Port Forwarding to specific public IP Address

Hi, I would like to forward ports to a specific public IP address.
I could do this with my old cheapo Netgear router, is this possible with the Airport Extreme?
So far I have assigned a static private IP address, and I can open ports to the world, but I only want a specific public IP to be allowed through and I can't see a way to do this through the Airport Utility (6.1).

Port forwarding, on the AirPort routers, is designed to work with private IP addresses on your local area network. These private IP addresses can either by dynamic or static. It allows for any communication coming from the Internet (any public IP address) to the local IP address via a specific port or ports.

Similar Messages

NAT port-forwarding and WAN side IP addresses

I have my Airport Extreme setup to forward port 21 to an FTP server on the LAN side of my network. The AE is connected via DSL to my ISP.
When a client from the WAN side connects to my server, the server's LOGS don't list the IP of the client, rather it says the client connected from my assigned WAN IP. For example (fake ip's):
Client ----> AE ----> FTP-SERVER
130.129.12.3 76.99.89.3 10.0.1.2
Log states client connected
from IP: 76.99.89.3
My previous Linksys router, with the same DSL modem and ISP, would report the client as connecting from 130.129.12.3.
Am I missing something in how I am configureing my AE? Or, is this how the AE manages port-forwarding and there's nothing I can do about it?
I used to use firewall rules to control access to the FTP server, i.e. rules set on the server. This can't be done anymore with the AE operating as it does.

Seems to me that the NAT translation in the Airport 802.11n is such that it does not use the incoming IP of clients connecting from the WAN side to a computer on the LAN side. The ingoing and outgoing packets reach their respective destinations, it is just that the AE uses some kind of non-standard routing (at least not that I am used to working with).
This is bad because it prevents the use of some forms of access controls on BSD and Linux servers on the LAN side, TCP Wrappers and iptables for example. This can create obvious security problems when WAN ports are set to forward to such a LAN client. We are already getting hit with robot-like script attacks on our server, this was a problem with our Linksys router, but with the above mentioned tools and scripts we were able to block abusive clients.
Perhaps an Apple can work on resolving this issue in a future firmware release, at least make it an option... Anyone from Apple out there?
jmj

Lync Edge and Proxy server public DNS records port forwarding rules

Hi All
I have question in regards to port forwarding rules for port 443 of simple url.
I have 4 public ip addresses.
1 edge server (4 nics , 3 running with different ip for sip, meet and dialin in DMZ network, 1 connected to internal local network).
1 proxy server (2 nics, 1 running with an ip which is in DMZ same as edge, and 1 connected to internal local network)
1 front end (lync 2013 standard installed.) connected to internal local network
1 office web apps . connected to internal local network
The question is that I am using 3 public ip addresses respectively on public DNS records for sip, meet and dialin(av) and using port 443 which has been set on edge server. So , I can use 3 DMZ network ip address on edge for sip, meet
and dialin (av) port forwarding from 3 public ip addresses as per in Microsoft document.
However, I also have a reverse proxy .Hence, my understanding is all public DNS records except SIP and port 443 should be pointed and port forwarded to reverse proxy ip address which is in DMZ network as it would redirect 443 and 80 to 4443 and 8080 to front
end.
Now the question has been clear, if simple URLs public DNS record and port forwarding rules for port 443 should be pointed to reverse proxy server, why they need to be set on each ip address and port number in Front end server topology to edge server?
If anyone knows, please give a help how to set it correct and what is supposed to be a correct configuration for a topology lync 2013

Hi George
Thanks for your reply. Attached is my topology which could make my it bit clear. You may see the public dns host record from the image. I set sip, meet, dialin , and owa 4 host records. The first 3 records are pointed to lync edge by doing a NAT with port
443 which is the same as per you said. However my understanding is they should be pointed to reverse proxy instead as for instance, I need meet.xxx.com with port 443 to be redirected to port 4443 through reverse proxy server to the front end. So when the external
customers who do not have lync client installed to their machine then we can shoot a lync meeting and send to them via outlook and they just need to click on join lync meeting link in the email to join in such a meeting based on IE. (Is my understanding correct?)
If lync web meeting works like so , then the question is why I need to set three SAME addresses in front end topology builder for edge and make them point to edge server instead?　
１. Access Edge service (SIP.XXX.COM) ---> I understand that it is used for external login lync front end.
2. Webconf edge server(Can I set to meet.xxx.com which is the same as simple URL that points to reverse proxy?) ----> If I can set this address to be the same as simple url address that points to reverse proxy, why should it need to be NATed to edge
instead? TO BE HONEST, if I HAVE tested, if I set this url as sip.xxx.com which means to use a single FQDN and ip address with port 444 and points simple url meet.xxx.com to reverse proxy, it will still work to join lync meeting sent by
outlook.I DO NOT REALLY UNDERSTAND WHAT this URL used for at this stage.
3. AV edge --- same as webconf
Regards
Wen Fei Cao

