DMZ or a Port Mapping Range for A.E.???

I'm currently having an awful time with a recent playstation purchase named SocomIII. It seems that in order to get my mic to work on it's online feature, I need to either open an array of ports, (i.e. 6000-7000) or enable DMZ. I can't figure out how to do either. To make matters worse, I just sent my powerbook out to be fixed (Don't ask ... my ac adaptor's male end snapped off into the powerbook's jack) ... so now I type to you from Windoze land .......

Run the Airport Admin Utility. In the "Base Station Chooser" window that pops up, select Help->About Airport Admin Utility. What version of the utility is shown there? If it is older than 4.1, download the Airport 4.1 update from:
http://www.apple.com/support/downloads/airport41forwindows.html
...and try following my instructions again.
You can always look around in the version you are running - either after clicking on "Base Station Options" under the Airport tab, or under the Port Mapping tab. It's there somewhere!

Similar Messages

Default Host (DMZ) and Port Mapping together

Hi all,
I have the G5 set as a default host for all my web services through the Airport Extreme.
In the Airport Extreme's Port Mapping tab, a user is not prevented from using the port mapping tab even when the Default host is set. I want to serve video through another port not on the G5.
Does this mean I can set up port mapping for ports I do not want to go to the default host? (my G5 in this case)
I asked this on the airport forum and never got an answer, maybe you G5 folks might know. (Or maybe there is a setting that will redirect from the G5.)
Thanks in advance,
Jamy

I figured it out. I can't have a DMZ and separately port mapping on the Airport.

Setup Airport Extreme Port Mapping for Swann DVR16-2600

Have a Swann video surv system and want to use iPhone 4 and Web to view camera displays remotely. It requires setting up port mapping for the DVR so it can serve ports 80 and 9000 to the remote display app and web screens.
Have signed up for a static public ip address from ISP since they do not allow port mapping using DHCP. Trying to setup so I can use the SwannView application on iPhone 4 and use Webview in browser to access/see security camera displays on/through the DVR. Not working correctly - only partial success.
Reconfigured Airport Extreme for the new ip address and tried to setup port mapping for dvr which needs a web port 84 and another port 9000. Can connect to DVR on internal network using the public static ip:84 and the internal static ip:84 but it only shows a SWANN splash page and an error about not able to load ipaddress:84/65536. Seems like something is preventing the Web display from completely launching - should see a login page but not getting it.
Airport is set to use static ips in the 10.0.1.2 to 10.0.1.10 range with the DVR assigned 10.0.1.5. Tried to set the port mapping for 84 and 9000 but not sure those are working correctly. Swann support tried accessing the DVR over the public ip address and they cannot get through. So suspect problem is with configuring the Airport Port Mapping settings and services, etc. on the Airport Extreme. I can get to the DVR internally using the public ip address:84 and the internal static ip address of the DVR:84 but support cannot get to it from external web.
Tried both Safari and IE 5 and both show same problem trying to launch the Swann login page, etc. iPhone Swannview app doesn't work either.
Any ideas about proper port mapping settings for those ports in the Airport Extreme? Is this correct setting for the Service Type: _http._tcp and do you need to add settings for the public and private udp ports. The udp port fields are empty. Only have entries in the Private IP Address and Public and Private TCP port fields.
Is there a way in Safari or IE5 to set security to see the public ip address as a friendly site and not block anything from loading?

Set port mapping for 85 (not 84) and 9000
Also, if you haven't, be sure to go into the Swann DVR setup and disable the "enable UPnP" option. The UPnP protocol will not work with Port mapping feature of the Apple Airport Extreme.

Time Capsule port mapping is broken for L2TP Servers behind NAT config.

