Port forwarding to multiple computers
Hello,
I am port forwarding from my AirPort Express to my tower so that I can connect via sftp. This uses port 22. If I wanted to connect to another one of my macs at home with sftp can I simply give it any port I want and opn that port in the firewall? Or is there a way to port forward on the same port to multiple machines (which seems weird).
Thanks for your any help.
You would use a different public port but the same local port on that Mac.
So your port mapping rule would be:
Public port: 222 (or whatever)
IP address: IPAddressOfYourMac
Private port: 22
In this example, the device on the Internet would need to use port 222 to access that Mac.
Similar Messages
-
WRT160Nv2-Problem with Single Port forward to multiple servers with same internal port numbers.
On my network I have 3 systems that I've set up as RDP hosts. And need to get to all three of them externally. So I'm trying to do the following single port forwarding.
RDP 1 Forward 4000 to port 3389 for 192.168.1.11
RDP 2 Forward 4001 to port 3389 for 192.168.1.12
RDP 3 Forward 4002 to port 3389 for 192.168.1.14
When I hit "Save Changes" I get the error "Port range already exists". So it's good that it won't let me overlap ports generally, but at the same time, I'm trying to send them to different IP address. There should be no overlap in this case. Please advise
I'm trying this on the WRT160Nv2 with firmware 2.0.02, which I had just bought this weekend.kevj,
Thanks for your suggestion. I have now upgraded the firmware to 2.0.03 build 7. But I am still seeing the error message
As I mentioned previously, I'm trying to single port forward to multiple machines in the following way:
Machine 1: Forward 4000 to port 3389 for 192.168.1.11
Machine 2: Forward 4001 to port 3389 for 192.168.1.12
Machine 3: Forward 4002 to port 3389 for 192.168.1.14
The error appears to be generated by the fact that 3389 is selected for multiple external port numbers, but the same internal port number. The router I believe isn't taking into account that the similar internal port numbers aren't taking into account the different internal ip address I'm trying to send this to.
This would be a standard sort of practice for running a live HTTP server on one machine, and a new beta HTTP server behind the router on a secondary machine on the same internal port, but different external port numbers for test purposes from the outside.
Please advise
Thank you. -
Port Forwarding to two computers.
I want to open ports for an application that I use on two different computers. I have been able to forward the port to on (static) ip and everything works fine. But when I use the application on another computer the port is closed. On my previous router I could say port map to 192.168.0.* and all computers would have the port open, and the app would be fine on either computer. The AEBS does nor recognize the *.
When I set up the same port forward to two different ip addresses with the same ports open I get an error that the port mapping already exists. Is there a way just to have the port open for any computer on the network?
How would I allow incoming traffic to a specific port on either computer? Normally the application is only used on one computer at a time.
CarlosLighthouse?
http://codelaide.com/blog/products/lighthouse/ -
As the title suggests...
I have a mix of five Mac and PC's at home using an Airport Extreme Base Station as the router. I need many ports opened on the AEBS for all of the computers- not just one computer. (for example: three people want to play TF2 on Steam at the same time; each machine needs the correct ports open on the router). Port forwarding only allows me to forward a given port to a single IP, yet I need that port open for five differnt IP's, all at the same time.
How do I do that on an AEBS?
In the same way, I have a small office of four iMacs using an old airport with the same exact issue. I would like to be able to connect to all of them remotely with Apple Remote Desktop, but the port forwarding on the airport only allows a port to forward to a single IP. I want to be able to tunnel into the office network and log onto any machine behind the Airport extreme... not just a single IP. I currently have it set up where I can tunnel into the office from my house, I can find the one machine that the port forwarding has been assigned to, I can log on and everything is just fine... with one machine. How do I open the firewall for the other machines?
TL,DR version: How do you open ports on an Airport Extreme Base Station instead of forwarding ports? Forwarding ports doesn't work for multiple IP's.You can open a single or multiple ports to a single device or different ports to different devices, but you cannot open the same port to multiple devices via the AirPort Utility for the Apple routers.
-
ARD won't save multiple computers with same IP and different port!
I'm trying to access multiple computers over the internet behind a firewall with port forwarding.