Rvs4000 ip port forwarding

Hi,
i have a little problem with the configuration of my rvs 4000 router;
1 - I have purchased 8 static ip address with my adsl contract, from 213.136.137.234 to 213.136.137.241
2 - wan settings of my rvs4000 are like below:
Connection Type:
Static IP
Interface:
Up
IP Address:
213.136.137.234
Subnet Mask:
255.255.255.248
Default Gateway:
213.136.137.233
DNS1:
62.94.0.41
DNS2:
62.94.0.42
3 - now my problem; i have already configured several port fowarding using "single port forwarding" function of my router but with this metho i can only forward internet request arriving to 213.136.137.234. How can i do port forwarding for my other ip addresses?
Thank you

With this router, you will not be able to port forward to those public ip addresses. This router does not support that function. What you would need is one of our rv series routers, like the rv042, rv082, or the rv016. With these devices you can do what is called one to one nat and reference a public address to a private address behind the firewall. The rvs4000 router does not have that function.

Rv320 - port forwarding from a specific WAN IP

Hi, i just received and configuring the rv320 router. I can successfully set the port forwarding from WAN to specific LAN IP address. I would like to know is it possible for this device to set the port forwarding from a specific WAN IP address? Thank you for the help.

I have the same problem, and have already tried creating a Access Rule without success. I need to forward Remote Desktop Port 3389 from a specific public IP address to a internal server. I do this with other lower-level Cisco Small Business routers all the time, but cannot get this to work with the RV320. Here's what I've tried:
1) Create new Access Rule
2) Create new Service called TS for TCP port 3389-3389
3) Set new Access Rule to Allow
4) Set Source Interface to Any (I've also tried WAN1, etc.)
5) Set Source IP to the only single public IP that will be allowed
6) Set Destination IP to the single internal IP address
7) Set Scheduling to Always
When I use any standard RDP app from the outside, the router blocks 3389 access.
What am I missing? Can anyone help resolve this, or do I need to call in to Cisco Support?

Port forwarding to ip address only allows input of last digits

I have the Linksys BEFW11S4 router and am trying to port forward to a static ip address but the port forwarding screen is hard coded to 192.168.1.__ and only allows me to enter the last 3 digits of the quartet. Does anyone know how I can get past this? I'm trying to connect a DVR server using this static ip address.

If your ISP assigns you a static public IP address and you are required by your ISP to configure that on your router, then you have to configure the static IP, subnet mask, gateway IP and DNS servers in the internet connection section of the main setup page in the web interface of the router.
You then assign a static local IP address like 192.168.1.25 to your DVR, subnet mask 255.255.255.0, gateway 192.168.1.1 and DNS 192.168.1.1 or the DNS servers of your ISP.
You don't have to disable the DHCP server function in the router.

Port Forwarding to two computers.

I want to open ports for an application that I use on two different computers. I have been able to forward the port to on (static) ip and everything works fine. But when I use the application on another computer the port is closed. On my previous router I could say port map to 192.168.0.* and all computers would have the port open, and the app would be fine on either computer. The AEBS does nor recognize the *.
When I set up the same port forward to two different ip addresses with the same ports open I get an error that the port mapping already exists. Is there a way just to have the port open for any computer on the network?
How would I allow incoming traffic to a specific port on either computer? Normally the application is only used on one computer at a time.
Carlos

