Port Mapping Question

Well, I thought I had this all figured out...
About a year ago I set up an older AirPort Extreme Base Station (Version 5.7) successfully to port to an iMac running OS X Tiger Server. As Leopard came out I decided that I wanted to do a little upgrading around the house and purchased the new AEBS along with a Mac Mini to run the new server software.
I have no problems getting the AEBS set up, but the port mapping just doesn't seem to work correct.
Right now I reverted back to the old system and seem to be serving just fine on the Mac Mini with OS X Leopard Server... But I'd really like to leverage the new AEBS.
So, anyone out there can offer some advice on one of the settings I seem to be missing that seems to make this not work?
Thanks

It might also be a DCHS/NAT problem...
Here's a post I added this morning...
http://discussions.apple.com/thread.jspa?threadID=1320615&tstart=0

Similar Messages

Port mapping question - I need clarification

I have posted a question about port mapping previously but - although I thought I understood - it is still not working for me. I was hoping there was a kind soul out there who could humor me and explain port mapping with AEBS 802.11n as if there where talking to a 5 year old.
Thanks for the help and it's ok to laugh.

{quote:}This address MUST be outside of the range of IP addresses that your 802.11n AirPort Extreme Base Station's (AEBS) DHCP service is providing.{quote}
This actually is incorrect.
The statement that the mapped internal address must be static is correct; otherwise the AEBS will not, if the Mac is assigned a different dynamic (DHCP) IP address by the AEBS some time in the future, be able to forward packets to the Mac. However it is very straightforward to have the Mac computer be assigned an address dynamically by the AEBS and to have the AEBS always assign the same IP address to the same Mac computer. Thereby giving the Mac a static address inside the DHCP range.
In the AirPort utility go to Internet | DHCP | DHCP Reservations. Click "+" then enter the MAC (what Apple calls Ethernet ID if you are using wired or AirPort ID if wireless) hardware address of the Mac computer, give it an IP address, save it. Then that Mac computer will always receive that (static) IP address from the AEBS.
Why do this? Well by continuing to use DHCP (while having though a static IP address) you keep all the other benefits of DHCP such as automatically having the gateway address, the DNS server addresses given to the Mac. Otherwise you have to enter all this information manually on the computer if you put it outside the DHCP address range. This is very desirable, especially for most home users, as their DNS server entries are provided by their ASP and picked up by the AEBS. If the ASP changes DNS addresses the manually configured Mac machine will not know.
So in summary - for port forwarding it is NOT necessary for the Mac machine to be outside the DHCP range, in fact _it is desirable to keep it in the DHCP range_ *as long as* the Mac utilises DHCP reservation on the AEBS.
I have tested this and it works fine.

ARD AE Port Mapping Question

Hello. I have a LAN consisting of 5 macs hardwired with an eithernet switch, and connected to an Airport Extreme and a DSL modem. They all have static IPs. I want to be able to administer these computers with ARD via the internet from a remote location. I know that I need port mapping to do this, but am having trouble setting it up properly. Right now I can connect to one computer remotely (I have the ARD ports mapped to it, but don't know how to set up additional port mapping, so I can get to the rest of the machines on the LAN. Mapping them to the same ports doesn't work. Can someone help me out? Thanks!

mshanks, Welcome to the discussion area!
You would need to use different public ports for each machine. For example, if the ARD service running on each Mac uses port 5000 (I don't know which port this is only an example) and you have 5 Macs configure the port mapping to do the following:
public port 5000 -> Mac_0 on private port 5000
public port 5001 -> Mac_1 on private port 5000
public port 5002 -> Mac_2 on private port 5000
public port 5003 -> Mac_3 on private port 5000
public port 5004 -> Mac_4 on private port 5000

Quick question re: port mapping

Does the 802.11n base station have the same limit as the 802.11g base station regarding the maximum number of ports that the user can map?
In other (perhaps more coherent) words: The "g" base station only allows a user to specify a total of 20 ports in the "port mapping" pane of Advanced settings. Does the "n" station have the same limitation?

Anyone have any ideas or information? I'm not able to find anything clear by searching the knowledge base, etc.