I can access each computer, but ARD won't save the IP address and port (in IP Address column of ARD 3.1) of multiple computers with the same IP address. It will only save ONE. I've tried 'add by address', adding a list for each computer or adding a list for all those computers. Nothing has worked. ARD will actually change the first computer's IP address to 0.0.0.0
Example: Static IP address
Computer 1 xx.xxx.xxx.xxx:51 (public port 51 is forwarded to port 5900 on computer 1)
Computer 2 xx.xxx.xxx.xxx:52 (public port 52 is forwarded to port 5900 on computer 2)
Computer 3 xx.xxx.xxx.xxx:53 (public port 53 is forwarded to port 5900 on computer 3)
Has Apple really overlooked this or am I missing something? Isn't this how most people would remotely manage multiple Macs offsite?
ThanksARD cannot do this as you're asking. If your
workstations get their addresses from an NAT device
rather than being "real", the ports also need to be
forwarded in the router to the workstation's internal
IP address. ARD uses port 3283 for the reporting and
updating function, so if your Macs are getting their
IP addresses through NAT, since you can only forward
a port to a single workstation, you can only get
reports, push package/files to etc. for a single
workstation.
ARD uses the VNC protocol for observation and
control, though, and there are a range of IP
addresses for that protocol, starting with 5900. ARD
uses 5900 by default, so that port would be forwarded
to the first workstation. You would, I believe, need
to install VNC servers on the systems (since the ARD
client cannot listen on any port other than 5900
while VNC servers can be set for other ports such as
5901, 5902, etc. You would then forward 5901 to the
second workstation (and on to 5902, 5903, etc.). You
can then use the following information:
Remote Desktop 2: How to specify a port number
for a VNC client
to connect.
The only other options are: 1) to run the ARD
administrator on a workstation on the network, and
then take control of that system from outside, either
via VNC or another copy of ARD, or 2) set up a
virtual private network (VPN) so that when you
connect from outside, your admin system is officially
part of the local network.
Hope this helps.
That definitely helps. I have ARD installed on my MBP and on a workstation on the LAN. I have used ARD from the MBP to control ARD on a workstation on the local network, but it can get a little tricky. I already have VNC setup on all the workstations. I used to use COTVNC prior to purchasing ARD 3.1.
I guess what I'm really asking is...
How do I add a list of workstations and save the settings (same IP address for each workstation with different ports?) to control/VNC via ARD?
I simply want a list that shows each workstation, so I can control/VNC them using ARD offsite.
Name: Computer 1 IP Address: 123.123.123.123:5901
Name: Computer 2 IP Address: 123.123.123.123:5902
Name: Computer 3 IP Address: 123.123.123.123:5903
I don't want to have to manually type in the IP address into ARD every time.
Will ARD simply not add another computer to the list if it has the same IP address but different port number as a computer already on the list? I haven't been able to find a way to make ARD do this. -
SRP547W, How to use multiple WAN IPs for port forwarding?
Hi folks,
We've run into some difficulty trying to take advantage of multiple WAN IPs in conjunction with the SRP547, and I'm hoping someone here can help out or at least tell us that we're going to need to buy a different router...
What we're trying to acheive is the ability to port forward from our distinct public IPs to different internal servers. Looking at the options under Port Forwarding it looks like we can only configure forwards at the "WAN interface" level, but our problem is that we can't work out how to set up separate interfaces for each of our Public IPs...
Our ISP provides us with a fully managed NTU/router with a single "Internet" ethernet port, which we can use by statically configuring IPs on our end. For this configuration this port has been directly patched to the WAN ethernet port on the SRP547W.
We have been allocated a 255.255.255.248 (/29) subnet, giving us 5 usable IPs after the ISP's gateway address is taken into account, like so:
a.b.c.208 Network Address (/29 subnet)
a.b.c.209 ISP Gateway
a.b.c.210 IP1
a.b.c.211 IP2
a.b.c.212 IP3
a.b.c.213 IP4
a.b.c.214 IP5
a.b.c.215 Broadcast Address
On the SRP we've set up the default "Ethernet WAN2" sub-interface with the following details for IP1
VLAN ID: 4088 (Uneditable)
Connection Type: Static IP
Internet IP Address: a.b.c.210
Subnet Mask: 255.255.255.248
Default Gateway: a.b.c.209
The next step (I would have thought) would be to add a second sub-interface, using similar info for IP2
VLAN ID: 4000 (Chosen arbitrarily)
Connection Type: Static IP
Internet IP Address: a.b.c.211
Subnet Mask: 255.255.255.248
Default Gateway: a.b.c.209
When we try to do so however we get:
Fail!
Conflict with Ether_WAN2 interface address type
I should mention at this point that we're running on firmware version 1.02.01 (023).
Any suggestions on how we can proceed?
Is there a CLI or other method of configuration that might work if the web interface won't?