I'm hoping that someone here can refute the below bug assertion... am I missing something?
There is a bug with Apple’s Time Capsule/Airport Express Base Station (TC/AEBS) rendering L2TP servers on the LAN unusable:
When TC/AEBS is used as a router providing NAT services to the LAN, it will NOT under any circumstance provide port mapping services for 500/UDP, 1701/UDP, & 4500/UDP making L2TP VPN servers on the LAN side of TC/AEBS are unreachable from the WAN/Internet side.
*The conditions for my tests*:
3 different external networks used for all tests: MacBook Air at home on TWC network, the Air on AT&T mobile dongle, & CentOS server at ThePlanet.
MobileMe configuration was removed from both the TC/AEBS & Snow Leopard Server on the LAN.
I used port 501 for my control-test; spot checks of other ports worked as well, though they were all < 10000.
Simultaneous local and server monitoring of port traffic using
tcpdump -vvv -i en0 -s 0 -X port 500 or port 1701 or port 4500 or port 501
The TC/AEBS was configured to forward UDP ports 501, 500, 1701, & 4500 received from the WAN interface to the Snow Leopard Server on the LAN.
The port forwarding was accomplished both 1) manually via AirPort Utility, and 2) automatically via Snow Leopard Server’s Server Preferences utility. Each was tested separately.
*The tests*:
Netcat with the following commands, in turn, on the server:
nc -l -u 501
nc -l -u 500
nc -l -u 1700
nc -l -u 4500
which causes traffic to the udp port specified to be dumped to std out. Provides a confirmation of the tcpdump output.
On the various external networks, nc -u WAN-address-of-AEBS.example.com 501 to send UDP packets on port 501. The output of the nc -l 501 command and the server-run tcpdump confirmed that packets left the client and made it to the server as expected. Remember, 501 is the control-test.
For each test permutation on ports 500, 1700, & 4500, no packets made it to the server.
Based on some web research, I’m not the only one to have found trouble with this configuration, but I haven’t been able to find any conclusive tests.
I’ve filed a bug with Apple (#7720101) and encourage you to do the same.
Message was edited by: WebMarc

Confirmed here. This only seems to be a problem with Airport 7.5.x firmware though - I find the older TCs running 7.4.2 work as expected even with BTMM / MobileMe services active.
I'm so glad you posted this - I haven't found it mentioned anywhere else and was beginning to feel very alone with this problem. I also found that having two TC 7.5s in the mix - one at both ends - also results in no response to SSH or Remote Desktop ports.

Help port mapping for lorex security system

i need to find out how to do my port mappping, not sure what to put in the fields . trying to set up for remote viewing. i have ddns set up, but need port mapping

The following are the basics for setting up an 802.11n AirPort for port mapping/forwarding:
Port Mapping Setup
To setup port mapping on an 802.11n AirPort connect to the AirPort's wireless network, and then use the AirPort Utility, in Manual Setup, to make these settings:
1. Reserve a DHCP-provided IP address for the host device.
AirPort Utility > Select the AirPort > Manual Setup > Internet > DHCP tab
On the DHCP tab, click the "+" (Add) button to enter DHCP Reservations.
Description: <enter the desired description of the host device>
Reserve address by: MAC Address
Click Continue.
MAC Address: <enter the MAC hardware address of the Lorex security system device>
IPv4 Address: <enter the desired IP address>
Click Done.
2. Setup Port Mapping on the AirPort.
AirPort Utility > Select the AirPort > Manual Setup >Advanced > Port Mapping tab
Click the "+" (Add) button
Service: <you can safely ignore this option as you will be making custom port mapping choices for your security device>
Public UDP Port(s): <enter the appropriate UDP port values>
Public TCP Port(s): <enter the appropriate TCP port values>
Private IP Address: <enter the IP address of the Lorex security system device>
Private UDP Port(s): <enter the same as Public UDP Ports or your choice>
Private TCP Port(s): <enter the same as Public TCP Ports or your choice>
Click "Continue"

Linksys App bug with port mapping

So I have the Linksys app installed on my Android phone. My router, WRT1900AC, is set up using port mapping. The port mapping is for an ssh app to control my 3 web servers. Each servers internal port is 22 and each servers external port is 20, 22, and 23 each one mapped to port 22. When signed in the the routher itself, not through the app, I can configuer these ports fine. However when I attempt to configuer these ports or the ip appress through the app, I get an error saying the port is in use. It seems the app is seeing the three servers using the same internal port and throwing an error.
Has anyone else experienced this?

