DNAT Setup not working

Hi,

very quickly, do you have a gateway assigned?

Ian

Where should i assign the gw ? The Client can connect through XG to WAN.

edit: You mean GW in General under Routing? Yes for Port2 is an GW per default installed

Hello Maik Purwin 

What is the Source Port in your Service? it should be *.

Regards, Ronak.

Hi Sourceport is 1:65535

No one an idea?

Did you change the source port as suggested by Ronak?

Ian

Hi,

if i configure sourceport with * than XP automatically setup 1:65535. ?!?!

Hi Mark,

tried to create a new service (protocol rule) and found as you did * translates which it didn't in earlier releases.

Do you have 22 disabled in the XG access, I am not sure what the effect would be either way. I suspect you would need to disable 22 in XG external interface, my thoughts.

Ian

Hi,

ok. At all if i say * or enter the whole Portrange, it must work too.  Do we talk about Zones? Than SSH is active for LAN but not for WAN, but this is only the Access to XG. I want to DNAT from external e.g. Port 22222 to internal Port 22.

Hi Maik Purwin ,

Can you share the snapshot of your firewall rule and network interface?

Also let us know IP of Destination Host and Protected Server.

Regards, Ronak.

Hi,

no screen, but configuration is on top and network is like that:       

• Port1
• LAN
• Physikalisch
• Verbunden
• Automatisch ausgehandelt   
• 192.168.0.4/255.255.255.0
• Statisch
                 
• Port2
• WAN
• Physikalisch
• Verbunden
• Automatisch ausgehandelt
• 192.168.1.3/255.255.255.0
• DHCP

hope that helps.

Hello Maik,

this changes a little bit.

You don't have i public-ip on your wan-interface, instead you have a transfer-net between the isp-router and the xg.

Therefore on the isp-router must be existing a portforwardingrule, which will be forward the traffic from the isp-router to the xg.
In your case you need a portforwardingrule on the isp-router, which will be forward every traffic for the isp-router-wan-ip:2222 to xg-port2-ip:2222.

And make sure, that the isp-router don't use ipv6 (e.g. with ds-lite) for his connection to the internet. In this case i mean (but i'm not sure), you don't have the possibility to connect your xg via public-ip from outside.

Mario  

Hello Maik,

this changes a little bit.

You don't have i public-ip on your wan-interface, instead you have a transfer-net between the isp-router and the xg.

Therefore on the isp-router must be existing a portforwardingrule, which will be forward the traffic from the isp-router to the xg.
In your case you need a portforwardingrule on the isp-router, which will be forward every traffic for the isp-router-wan-ip:2222 to xg-port2-ip:2222.

And make sure, that the isp-router don't use ipv6 (e.g. with ds-lite) for his connection to the internet. In this case i mean (but i'm not sure), you don't have the possibility to connect your xg via public-ip from outside.

Mario