Port mapping converting gui to cli

Hi,
I am having an issue with a new office LAN implementation and I was wondering if anyone can help.
The current setup has a Linksys router and there are port mappings for the servers for a inside and outside port. This has been input via GUI. I am upgrading to a 3845 router and have converted the GUI input to Cisco CLI. This however does not work and the LAN does not behave as it did before.
The Linksys GUI input is attached.

Hi @samdilloway,
A few questions for you:
Did you check if those servers can go to the internet?
Is the NAT functioning properly when they go outside?
Here is a link of a page with the step-by-step process of the port mapping configuration. Make sure you're doing it exactly like that:
http://kb.linksys.com/Linksys/ukp.aspx?pid=80&vw=1&articleid=21470
Also, a link of a TSHOOT page for the same problem:
http://kb.linksys.com/Linksys/ukp.aspx?pid=80&vw=1&articleid=22385
To be sure, the problem that you have is that users from outside cannot access to the services your mapping, right?
Let me know your answers.
HTH.
Don't forget to rate.
Rgrds,
Martin, IT Specialist

New Airport Extreme (802.11n): : Port Mapping... ***???

There are two different programs I was formerly using, whereby (after following instructions) I was able to create a static IP address for every machine on my network, plus open ports 8000 and 9990-9998 respectively. But ever since upgrading to the new Airport Extreme (802.11n), it completely stopped working. To boot, I've upgraded to Leopard on one of two of the machines (the other is still using 10.3.9).
I haven't been able to figure out for the life of me, how to configure it. It's no longer as obvious where and what information to put in. All guides that would remotely help are designed for the older Airport unit, which has completely different menus in the Airport Utility.
Is there anyone out there who has experience with Dot-Tunes and/or Nicecast or similar port mapping, who has the patience to describe, in layman's terms, what steps to take to get this set up correctly again, starting with how to reassign static IPs for my machines. I will not ask a lot of questions and take up too much more of your time. I'm just frustrated after a whole day of trying to figure this out and fruitless Google and forum searches.
Thank you so much.

I'm not familiar with either Dot-Tunes or Nicecast, but the following would be the general port mapping procedure with the 802.11n AirPort Extreme Base Station (AEBSn) using the AirPort Utility. Note in this procedure you will not need to assign a static IP address for each of your host devices. Instead you will be taking advantage of the AEBSn's DHCP reservations feature.
To setup port mapping on an AEBSn, either connect to the AEBSn's wireless network or temporarily connect directly, using an Ethernet cable, to one of the LAN port of the AEBSn, and then use the AirPort Utility, in Manual Setup, to make these settings:
1. Reserve a DHCP-provided IP address for the host device.
Internet > DHCP tab
o On the DHCP tab, click the "+" (Add) button to enter DHCP Reservations.
o Description: <enter the desired description of the host device>
o Reserve address by: MAC Address
o Click Continue.
o MAC Address: <enter the MAC (what Apple calls Ethernet ID if you are using wired or AirPort ID if wireless) hardware address of the host computer>
o IPv4 Address: <enter the desired IP address>
o Click Done.
2. Setup Port Mapping on the AEBSn.
Advanced > Port Mapping tab
o Click the "+" (Add) button
o Service: <choose the appropriate service from the Service pop-up menu>
o Public UDP Port(s): <enter the appropriate UDP port values>
o Public TCP Port(s): <enter the appropriate TCP port values>
o Private IP Address: <enter the IP address of the host server>
o Private UDP Port(s): <enter the same as Public UDP Ports or your choice>
o Private TCP Port(s): <enter the same as Public TCP Ports or your choice>
o Click "Continue"
(ref: "Well Known" TCP and UDP ports used by Apple software products)

FTP & Port Mapping?

Ok, I'm pretty new to wireless networking but I have a pretty good grasp of it all. I just have one question about Port Mapping and security. I have to open port 21 on Port Mapping in order for me to use FTP to upload files to my webspace. My question is how safe is it to leave that port open all the time? Or should I continue to close the port after everytime I upload? That's fine but it takes so long to update the Express with the new settings and reset. Kind of a pain.
Anyway, if anyone has an opinion or suggestion for this then it would be greatly appreciated!

Thanks for the quick reply and information Henry!
Well, I guess I would be at minor risk since I don't have my OS X firewall enabled. I just figured that the Express was a better firewall. But if you start punching holes in the wall then it becomes less secure. Hmm.... I guess I would have to enable the OS X firewall then if I want to leave the port mapping enabled on the Express. And just enable FTP access through the OS X firewall when needed.
Of course I have good password protection on the FTP server but then again I would have the port wide open too.
Anyway.... thanks again for your help! It definitely helps me put things in order with what I need to do.