I recommend you not use ports in the first 1000 unless they are for the standard server they are specified for. This is a good IT policy.
Example:
Port 22 External to internal IP Address of SSH server port
Port 21 External to internal IP Address of FTP server port
Instead use undefined ports in the higher end of the range.
Example:
Port 10001 External to internal IP Address of SSH server port
Port 10002 External to internal IP Address of SSH server port
The Linksys stock firmware will only do DNS proxing which isn't great for server networks.
For this application I recommend OpenWRT McWRT v1.0.5:
https://github.com/Chadster766/McWRT/releases
Install luci-ssl to enable SSL access and open router port 443 for standard secure remote access.
FYI:
Unless you have a USB to TTL cable for firmware recovery I recommend always flashing OpenWRT using the Linksys stock UI. This will put the Linksys stock firmware into the alternate boot image in case manual recovery is needed.
Do not delete the LAN, WAN and WAN6 interfaces. Pay attention to OpenWRT notices that say things are not reversible. OpenWRT can be unforgiving in those circumstances. If you have the $9.00 USB to TTL cable it won't matter because you can always load firmware through the boot loader.
OpenWRT McWRT has some issues:
https://github.com/Chadster766/McWRT/issues
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

I have airport extreme and just purchased a D-Link DCS-932L home network camera. D-Link says I need UpNp but the extreme doesn't support this. Can I use port mapping? if so anyone know how to set that up? thanks

I have airport extreme and just purchased a D-Link DCS-932L home network camera. D-Link says I need UpNp but the extreme doesn't support this. Can I use port mapping? if so anyone know how to set that up? thanks

Since the D-Link DCS-932L is accessible on the local network via a web browser, you should be able to access this camera from the Internet if your router has a publically accessible Public IP address. If your ISP provides you with a dynamic Public IP address, you may want to use a DDNS service to make it easier for you to locate your camera whenever your ISP changes your IP address.
Start the AirPort Utility > Select the 802.11n AirPort Extreme Base Station (AEBSn).
Select Manual Setup.
Verify that Connection Sharing = Share a public IP address is selected on the Internet > Internet Connection tab.
Select Advanced, and then, select the Port Mapping tab.
Click the plus sign to add a new port mapping.
For Service, leave the default; this will change to "Custom" once you start entering port values.
In the Public UDP Port(s) and Public TCP Port(s) boxes, type in a 4-digit port number (e.g., 8888) that you choose. In the Private IP Address box, type the internal IP address of your camera. In the Private UDP Port(s) and Private TCP Port(s) boxes, enter the appropriate port values that should have been provided to you by the camera manufacturer. Click Continue.
In the Description box, type a descriptive name like "Internet Camera Access," and then, click Done.
Click on Update.
To connect to the shared Camera from a remote location using a Mac or PC:
Start your favorite web browser.
Enter either your Public IP address or DDNS-provided Domain Name, followed by a colon and the Public port number that you choose in step 7 of the previous procedure. For example: http://123.123.123.123:8888 or http://www.mydtdnsdomainname.com:8888