Thanks,
Tim.OK, I've seen reference to this solution before but not much in the way of details. Perhaps you can spell out how this ought to work, as the Software DMZ doesn't behave as I'd expected it to.
As before, on the SRP we've set up the default "Ethernet WAN2" sub-interface with the details for IP1 with a /29 subnet.
VLAN ID: 4088 (Uneditable)
Connection Type: Static IP
Internet IP Address: a.b.c.210
Subnet Mask: 255.255.255.248
Default Gateway: a.b.c.209
We'd now like to expose a server function on IP2, let's say LAN details for this server are:
VLAN: 3000
VLAN IP Range: 192.168.1.1/24
Server IP: 192.168.1.10
Server Port: 80
So first we turn on Software DMZ:
Status: Enabled
Public IP: a.b.c.211
Private IP: 192.168.1.10
WAN Interface: Ether_WAN2
My understanding, based on what you've said, is that this should expose the whole server to external access via IP2. Unfortunately, it doesn't seem to work this way - we don't seem to have any access at all. Perhaps there's a default deny rule on the firewall?
Just to be sure, I tried creating a rule to allow HTTP traffic to the server in the Advanced Firewall page.
In Interface (WAN): All
Out Interface (LAN): VLAN.3000
Source IP: 0.0.0.0
Source Subnet: 0.0.0.0
Destination IP: 192.168.1.10
Destination Subnet: 255.255.255.255
Protocol: TCP
Source Port: Any
Destination Port: Single:80
Action: Permit
Schedule: Everyday
Times: 24 Hours
Still no dice. What am I missing?
Cheers,
Tim. -
Scan multiple ports on multiple computers
Hey guys,
I wrote the following batch script to use along with portqry tool which is availabe from microsoft download center.
The tool can scan multiple ports on a single computer, but it is not capable of scanning multiple ports on multiple computers in one attempt. Also it gives a big output which is a bit tough if you are trying to prepare a report.
Here is the batch file which takes input from server.txt where all the computer names present and scans for the below ports on each computer and gives you output in a beautiful way.
TCP: 135, 445, 1433, 1434, 1024, 1040
UDP: 1433, 1434
Copy and paste the below code in a batch file and use it along with portqry.exe.
echo off
for /f "tokens=* delims= " %%a in (server.txt) do call :vk %%a
:vk
portqry -n %1 -e 1434 -q -p udp
if errorlevel = 2 goto filtered_1434
if errorlevel = 1 goto failed_1434
if errorlevel = 0 goto success_1434
goto 135
:filtered_1434
Echo %1 udp Port 1434 is listening or filtered
goto 135
:failed_1434
Echo %1 udp Port 1434 is not listening
Goto 135
:success_1434
Echo %1 udp Port 1434 is listening
goto 135
:135
portqry -n %1 -e 135 -q -p tcp
if errorlevel = 2 goto filtered_135
if errorlevel = 1 goto failed_135
if errorlevel = 0 goto success_135
goto 445
:filtered_135
Echo %1 tcp Port 135 is listening or filtered
goto 445
:failed_135
Echo %1 tcp Port 135 is not listening
Goto 445
:success_135
Echo %1 tcp Port 135 is listening
goto 445
:445
portqry -n %1 -e 445 -q -p tcp
if errorlevel = 2 goto filtered_445
if errorlevel = 1 goto failed_445
if errorlevel = 0 goto success_445
goto 1433_tcp
:filtered_445
Echo %1 tcp Port 445 is listening or filtered
goto 1433_tcp
:failed_445
Echo %1 tcp Port 445 is not listening
Goto 1433_tcp
:success_445
Echo %1 tcp Port 445 is listening
goto 1433_tcp
:1433_tcp
portqry -n %1 -e 1433 -q -p tcp
if errorlevel = 2 goto filtered_1433_tcp
if errorlevel = 1 goto failed_1433_tcp
if errorlevel = 0 goto success_1433_tcp
goto 1434_tcp
:filtered_1433_tcp
Echo %1 tcp Port 1433 is listening or filtered
goto 1434_tcp
:failed_1433_tcp
Echo %1 tcp Port 1433 is not listening
Goto 1434_tcp
:success_1433_tcp
Echo %1 tcp Port 1433 is listening
goto 1434_tcp
:1434_tcp
portqry -n %1 -e 1434 -q -p tcp
if errorlevel = 2 goto filtered_1434_tcp
if errorlevel = 1 goto failed_1434_tcp
if errorlevel = 0 goto success_1434_tcp
goto 1024
:filtered_1434_tcp
Echo %1 tcp Port 1434 is listening or filtered
goto 1024
:failed_1434_tcp
Echo %1 tcp Port 1434 is not listening
Goto 1024
:success_1434_tcp
Echo %1 tcp Port 1434 is listening
goto 1024
:1024
portqry -n %1 -e 1024 -q -p tcp
if errorlevel = 2 goto filtered_1024
if errorlevel = 1 goto failed_1024