Port map to more than one 'private IP address'

Hi,
probably a silly question, but ...
Is it possible to port map on an Airport Express to more than one private IP address? IOW, if the first IP address is not available/active, then the port is forwarded to the second IP address.
Grant

Hi iFelix,
yes, I have 2 networks, home & studio. I take my powerbook with me between the 2. When I am in one of them, I want to be able to control the other.
At the moment, I can map to another machine (not my powerbook) in the Airport Express settings and then I can connect via VNC. If however, I want to have a more complete control, I need to map port 3283 specifically to my powerbook. Obviously, if the powerbook is with me, then it's not where I'm not, if you follow the rather Pooh bear logic.
My problem would be solved if I could map to one IP address as default, with a second if that address were not resolved/found/available.
As for VPN, yes as I have gleaned from much browsing of net and these forums, this would solve my problem, but it seems overly complicated to set up for a non-IT person. Looking at the interface for a router/modem is a frightening thing for people who only do this once in a blue-moon.
Grant
AluBook 17

Port mapping doesn't seem to work - AEBS

I have a dsl connection to an Alcatel SpeedTouch 530 modem, linked via ethernet cable to the WAN of my AEBS, which shares the connection to three Macs and 2 Win boxes. I want to connect to aMule and get a High-ID. In the wiki.amule.org FAQ it states that to achieve this, I must use port mapping behind a firewall, and map ports 4662 (TCP) and 4665 (UDP) to my machine (which, after reading http://discussions.apple.com/thread.jspa?messageID=607426&#607426, I have assigned to AirPort TCP/IP address 10.0.1.201, by the way).
Unfortunately, it doesn't seem to work, and I'm still getting the annoying 'low-ID' warnings on aMule.
Following some advice on the aMule forum, I mapped port 80 and verified that the WebServer is accessible inside the wLan, if that's of any help.
Thanks, people.

Hi Tim, a couple of questions:
1. If I go ahead and un-check the 'Distribute IP
addresses' box, how will the three Macs and two Win
computers on this wlan be affected? Do we still have
access to each other's shares, and do we still access
the internet through the AEBS?
Once you turn off the 'distribute the IP address box' then your alcatel router will then distribute ip adresses and your macs and wintel boxes will still be on the same network and using the sharepoints will remain the same if you setup the shares using the bonjour names.
I am making an assumption here in that your alcatel box is setup as a NAT router and not as a Bridge.
2. Do I just give a static internal IP to my own
powerbook, or to all the above computers?
You only need to give a static ip to the mac your doing the port forwarding to. So that is the mac that is running the p2p software, infact you would do the same for any computer on the LAN that would run a server, such as a webserver, email server etc.
Many thanks, as always.
You are welcome.
PS I had the impression that the basic idea of what I
need to do to successfully map the ports to my Mac
was to map ports from the DSL modem to the AEBS, then
from AEBS to my Mac. Is this not right? Or is this
another kind of solution to the same problem, albeit
slightly more complicated to your suggestion above?
If the alcatel modem was just behaving as a modem then you would use the AEBS as the NAT device and do the port mapping on that. However the Alcatel modem is also a router.
If you setup up your alcatel router as a bridge you would then use the AEBS as your PPPoE client and then port mapping would work.

Port mapping reverts to blocking

I'm using an airport extreme to connect an Imac to a slimserver to play bbc radio via alienbbc.
This requires port mapping 554 which can be arranged via the advanced menus, my problem
is that when rebooting after software upgrades, airport seems to forget about this. More
explicitly, trying to initiate a bbc stream produces a console message indicating that the
connection on port 554 was "refused" and the connection is aborted. Getting
into the airport assistant, verifying that that this port is still mapped and then rebooting the
airport seems to bring it back, but this is quite a nuisance. If anyone has any advice on this
I would be most grateful.
This question was posed earlier in early October, but received no response.
Since then I've observed that the
reversion happens not only after upgrades, but occurs quite spontaneously. Since it takes
several minutes to restore the setting, I really hope that someone has some explanation that
will help to resolve the problem.