Lighthouse?
http://codelaide.com/blog/products/lighthouse/

Port Forward in Cisco series 800

Dear Support
below the configuration of Cisco Series 800 Router that Has VDSL port of internet , the configuration as below :
i add three command
what is required in order to make port forward
ip nat inside source static tcp 8000 10.10.10.10 8000 dilar 0
ip nat inside source static tcp 554 10.10.10.10 554 dilar 0
ip access list extended 100
permit ip any any
what is required to make port forward to the local ip address 10.10.10.10 from outside interface that is VDSL port ?
! Last configuration change at 10:47:44 KSA Wed Apr 22 2015 by aamalsup
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime
service password-encryption
hostname AamalNet
boot-start-marker
boot-end-marker
logging buffered 51200 warnings
enable secret level 2 5 $1$Y4PF$K6TQ5wf0gcHiO5IxvLZba0
enable secret level 5 5 $1$WZeO$BzTCl0C0e1078CWxExJK0/
enable secret 5 $1$plq6$P5HVL/tR81cs0GFDrD.0V/
aaa new-model
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authentication login sdm_vpn_xauth_ml_2 local
aaa authorization exec default local
aaa authorization network sdm_vpn_group_ml_1 local
aaa session-id common
clock timezone KSA 3 0
crypto pki trustpoint TP-self-signed-1682106276
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1682106276
revocation-check none
rsakeypair TP-self-signed-1682106276
crypto pki certificate chain TP-self-signed-1682106276
certificate self-signed 02
30820250 308201B9 A0030201 02020102 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31363832 31303632 3736301E 170D3032 30333031 30303038
35315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 36383231
30363237 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C2F3 49897460 71FEB259 7794B7C6 D398958A 2D338F0F C69F0E75 1137B16C
C261A275 8416DAF6 FC19AA6E 50024019 66CE4DB8 3AFAB6FE CE892B42 86A93490
97259E47 D740B2F4 9AA2D307 7B676841 2CAAA879 D945A6FD 717B507F 77399332
1644CEDE 884BF133 ACFBBC80 9869A104 54CC3EEE 9D521378 EC762D86 C3F0ABC9
CA990203 010001A3 78307630 0F060355 1D130101 FF040530 030101FF 30230603
551D1104 1C301A82 18417761 6C416D61 6C792E61 77616C6E 65742E6E 65742E73
61301F06 03551D23 04183016 80149ADD A651C9F9 F8369354 5C904777 090FEB75
72E0301D 0603551D 0E041604 149ADDA6 51C9F9F8 3693545C 90477709 0FEB7572
E0300D06 092A8648 86F70D01 01040500 03818100 50ACCA98 1A5FCCAD FC61D703
A8589B02 AFB8CD47 BD1CC7B0 B095C97F AA0604A8 F8495053 C8A9CBB9 644F5674
318A7AA0 873250AD 1DE28CE2 BE21ED19 BF212CF7 E2A97CFB FFA62F1E 643CEDFE
90D02109 719FD4D3 98E6C40B D61CE89C D2426C1E 3CBD9FBE 397F7F7C F1DD279E
14F8BB2D ABFA784B 6E04274B EDCBFC8F A805E91D
    quit
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 10.10.11.1
ip dhcp pool lan
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server 212.93.192.4 212.93.192.5
lease 0 2
ip dhcp pool wireless
import all
network 10.10.11.0 255.255.255.0
default-router 10.10.11.1
dns-server 212.93.192.4 212.93.192.5
lease 0 2
no ip domain lookup
ip domain name aamal.net.sa
ip name-server 212.93.192.4
ip name-server 212.93.192.5
no ipv6 cef
cwmp agent
enable download
enable
session retry limit 10
management server password 7 094D4308151612001D05072F
management server url http://aamalservice.aamal.net.sa:9090
license udi pid C887VA-W-E-K9 sn FCZ17459018
archive
log config
hidekeys
username k privilege 15 password 7 020D
username admin privilege 15 password 7 14161606050A
controller VDSL 0
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp client configuration group aamalnet
key aamalnet
dns 212.93.192.4 212.93.192.5
include-local-lan
dhcp server 10.10.10.1
max-users 10
netmask 255.255.255.0
crypto isakmp profile sdm-ike-profile-1
   match identity group aamalnet
   client authentication list sdm_vpn_xauth_ml_2
   isakmp authorization list sdm_vpn_group_ml_1
   client configuration address respond
   virtual-template 1
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
mode tunnel
crypto ipsec profile SDM_Profile1
set security-association idle-time 60
set transform-set ESP-3DES-SHA
set isakmp-profile sdm-ike-profile-1
bridge irb
interface ATM0
no ip address
no atm ilmi-keepalive
interface ATM0.1 point-to-point
pvc 0/35
pppoe-client dial-pool-number 1
interface Ethernet0
no ip address
shutdown
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface Virtual-Template1 type tunnel
ip unnumbered Dialer0
tunnel mode ipsec ipv4
tunnel protection ipsec profile SDM_Profile1
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
switchport mode trunk
no ip address
interface wlan-ap0
description Embedded Service module interface to manage the embedded AP
ip unnumbered Vlan1
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
interface Vlan2
no ip address
bridge-group 2
interface Dialer0
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap callin
ppp chap hostname [email protected]
ppp chap password 7 0007145E2E5A05522E1858
no cdp enable
interface BVI2
ip address 10.10.11.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 1 permit 10.10.11.0 0.0.0.255
access-list 23 permit 212.93.196.0 0.0.0.255
access-list 23 permit 212.93.192.0 0.0.0.255
access-list 23 permit 212.93.193.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.255
access-list 23 permit 10.10.11.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
snmp-server community private RW
snmp-server community public RO
bridge 1 protocol ieee
bridge 1 route ip
bridge 2 protocol ieee
bridge 2 route ip
privilege interface level 5 encapsulation
privilege interface level 5 description
privilege interface level 5 no encapsulation
privilege interface level 5 no description
privilege interface level 5 no
privilege configure level 5 ip route
privilege configure level 5 interface
privilege configure level 5 controller
privilege configure level 5 ip
privilege exec level 5 copy running-config tftp
privilege exec level 5 copy running-config
privilege exec level 5 copy
privilege exec level 5 write memory
privilege exec level 5 write
privilege exec level 5 configure terminal
privilege exec level 5 configure
privilege exec level 5 show processes cpu
privilege exec level 5 show processes
privilege exec level 2 show running-config
privilege exec level 5 show configuration
privilege exec level 2 show
privilege exec level 5 clear counters
privilege exec level 5 clear
banner exec
CC
% Password expiration warning.
Cisco Router and Security Device Manager (SDM) is installed on this device and
it provides the default username "cisco" for one-time use. If you have already
used the username "cisco" to login to the router and your IOS image supports the
"one-time" user option, then this username has already expired. You will not be
able to login to the router with this username after you exit this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you want to
use.
banner login
CC
********STC AamalNet Service****************************************
********Authorize Access Only. For more Support Call 909************
line con 0
privilege level 15
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
stopbits 1
line vty 0 4
access-class 23 in
privilege level 2
transport input telnet ssh
scheduler max-task-time 5000
scheduler allocate 20000 1000
end

