network I see a Private IP, usually, you would select the Port2 WAN to interface IP that has your public IP, if Port1 is your WAN interface, then make sure you’re allowing the traffic on that specific port, otherwise, the XG will never see the traffic.

Also please share a screenshot of the API_CSE service you created.

Regards,

In fact i would like to redirect the traffic on my ip public (82.65.68.118:3001) to my internal server. On the second time i have to accept the connexion from the external ip 82.64.194.247 to my internal server without vpn on the port 3001.

Hello Nicolas,

Since you’re using version 17, you just create a Business Application rule.

Is the Public IP assigned to the XG or the XG is seeing a Private IP on the WAN interface?

So your Firewall rule should look like this

Source Zones = WAN

Destination host/Network = The WAN port

Services = Original service or customer service (in  your case your custom port is set correctly)

Forward to

Protected server = This would be your server or computer you want to connect to

Protected Zone = The zone on the XG where your server/computer is located

Mapped Port = Usually the same set set in Services, but if your server is listening in a different Port then you will change it here.

NOTE: This is an example with RDP, it  isn’t recommended to configure RDP on WAN

Regards,

Hello Nicolas,

Since you’re using version 17, you just create a Business Application rule.

Is the Public IP assigned to the XG or the XG is seeing a Private IP on the WAN interface?

So your Firewall rule should look like this

Source Zones = WAN

Destination host/Network = The WAN port

Services = Original service or customer service (in  your case your custom port is set correctly)

Forward to

Protected server = This would be your server or computer you want to connect to

Protected Zone = The zone on the XG where your server/computer is located

Mapped Port = Usually the same set set in Services, but if your server is listening in a different Port then you will change it here.

NOTE: This is an example with RDP, it  isn’t recommended to configure RDP on WAN

Regards,

Hi thanks, the Ip public is not assigned on the xg, do i have to do it ?

Hello Nicolas,

It would be better for you that the XG has the Public IP assigned to the WAN interface, it isn't 100 mandatory but it’s recommended since this simplifies configurations and troubleshooting.

if you don't want to, then make sure your upstream router has a DNAT rule passing that port number down to the XG.

Regards,