Hi Michael,
do you remeber how you solved this problem? We have exactly the same behaviour:
After a release change from BW 3.x to BW 7.0 we call an ABAP-based web template with http://<host>:8000... The browser automatically changes this URL to http://<host>:50000. How can we switch this off?
Thanks in advance and kind regards
Joerg

How do I use Port Mapping?

b How do I use Port Mapping?
(This document will assume that you are using and ABS/AEBS/AX as an internet router and have DHCP & NAT turned on.)
Sometime you may want to offer access to a computer on your AirPort network to users on the internet, whether it be a web site, or for file sharing, or just remote access for yourself when traveling. If any of these sound like something you want to do, then you need to understand how Port Mapping works.
b AirPort as Firewall
Most of the time your AirPort base station will not let any traffic into your network which did not originate from your network. It will let everything out and replies to your traffic back in, but it will not let sessions initiated on the internet side of the base station in to your network. This is what is referred to as the "NAT firewall" capability of the base station and it provides effective protection for your network from the internet. What Port Mapping does is poke a hole in this wall to allow certain type(s) of traffic into the network and direct this traffic to a specific computer on the network. In the firewall world this is commonly referred to as an "inbound proxy" or "inbound translation" rule or "PAT" (Port Address Translation) in the router world.
b The Need for Manual Addressing
Since a Port Mapping entry in the base station configuration requires an inside private IP address to be specified, the computer to which to mapping entry applies should always have the IP address specified in the mapping entry. Thus, DHCP should not be used for a computer offering services on the internet as the Port Mapping entry will no longer work if the target computer's IP address changes. In general, an Apple base station's DHCP server will try to assign IP addresses in the 10.0.1.2 to 10.0.1.200 range. IP addresses above 10.0.1.200 can be Manually assigned to computers and other devices on the network up to 10.0.1.254. 10.0.1.255 is reserved (it is the broadcast address for the 10.0.1 subnet). To Manually set up the TCP/IP information for a Macintosh running Mac OS X, go to System Preferences -> Network and "Show" the appropriate interface (Ethernet or AirPort) and click on the TCP/IP tab. Select "Configure Manually" and enter the following information:
IP address : 10.0.1.201 (or whatever address you decide to use)
Subnet mask : 255.255.255.0
Router IP : 10.0.1.1 (the AirPort base station LAN IP)
DNS server : 10.0.1.1, or whatever DNS server IP your ISP uses
After making these changes verify that your computer can still access the internet and local resources on the LAN before continuing.
b Port Mapping a service
In our example we will be hosting a web site on a computer which we have given an IP address of 10.0.1.201. Basic web sites are accessed using the HyperText Transport Protocol (HTTP) and this protocol typically uses port 80 to communicate. In order for others to see the web site, we must configure a Port Mapping entry in the base station configuration to not only allow the web browsers in, but to tell the base station what IP address the web server is using. The Port Mapping entry has three parts: Public Port, Private IP, and Private Port. In this case you would use the following values:
Public Port : 80
Private IP : 10.0.1.201 (this is the computer hosting the web site)
Private Port : 80
In order to access the web site from the internet, users must reference the base station's WAN port public IP (determined by looking at the base station configuration summary page in the AirPort Admin Utility). Since this address may change over time, you might want to use a Dynamic DNS service to simplify connecting for your users.
Sometimes the port you wish to use may be blocked by the ISP. In this case, use a different non-standard Public Port number for the service, but keep the Private Port standard. In the above example, if the ISP was blocking port 80, you could potentially use 8080 instead, so:
Public Port :

Public Port : 8080
Private IP : 10.0.1.201
Private Port : 80
Your users would then have to enter "http://<publicIP>:8080/" (where <publicIP> is the public IP address of the AirPort base station) to access the web site.
b Internal Access
It should be noted that when accessing these services from within the network you cannot reference the Public IP/Public Port, but rather you must use the Private IP/Private Port. Thus, "http://10.0.1.201:80/" in the above example.
b Limits and Options
There is a maximum of 20 Port Mapping entries that can be made in an Apple base station configuration. If you use an AirPort Extreme or AirPort Express base station there is an option which can be helpful in the case where you need many ports opened to a single computer. This is the "Default Host" option. When using this it is not necessary to use Port Mapping at all as all ports will be opened to the specified "Default Host". This is found in "Base Station Options". The default IP address for the "Default Host" is 10.0.1.253. You may change this IP address. The target computer must be Manually configured as specified above with the same IP address. Since all ports are now open to this computer, you should enable and configure the Mac OS X firewall on the default host computer to protect it from intruders.
b Useful Related Links
<a href="http://docs.info.apple.com/article.html?artnum=52002>"Designing AirPort Extreme Networks: Manuals</a>
"Well Known" TCP and UDP Ports Used By Apple Software Products
IANA Port Number Assignments