if errorlevel = 0 goto success_1024
goto 1040
:filtered_1024
Echo %1 tcp Port 1024 is listening or filtered
goto 1040
:failed_1024
Echo %1 tcp Port 1024 is not listening
Goto 1040
:success_1024
Echo %1 tcp Port 1024 is listening
goto 1040
:1040
portqry -n %1 -e 1040 -q -p tcp
if errorlevel = 2 goto filtered_1040
if errorlevel = 1 goto failed_1040
if errorlevel = 0 goto success_1040
goto 1433
:filtered_1040
Echo %1 tcp Port 1040 is listening or filtered
goto 1433
:failed_1040
Echo %1 tcp Port 1040 is not listening
Goto 1433
:success_1040
Echo %1 tcp Port 1040 is listening
goto 1433
:1433
portqry -n %1 -e 1433 -q -p udp
if errorlevel = 2 goto filtered_1433
if errorlevel = 1 goto failed_1433
if errorlevel = 0 goto success_1433
goto end
:filtered_1433
Echo %1 udp Port 1433 is listening or filtered
goto end
:failed_1433
Echo %1 udp Port 1433 is not listening
Goto end
:success_1433
Echo %1 udp Port 1433 is listening
goto end
:EndFor what it's worth, I wrote a PowerShell script that does something like this a while back.
http://gallery.technet.microsoft.com/scriptcenter/97119ed6-6fb2-446d-98d8-32d823867131 -
How do I set up my air port extreme to do port forwarding? Running 10.7.4 I have a IP camera on my local wireless net work that I want to use from my iPhone 4s and other computers.
In most cable systems, the router you have will plug into your modem and just work automatically. A NAT (Network Address Translation) router takes your external IP and hands out LAN (Local Area Network) based IPs. All of the devices you are working with right now should handle the change automatically unless you've changed from the default automatic configuration.
The problem with your wireless end of this is that the iPhone is not yet 802.11n, only 802.11g. Because that router is not dual band, all of your wifi devices will be forced to slow down to 802.11g speeds. This won't matter much for each device that's connecting to the internet, as your bottleneck is still going to be there. Where you will see slowdowns is device to device connections, like transferring data between the devices. -
Allow Multiple Computers Access To The Same Port
I just received my AEBS in the mail this afternoon & set it up in no time. My college house has two Xbox 360s connected to the AEBS & I would like to open the NAT ports on both. I'm able to successfully forward the ports to allow an open NAT for one Xbox, but the Airport utility doesn't allow me to open the same ports for the other Xbox.
Is there a way to open a port to everyone connected to the router, or maybe a way to open a specific port used by multiple Private IP Addresses?Sorry, but no. Port mapping forwards inbound a single, or range, of ports (in one definition) to one single machine only. So, for example, you could not map port 25 to multiple email servers on your LAN. However, you could map port 25 (for email) and port 80 (for web) to a single device.
-
Confing port 3389 to access multiple computers
Hi, I need to have access to multiple computers using the RDC from windows. I can only put to work one computer at the same time . How can I enable port 3389 for more than one computer???
Thanks ,
Lilly MarinYou can try to use the port tiggering for the other IP's but I think a VPN would be better if you want to be able to access multiple PC's on your network. If your router supports a VPN then use the Quick VPN software for your router version to connect with a VPN. That will give you access to the whole network.
Richard Aichner (Ikester) -
Port forwarding for external access to VNC server on multiple machines
I will have 10 PCs connected to the WRT54GL wireless AP. I am testing with 1. It has a static addresses 10.155.22.51. It is running a VNC server at port 5951.
If I set my VNC client up to access 10.155.22.51:5951 it works through the WRT54GL wireless AP.
I set the WRT54GL port forwarding to 5951 - 5951, set the IP address to 10.155.22.51 and enable. The external address of the AP is 10.155.0.29 on the company LAN.
So I set the VNC client to access the AP address with the VNC port, i.e. 10.155.0.29:5951. I expect the AP to change the address to 10.155.22.51:5951. This does not work.