NAT configuration and Port Mapping for xBox

I'm looking for help with port mapping to open up the NAT for an xBox One. I'm working with the following network devices:
xBox One
DSL Modem: Embarq (ZyXEL) 660R series
Airport Extreme version 7.7.3
I understand the following from researching the issue:
The default settings for both devices block the ports needed for xBox Live.
Airport Extremes are not on the compatible list for xBox.
Port Mapping is better then creating a DMZ for the xBox.
The xBox needs its own manually set IP address.
I switched my Network>Router Mode from Off (Bridge Mode) to DHCP and NAT. I then created a DHCP Reservation and the Port Settings for that IP.
After doing this, the Airport would restart and display a warning - Double NAT. I figured this was because the 660 settings showed the NAT Mode to be SUA Only. The Edit Details link displayed an empty table where you edited the SUA/NAT Server Set. I switched from NAT Mode>SUA Only to None. So there was my Double NAT and I would have thought that would have removed one.
I also disabled the Firewall and Enabled the UPnP.
After restarts the Airport continued to display the Double NAT error. However, with the 660's NAT Mode set to None, the Internet was not there. Web browsers and email accounts replied with server not found.
Only with the 660 set to SUA Only and the Airport in Bridge Mode is the Internet accessible. I now have the details for the SUA filled out for the xBox's IP address and ports.
Hypothesis
Since both devices are acting as DHCP servers the port mapping is not working. Rather then have the 660 distribute IP addresses and then having the Airport distribute another range of numbers, I need to have both devices bridge and distribute one range of numbers. Currently the 660 is using the 192.168 range and the Airport is using the 10.0 range.
Am I correct? Any thoughts and suggestions are welcome.

Port forwarding through a double NAT.. is near impossible.. !!
And the xbox is so attuned to using UPNP it is very hard not to.. even port mapping is not a great fix. Since apple decided gamers did not count as users for Airports.. I think honestly it is best to bypass the airport and stick to upnp from the modem router.
What method of authentication does your ISP use? Because it is really better to use one router.
And in fact the router should be the Zyxel. If you plug the Xbox to the Zyxel running in full router mode, with the airport removed from the network does it work and open NAT??
If not replace the Zyxel with a modern listed router that is xbox compatible and bridge the airport to it.

DMZ v. Port Range Forwarding????

Ok, DMZ opens all ports. But I was wondering if port range forwarding might be better. Once again I am still trying to eliminate lag with my 360. I enabled the port forwarding for the ports specified by the 360. I also blew all ports wide open with DMZ. Is it better to just port forward without DMZ? I don't care about the security issues. I just want speed. I already disabled all firewall features of the router. My PC is locked up tight and I'm not worried about it. The ports I forwarded are 88 TCP and 3074 Both. Is there something I'm missing here? I'm running a 5 meg connection. It's faster than my old DSL connection. I even found a website that told me to change my IP manually on 360 which I have done and it worked to open my NAT. Any gamers please help. Again I'm not trying to do anything to my PC. That connection is fine. Just need to tweak more upload with less lag to 360.

ok.......How do I use them? Triggered Range start port? to end port? Forwarded Range start point? to end point? Would it be the same forwarded ports? do I put the same port # in all for areas? I'm working with WRT54GS ver. 6

How do I configure my airport utility for port mapping?

I am trying to view my FOSCAM cameras over the internet while away from home. They work fine in my house using Wi-Fi. Instructions say to do port forwarding. I have cameras set up, but can't get my router to port forward. I found "Port Forwarding" in Airport Utlility then NETWORK. 'Router mode: DHCP and NAT';on 'Port Settings I click on the "+" at the bottom. 'Private IP Address: populates to 10.0.1.201'. What goes in the other blocks?

Please check out the following AirPort User Tip for details on how to configure Port Mapping on the AirPort routers. I would suggest that you check your FOSCAM documentation as to what TCP and/or UDP ports are required to access their IP cameras from a remote location.