Hello,
Sure.
What version are you running?
Regards,

Does Verizon Wireless support Port forwarding.

The 4510L has port forwarding. But the IP address ports are all stealth. I know VW has to take security measures for spam and hackers but this is just a little over kill here. The IP addresses they use are from wdspco.org. At lest in my area. Come on VW where is a tech support that are not sale reps. This feature should be part of the ISP service. It should not be an issue to allow simple port forwarding for the NOC. I know the public IP address is not routable. Its not going to cost more to route.

We would love to support you with your Env3, jeffrey8066!
What can we do to help?
TamaraH_VZW
Follow us on Twitter @VZWSupport

Limit port forwarding connections based on IP

Is there anyway to limit port forwarding to specific IP addresses? I want to be able to SSH to one of my machines on my internal network but only from my work IP address. TIA Mike

I don't know that you can do it on the router, but if you're using SSH, you may be able to do it on the box you are trying to connect to. If I remember correctly you can configure SSH to ignore everything but IP's you specify.
I could be wrong, but it seems like I remember doing this on one of my Linux boxes in the past.

Port Forwarding not working correctly (BTHomeHub 2...

I recently picked up the new Call of Duty: Black Ops 2 for my pc. Playing online mathes works fine, however trying to join with my friends and connect with them for co-op fails to work. My NAT setting in game was listed as strict and my friends (both on BT) had moderate so I assumed it had to do with that.
After some research, I found out I had to forward ports to my PC which I've done but yet the game still refuses to connect. Sometimes I get lucky and, after forwarding the ports, I load up the game to be shown NAT: Open and I'm able to join my friends quickly, but after about one minute the game disconnects and my setting changes back to Strict.
Now my problem is either one of two things:
a) My ports are opening but are closing after a minute or two.
b) Something is wrong with my router.
It should also be noted that one of my friends actually had his NAT setting turn to Strict but he was easily able to forward his ports and get NAT open again. I copied exactly what he did and it didn't work. If it helps, I've also tried setting my computer up with a static IP and port forwarding to the exact IP address I set and not the device name, which still didn't work.
Thank you for any and all help. I really hope I can get this sorted soon.