Note: the problem could be that the AP is going through NATting because I can also access it at 10.155.22.9 along with all the other PCs on that LAN, i.e. I can access the LAN directly from elsewhere on the company net.You can try changing the IP of the AP manually ... connect it to the Computer ..... access the setup page using http://192.168.1.245 .... use password as admin ....
Configure the IP settings first ...
Again login with new IP address .... configure wireless settings .....
Power down the AP & then the router ....
Wait for few minutes .... then power on the router ...first then the AP ... -
Control Multiple computers on the same router remotely
How can I connect to multiple client computers on the same network over the internet?
Whe I search for my ip address ( which is the same for both computers ) becuase they are on the same network only 1 of them how up. I am able to control that one fine.
Also I am able to control both machines the way I want when I am local on the same network but can only see the one machine when I am remote on another network.
Thanks
BTake a look at this thread:
https://discussions.apple.com/thread/3162938?start=0&tstart=0
If you only want to control those systems, using a service such as LogMeIn, iChat, or a mediator such as Slink may be easier, since you don't have to deal with port forwarding and issues with dynamic IP addresses.
Regards. -
Need more than 10 ports forwarded...any way??
Is there a way to increase the number of port forwards allowed in theWRT54G?
We have 15 computers that need access to port 4899 in the RAdmin remote access. Is there something I can do to gain more than 10 ip addresses access to this port .... like a ip range?
Thanks in advance.
DennisNo. Forwarding can be used only for 1 PC, in situation where you need to forward any particular traffic to particular terminal, such any servers. If you need to allow multiple Pc to access any particular traffic then you may trigger the port instead.
-
Hi,
So Every time i port forward 113 when my power goes out sometimes my computer will change ip and i have to keep logging in and changing to ip the forwards 113, on my other routers belkin i was able to make it keep my computer always with the same ip, i cant figure out how to do this with this router and it says something about port 113 in the options i assumed it was so i could keep all ips open port 113 is there an way to do that? to make all ips connecting to the router have the port open?
one of the two would be very good to have either keep my pc with the same ip or have all pcs connecting open port 113.
i have the
Simultaneous Dual-Band Wireless-N Gigabit Router WRT610N router
TIA
Solved!
Go to Solution.The function you are looking for is called "DHCP Reservation" and is right there on the main setup page.
It's impossible to open a port for more then one LAN IP address. Multiple LAN IP addresses would make no sense. This would mix communication of all your computers on this port... -
Trying to figure out pricing and plan options to add multiple computers to current subscirption. We currently have a subscription that allows the programs on two computers, but now I need 5 computers to be updated with CC. Have looked in to Small Business teams, but do not understand how many computers that is good for and if there is a professor or previous customer discount. Any help would be great, thanks!
Hi,
I presume that the new configuration is missing some parts as you seem to have the IP address of the external interface configured staticly on the interface but you have not configured any default route on the firewall? (Original configuration got default route dynamically and added it to the routing table)
You also mentioned that you were able to connect to the Internet which would indicate there was indeed a default route with the new configuration?
I am a bit confused about the host mask on the external interface (/32 - 255.255.255.255) ? Does the ASA really let you configure a host address on the interface? It can't lead anywhere as there is no next hop with a host mask. I think the ASA even blocks using a /31 mask link network which works with Cisco Routers.
I guess I would go through the basic troubleshooting step when the new configuration is in use
Check logs for any blocked connections or error messages
Check the Static PAT (Port Forward) configuration with the "packet-tracer" command
Capture traffic on the ASAs external interface (with the ASA itself) and confirm that you are seeing the TCP SYN of any connection attempts, or perhaps capture ICMP
- Jouni
Maybe you are looking for
-
How do i cancel my apple id and use the other one
How do i cancel my first apple id and use my other one
-
Special Characters in XML Publisher PDF Output
Hi, I'm printing "Long Text" in report output in every line based on tab. Report output is having special characters like \n. I was using below to print in next line, any suggestions for removing \n. Below is what was happening: =================== R
-
How to create twenty different formulars with the same headline?
hi, I am german an I would like to create different formulars (at least 20) with Acrobat pro XI. Is there a possibility to feed in just one time personal datas like name, adress etc. and to use it in all of the 20 formulars (these datas should be pro
-
Re: removal of time/date stamp
How do I remove the time/date stamp from photos in iphoto?
-
InDesign CS3 basic setting question
I just upgraded this weekend and cannot find the preference or setting that allows me to 'show all menu items' without having to click on them. Under every menu and sub-menu item there is an entry for 'show all menu items.' I'd like all the lists to