21 Replies Latest reply on Sep 6, 2013 12:06 PM by noor

    Port Forwarding

    grifter New Member

      We have a point 2 point t1 setup to provide internet to a remote location using 2 netvanta 3200. (the public addresses are examples)

       

      Site 1 internet modem

                    router A is assigned the public address from the modem

                     connects to router B is connected to router A via the P2P T1

                     and is connected to the LANs router

                     Behind the Lans router is a server 192.168.1.150 the needs port 21 forwarded to it

       

      router A ppp1 is set to 192.168.1.14

      Router B ppp1 is set to 192.168.1.13

       

      The wan interface on the lan router is given 192.168.2.1 from the DHCP server on router B

      Lan router has port forwarding all set.

       

      How do I set up the port forwarding and in which router do I put it. A or B or does it have to go in both.

        • Re: Port Forwarding
          levi Employee

          grifter:

           

          Thank you for asking this question in the support community.  When you get a chance, will you please answer the following questions and provide some additional information?

           

          I am having difficulty understand the layout and network subnetting based on the description.  You mentioned that the subnet connecting the two routers is 192.168.1.x (192.168.13 & .14); yet, you also mentioned that there is a server in that same 192.168.1.x subnet (192.168.1.50).  Then you also stated there was a subnet with 192.168.2.x.  Do you have a network diagram?  Is the "lans" router something other than ADTRAN, and where is it located in the network?

           

          Please, do not hesitate to reply with additional information or questions.

           

          Levi

          1 of 1 people found this helpful
            • Re: Port Forwarding
              grifter New Member

              The server is behind a linksys router that is at 192.168.2.10 Network.jpg

                • Re: Port Forwarding
                  levi Employee

                  grifter:

                   

                  Thank you for replying with the network diagram, that is very helpful.  For this application to work, in this scenario, you will need to change the subnet behind the Linksys router, and the IP address on the server.  I would recommend making that subnet something like 192.168.3.0 255.255.255.0.  Then you could make the IP address of the Linksys router 192.168.3.1 and the server 192.168.3.150.

                   

                  In the design I described, most likely, all you would need to do is configure the ADTRAN (router A) for the port forward.  Here is the Configuring Port Forwarding in AOS document and [video] Configuring Port Forwarding in AOS.

                   

                  I hope that makes sense, but please let me know if you have any additional questions or information.  I will be happy to help in any way I can.

                   

                  Levi

                    • Re: Port Forwarding
                      grifter New Member

                      I am sorry i made a mistake in the ip addresses. the PPP addresses are 192.168.3.14 and 192.168.3.13. Sorry for the confusion. That being said I should only have to add a security zone "port forwarding" private to 192.168.1.150 in router A.

                        • Re: Port Forwarding
                          levi Employee

                          grifter:

                           

                          Yes, if that link in the diagram is actually in the 192.168.3.x subnet, not the 192.168.1.x subnet, then all you should have to do is configure the port forward on router A to 192.168.1.150.  Let me know if you have further questions.

                           

                          Levi

                  • Re: Port Forwarding
                    grifter New Member

                    I made to rule on router A public security zone to forward port 21 to 192.168.1.150. No good so I tried to forward to 192.168.2.1 still no go. I added a new more accurate pic.

                    network diagram.png

                      • Re: Port Forwarding
                        levi Employee

                        grifter:

                         

                        Does Router A have IP connectivity to the FTP Server (can Router A ping the server)?  If there is IP connectivity, and there are no firewalls blocking the traffic, then the port forward from Router A to the IP address of 192.168.1.150 should work.  If you would like to reply with the configuration of the port forward in Router A, I will be happy to review it for you.

                         

                        Levi

                        • Re: Port Forwarding
                          levi Employee

                          grifter:

                           

                          Thank you for sending the configurations.  It appears you do not have the routing setup properly yet.  For routers A and B you will need a static route in addition to the static default route.  Router A will need a static route to the 192.168.1.0 /24 subnet with a next hop IP address of Router B (ip route 192.168.1.0 255.255.255.0 192.168.3.13).  Router B will need a static route to the 192.168.1.0 /24 subnet with a next hop IP address of the Linksys router (ip route 192.168.1.0 255.255.255.0 192.168.2.1).  The Linksys router will need a default route.

                           

                          Levi

                            • Re: Port Forwarding
                              grifter New Member

                              Wow, can you help me with this. I paid your company to setup these up. I am disappointed that they where not setup correctly. What commands do I issue to router A and router B to accomplish this?

                                • Re: Port Forwarding
                                  grifter New Member

                                  P.S. thank you for all your help on this matter.

                                  • Re: Port Forwarding
                                    grifter New Member

                                    So as not to interrupt service to the client should I do the remote one (router b) first or does it matter?

                                      • Re: Port Forwarding
                                        levi Employee

                                        grifter:

                                         

                                        In addition to adding the static routes I recommended above, you should also remove the firewall on Router B.  I provided the commands again below.

                                         

                                        Router A:

                                        CLI:

                                        enable

                                        <enter enable password>

                                        configure terminal

                                        ip route 192.168.1.0 255.255.255.0 192.168.3.13

                                        end

                                        write


                                        GUI:

                                        Data > Route Table > "Destination Network = 192.168.1.0"; "Destination Mask = 255.255.255.0"; "Gateway = Address = 192.168.3.13" > Add > Save


                                        Router B:

                                        CLI:

                                        enable

                                        <enter enable password>

                                        configure terminal

                                        no ip firewall

                                        ip route 192.168.1.0 255.255.255.0 192.168.2.1

                                        end

                                        write


                                        GUI:

                                        Data > Firewall > Firewall / ACLs > "Enable = "unchecked"" > Apply

                                        Data > Route Table > "Destination Network = 192.168.1.0"; "Destination Mask = 255.255.255.0"; "Gateway = Address = 192.168.2.1" > Add > Save


                                        Levi

                                • Re: Port Forwarding
                                  Employee

                                  grifter -

                                  I went ahead and flagged the "Correct Answer" on this post to make it more visible and help other members of the community find solutions more easily. If you don't feel like the answer I marked was correct, feel free to come back to this post to unmark it and select another in its place with the applicable buttons.  If you have any additional information on this that others may benefit from, please come back to this post to provide an update.  If you still need assistance, we would be more than happy to continue working with you on this - just let us know in a reply.

                                   

                                  Thanks,

                                  Noor