Cisco ASA 5505 - Port Mapping

Hi, I'm new into IT and I was wondering if somebody could help me set up Port Mapping. Here's my scenario -
We have set up an Asterisk VoIP server that uses UDP port 5060 and another port range, and we want any public incoming connections destined for our Asterisk server on Port 5099 to be translated at the firewall to go to our Asterisk server on port 5060. I have been using ASDM 6.4 but theres no easy way to do this (as far as I know, and why I've came here looking for an answer).
We have currently just left port 5060 open to the public (so our home workers can use our phone system) but really want to get this sorted ASAP due to SIP Bots that look for ports like 5060 that are open!!
Any help would be greatly appreciated and if anybody needs anymore information just ask!!

Hi,
You need to have a NAT rule set for port-forwarding to make as per your requirement..... I will give you cli based configuration example....
If your ASA is running with pre-8.3 version:
static (inside,outside) tcp interface 5099 192.168.1.10 5060 netmask 255.255.255.255
If your ASA is running with post-8.3 version:
object network SERVER-01
host 192.168.1.10
object network SERVER-01
nat (Inside,Outside) static interface service tcp 5099 5060
Regards
Karthik

How do I configure my airport utility for port mapping?

I am trying to view my FOSCAM cameras over the internet while away from home. They work fine in my house using Wi-Fi. Instructions say to do port forwarding. I have cameras set up, but can't get my router to port forward. I found "Port Forwarding" in Airport Utlility then NETWORK. 'Router mode: DHCP and NAT';on 'Port Settings I click on the "+" at the bottom. 'Private IP Address: populates to 10.0.1.201'. What goes in the other blocks?

Please check out the following AirPort User Tip for details on how to configure Port Mapping on the AirPort routers. I would suggest that you check your FOSCAM documentation as to what TCP and/or UDP ports are required to access their IP cameras from a remote location.

Port Mapping is not working ?

First of all, sorry for my bad english as it is not my primary language.
So my problem is that I play Warcraft 3 and that I would like to host some games. To be able to host, I have to do port mapping for the ports : 6112-6119, which I did in the Airport Utility --> Advanced --> Port Mapping. I did it for every port 6112, 6113, etc. But the thing is that when I go on this website: http://www.whatsmyip.org/ports/games/ (Which is a website that tells me what ports are open on my computer), only port 6112 is open. Ports 6113-6119 are closed. Before my Airport Extreme, I had a Linksys and I had no problems with hosting and port mapping, which means it is not my ISP that is blocking the ports.
Also this is the setup of my internet if it can help. I have an AirPort Extreme wich is connected to the modem in my basement (I did the port mapping on this one) . From this Airport Extreme, I have another Airport Extreme connected to it. I am connected to the second Airport Extreme in bridge mode with ethernet.
I don't know if this was clear or not lol. Anyway I would appreciate any help. Thank You !

This is just a guess, but if you still have that AirPort Extreme, you might plug it in long enough to have AirPort Utility do a File >Export Configuration File, then reconnect the Time Capsule and do a File > Import Configuration File. Once that's done you may have to do a little adjustment to account for the disk drive.

Port Mapping is not working on Time Capsule

I have replaced my Airport Extreme with a Time Capsule for back up purposes, but the Port Mapping functionality is not working as it did on the Airport Extreme. I have my security camera DVR connected to the network and am using Dynamic DNS to resolve the WAN IP Address. HAs anybody any experienced this problem with Time Capsule?

This is just a guess, but if you still have that AirPort Extreme, you might plug it in long enough to have AirPort Utility do a File >Export Configuration File, then reconnect the Time Capsule and do a File > Import Configuration File. Once that's done you may have to do a little adjustment to account for the disk drive.

Port Mapping Question

Similar Messages

Maybe you are looking for