OBI11g intallation issue - Error in validating the port range for auto port

I am using the intaller to install OBIEE 11g on my machine. When I get to step 6, I receive the error messages below. Currently I also have OBIEE 10g on my machine so the ports may be already used.
Does any one know how I can resolve this issue? I previously installed both 10g and 11g on my old laptop but I can't figure out why I'm getting these errors this time.
INST-08010: Error in validating the port range for auto port allocation. At least 3 ports should be free within the range 9500-9699 for the Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
Ensure that a minimum of 3 ports are free within the range 9500-9699 for auto port allocation to work correctly for the Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
INST-08012: Error in validating the port range for auto port allocation. At least 3 consecutive ports should be free within the range 9500-9699 for the OPMN, in addition to 3 free ports required for Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
Ensure that a minimum of 3 consecutive ports are free within the range 9500-9699 for auto port allocation to work correctly for the OPMN, in addition to 3 free ports required for Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
INST-08010: Error in validating the port range for auto port allocation. At least 9 ports should be free within the range 9700-9999 for the BI System Components.
Ensure that a minimum of 9 ports are free within the range 9700-9999 for auto port allocation to work correctly for the BI System Components.

your hosts file have duplicate name that point to two different IP addresses.
10.37.29.1 test1.xyz.com
10.10.10.1 test1.xyz.com

INST-08010: Error in validating the port range for auto port allocation

Hello guys, I am using the installer to install OBIEE 11.1.7.0 on my machine. When I get to step 6, I receive the error messages below:
INST-08010: Error in validating the port range for auto port allocation. At least 2 ports should be free within the range 7000-7500 for the Adminserver and Adminserver SSL.
Ensure that a minimum of 2 ports are free within the range 7000-7500 for auto port allocation to work correctly for the Adminserver and Adminserver SSL.
INST-08010: Error in validating the port range for auto port allocation. At least 3 ports should be free within the range 9500-9699 for the Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
Ensure that a minimum of 3 ports are free within the range 9500-9699 for auto port allocation to work correctly for the Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
INST-08012: Error in validating the port range for auto port allocation. At least 3 consecutive ports should be free within the range 9500-9699 for the OPMN, in addition to 3 free ports required for Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
Ensure that a minimum of 3 consecutive ports are free within the range 9500-9699 for auto port allocation to work correctly for the OPMN, in addition to 3 free ports required for Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
My Operating System below:
Linux Red Hat 5.9 X86 64bit
My uname -a are below:
Linux redhat59 2.6.18-348.el5 #1 SMP Wed Nov 28 21:22:00 EST 2012 x86_64 x86_64 x86_64 GNU/Linux
My /etc/hosts file are below:
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1   localhost.localdomain localhost
10.10.80.19 redhat59
My /etc/sysconfig/network are below:
NETWORKING=yes
NETWORKING_IPV6=no
HOSTNAME=redhat59
GATEWAY=10.174.27.228
My /etc/sysconfig/iptables are below:
# Generated by iptables-save v1.3.5 on Tue Dec 3 17:01:17 2013
*filter
:INPUT ACCEPT [425:33860]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [307:40164]
COMMIT
# Completed on Tue Dec 3 17:01:17 2013
My ifconfig are below:
eth0      Link encap:Ethernet HWaddr 52:54:00:55:9B:C9
          inet addr:10.174.27.233 Bcast:10.174.27.255 Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:200216 errors:0 dropped:0 overruns:0 frame:0
          TX packets:95849 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:110668992 (105.5 MiB) TX bytes:209784134 (200.0 MiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1 Mask:255.0.0.0
          UP LOOPBACK RUNNING MTU:16436 Metric:1
          RX packets:109200 errors:0 dropped:0 overruns:0 frame:0
          TX packets:109200 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:257845896 (245.9 MiB) TX bytes:257845896 (245.9 MiB)
my /etc/sysconfig/network-scripts/ifcfg-eth0 are below:
# Virtio Network Device
DEVICE=eth0
BOOTPROTO=static
BROADCAST=10.174.27.255
HWADDR=52:54:00:55:9B:C9
IPADDR=10.174.27.233
NETMASK=255.255.255.0
NETWORK=10.174.27.0
ONBOOT=yes
Have any suggestion please?
Many Thanks
D

In setDomainEnv.sh set debugFlag=false or you can just remove it.
NodeManager is a charm after that. it can take any number of ports.
Cheers !!