Port forwarding is not likely to be the issue, there are many posts regarding NAT( Network Address Translation) issues, all over the Internet.
Here are some examples from this forum.
http://community.bt.com/t5/forums/searchpage/tab/message?filter=location&location=forum-board%3AOthe...
If you look at my port forwarding help page, there is an address you can go to to see if a port is still open. Just choose any one of the port numbers associated with your game, and see if it still shows as open.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Restricted port forwarding

Hi
I would like to configure port forwarding for only one remote address.
The situation is like this: I have two domains ( adddresses 10.0.0.0/8 and 192.168.1.0/24 ) and a very narrow minded router that only allows port 80 en 443 and in one direction. Servers in 192.168 also have an exta nic with 10.20 addresses.
The server at 10.10.10.38 needs to connect to MySQL in the other domain so I thought I could use port 443 and forward it to 3306.
When I use "netsh interface portproxy" I cannot restrict to 10.10.10.38 (everyone gets access), but configuring a firewall rule with local port=3306, remote port=443 for remote IP address 10.10.10.38 does not function as a port forwarder (so no-one
gets access).
How should I configure the firewall (Windows Server 2008 R2) ?
Regards,
Rob

Hi Rob,
First, let us learn more details about portproxy and clarify our thoughts. We configure the Windows Server 2008 R2 as the portproxy server.
When we use "netsh interface portproxy add v4tov4" command, we should specify those parameters, listenport=443,connectaddress=the IP address of MySQL computer, connectport=3306,listenaddress=local
IP address,protocol=TCP.
Then if the portproxy server monitored messages that were sent to port 443 and local IP address, it would forward the messages to port
3306 and to IP address of MySQL computer after establishing a separate TCP connection. The portproxy server was listening to port 443, if it discovers that some messages arrive at port 443, it would forward the messages to the port 3306 of MySQL server.
But this process couldn’t configure the portproxy server to restrict to 10.10.10.38. Our goals is, when 10.10.10.38 access Windows Server
2008 R2 IP address:443, the firewall allows the connection, then messages were forwarded to MySQL server IP address:3306. But if other clients want to access Windows Server 2008 R2 IP address:443,the firewall will block the connection. So we should configure
a firewall rule in the portproxy server. As we mentioned above, when we open port 443, we could only add 10.10.10.38 in the remote IP addresses.
Overall, portproxy works behind the firewall, they work together to achieve the above goal. And the result is:Client
request port 443 -----> Firewall of portproxy server allows 10.10.10.38
to pass -----> Portproxy server forward messages from port 443 to 3306.
Finally, the problem is that the restriction by the firewall does not work. To ensure the firewall works fine, we could disable all rules
except the rules we configured. Then try it again.
Best Regards,
Tina

How to get Port Forwarding to 8080 working on HH2

Hi,
How can I get port forwarding to 8080 working on my HomeHub2?
I have a QNAP TS219P NAS connected via wired Ethernet to my HomeHub2.
This has a Web Administration facility that should enable me to access & manage the NAS over the Internet.
I have set the NAS to have a fixed IP address of 198.162.1.100 and enabled a dyndns account to point to my ISP WAN IP. I then used Application Sharing on the HH to forward all traffic to 8080 to the NAS device (called "Kermit" in my case).
However, using http://mysite.dyndns.org:8080 simply brings up the admin page of the Home Hub.
Despite the HH telling me the port is forwarded correctly, http://www.canyouseeme.org reports the port as - "Error: I could not see your service on nn.nn.nn.nn on port (8080) ...Reason: Connection refused"
My HH firewall is set to "Default" (Allow all outgoing connections and block all incoming traffic. Games and application sharing is allowed.), but I have tried disabling it and this made no difference at all.
I know that dyndns and port forwarding are working in other respects, since I also set the NAS up as a Web Server with a simple home page, and forwarded port 80 on the HH through to the NAS. Requests over the Internet for the http://mysite.dyndns.org:80 home page work fine...
There's nothing in the HH Event log that I can make sense of and I'm going mad...
Is anyone able to talk me through some good ideas of how to progress this?

Another thing I thought of- did you setup the port forwarding to forward to your named IP address or to the hostname?
I would recommend setting the port forwarding to your named IP address:
http://192.168.1.254/app_config.lp?be=1&l2=0&l0=2&l1=4
In this menu (Application Sharing -> Configuration, select "User Defined" in Device. A textfield entry box appears below device and hardcode 192.168.1.100 in there).
Finally, any logs on the QNAP for your external connection attempts? - Could it be passing through the HomeHub and then get rejected by the QNAP?

Port Forwarding, MI424WR

I'm not even sure I'll give enough information here, because I don't really know what I'm talking about. However, I've been working with a couple of "technical" people from my office.
Essentially, I'm trying to connect two devices (Yamaha Disklavier Pianos) over my FIOS connection (for a process called Remote Lesson) and need to utilize port forwarding. I've tried the instructions on the www.actiontec.com website (Basic Port Forwarding on the MI424WR Verion Fios Router), but have been unable to connect successfully.
Basically, here's the two things I need to do (cut and pasted from a technical document draft). Can someone please advise what might be going wrong?   I could also forward the entire "connection" document to someone who might want to take a look at it and get a clearer picture.
At any rate, here are steps 2 and 3 of the process we're trying to do:
2. Port Forwarding for Remote Lesson (WAN to LAN)
- Port 58092 is used in both TCP and UDP by default.
        - Note: You can choose any port unless it has already used.
- Please configure a system to forward the access of this port to Disklavier.
3. Release of the port to the Internet (LAN to WAN)
- If the access of port 58092 is filtered, please release this port in both TCP and UDP.
         Note: If your partner has configured another port number, please release that port in both TCP and UDP.
Port setting table
PORT FORWARDING (WAN TO LAN): IP Address (original LAN Address)
Port Number (origin)
Protocol: Both TCP and UDP
RELEASE OF THE PORT (LAN TO WAN): Port Number: Destination or all
   Protocol: Both TCP and UDP
Thanks for being patient with a "newbie" - I hope someone can help.

levesq56 wrote:
Essentially, I'm trying to connect two devices (Yamaha Disklavier Pianos) over my FIOS connection (for a process called Remote Lesson) and need to utilize port forwarding. I've tried the instructions on the www.actiontec.com website (Basic Port Forwarding on the MI424WR Verion Fios Router), but have been unable to connect successfully.
Thanks for being patient with a "newbie" - I hope someone can help.
If you're only trying to connect the 2 devices within your local lan you do not need to do anything with port forwarding. You would only need to add port forwarding rules if you are going to access the devices from remote sites.
The below addresses step 2 of your question.
Step 3 of your question is not needed as the actiontec does not block any port access from the LAN to the WAN
Step 2 allowing wan to lan access
If you are doing the latter then you would want to give the device fixed ip addresses, make sure they are out of the dhcp range of the actiontec router.
Then go to firewall setting
Select Port Forwarding tab
Select New Entry
add the IP address of the device in the Local Host field
Make sure Forward to Port is set as Same as incoming Port
Make sure Schedule is set as Always
Under protocols Select User defined
Make the service name whatever you want - e.g Piano
Select new server ports
Under protocols Select TCP
Under source port select single
enter 58092
Make sure destination port saya Any
Hit OK
Select New server ports again and repeat the last five steps for protocol UDP
then say OK
Say OK to the Edit port Forwarding rule
Now you should be able to access the device from the outside WAN

LRT224: Port Forwarding for a specific remote IP address

Hi all,
I want to create a port forwarding rule for a specific service (tcp port). But I want to ensure that only users from a specific internet IP address are able to establish a connection to this port, e.g. the remote address should be limited to 27.27.27.27.
The port forwarding configuration page does not offer a field for entering a single remote ip or ip range. Is there a way to achieve this?
Thank you for your help.
Matthias

Derfry, what you need is to configure two access rules under Firewall>Access Rules tab. One rule is to Deny all IP from accessing the service you are forwarding, and the other rule is to Allow the specific IP address.

Port Forwarding to specific public IP Address

Similar Messages

Maybe you are looking for