[ERROR]:INST-08010: Error in validating the port range for auto port allocation

I am installing OBIEE 11.1.1.7.0 on a linux x86 version. I get the below error when running the installer: [VALIDATION] [ERROR]:INST-08010: Error in validating the port range for auto port allocation. At least 2 ports should be free within the range 7000-7500 for the Adminserver and Adminserver SSL. [VALIDATION] [SUGGESTION]:Ensure that a minimum of 2 ports are free within the range 7000-7500 for auto port allocation to work correctly for the Adminserver and Adminserver SSL. [VALIDATION] [ERROR]:INST-08010: Error in validating the port range for auto port allocation. At least 3 ports should be free within the range 9500-9699 for the Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager). [VALIDATION] [SUGGESTION]:Ensure that a minimum of 3 ports are free within the range 9500-9699 for auto port allocation to work correctly for the Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager). [VALIDATION] [ERROR]:INST-08012: Error in validating the port range for auto port allocation. At least 3 consecutive ports should be free within the range 9500-9699 for the OPMN, in addition to 3 free ports required for Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager). [VALIDATION] [SUGGESTION]:Ensure that a minimum of 3 consecutive ports are free within the range 9500-9699 for auto port allocation to work correctly for the OPMN, in addition to 3 free ports required for Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager). installation Failed. Exiting installation due to data validation failure. Solution suggested on other post is below: your hosts file have duplicate name that point to two different IP addresses. 10.37.29.1 test1.xyz.com 10.10.10.1 test1.xyz.com But in my case, My host file has different entiries as shown below: 169.36.71.228 usl20027808.am.hedani.net usl20027808 169.36.72.9 usl2002788.am.hedani.net usl2002788 Please suggest!

In setDomainEnv.sh set debugFlag=false or you can just remove it.
NodeManager is a charm after that. it can take any number of ports.
Cheers !!

Does port mapping (for minecraft) compromise the security

Hi,
My son wants to install the minecraft server on his laptop, so he and his brothers can play in one world.
I did find the information how to forward ports, but I am a little reluctant to do so, because I don't know how save it is. Does port mapping compromise the security of my network? Would this open a backdoor for hackers to invade all computers conneted to the network?
I would apreciate any advice.

No, not if done properly.
Generally, port mapping is designed to allow a direct connection from the Internet to a specific computer running a specific service on the local network. In this case the specific computer is your son's laptop and the specific service is the Minecraft server. Any other computers and services on that local network, other than your son's laptop will remain off limits to the Internet.
The key to making sure that this stays secure is that you assign the laptop a static IP address, so it is the only one that is directly addressable from the Internet, and only the ports required for the Minecraft server are mapped to that static IP address belonging to the laptop.

TCP's port mapping for safe access

So, I have a statical IP and need to organize safe access to my domestic NAS via Capsule from Global Internet, it means I need https://.
As I know (may be it's not) TCP's set 443 can provide https:// only.
I could not find such TCPs pre-set in Capsule.
I tried to use all pre-set (one after the other) and even made a new set with TCP 443 (just by hand), but all my attempts ended by changing TCP's 443 to 8080 automatically and I saw https:// when I tried to make a safe enter.
Pls., explain, how can I do it?
Thanks' a lot advance.

You have to map port 443 to the NAS IP in your local lan..
You should be able to access it no problem.. there is nothing preset on the TC.
Read the instructions by Tesserax on port mapping for v5 or v6 utility depending on which one you use.
https://discussions.apple.com/community/wireless/airport?view=documents
IMHO if your TC is not the latest AC you will have far more success with v5 utility.
v6 seems to have issues making it stick.
You can load the older version into Mountain Lion .. but according to your profile you are on 10.6 so still fine for v5.

DMZ or a Port Mapping Range for A.E.???

Similar Messages

Maybe you are looking for