Problem with Port Range Forwarding WRV54G

I have configured my WRV54G to do the following, in this order, on the Port Range Forwarding page of the router:
1. Forward port 3389 to LAN Static IP x.x.x.100, a desktop PC. I have confirmed this works, a port scan shows this port is open and I can remote desktop into x.x.x.100
2. Forward port 443 to LAN Static IP x.x.x.101. I have confirmed this works, a port scan shows this port is open I can VPN to an SSL concentrator at x.x.x.101
3. Forward port 3390 to LAN Static IP x.x.x.102, a desktop PC. THIS DOES NOT WORK. A port scan shows that this port is not open. I have configured the remote desktop host at x.x.x.102 to use port 3390. Netstat shows that x.x.x.3390 is listening on this port. I can remote desktop to x.x.x.102 from inside the LAN, no problem, so it's not an issue with the PX configuration.
So, then I switched the order of the port forwarding instructions, in this order, as follows:
1. Forward port 3389 to LAN Static IP x.x.x.100, a desktop PC. I have confirmed this works, a port scan shows this port is open and I can remote desktop into x.x.x.100
2. Forward port 3390 to LAN Static IP x.x.x.102, a desktop PC. I have confirmed this
works, a port scan shows this port is open and I can remote desktop into x.x.x.102
3. Forward port 443 to LAN Static IP x.x.x.101. THIS DOES NOT WORK. Port scan shows this port is not open.
It looks like the WRV54G is only recognizing the first two entries in the Port Range Forwarding table and IGNORING the third entry. HELP??!!
I have the latest firmware installed: v2.39.2e
Anyone have a solution? Thanks in advance!
Message Edited by crescendi on 07-19-2008 11:53 AM

Are you still using the DHCP server range of x.x.x.100 through x.x.x.149 ? If so, then your problem may be that you are using illegal fixed LAN IP addresses.
With Linksys routers, any fixed LAN IP address must be outside the DHCP server range, and it cannot end in 0, 1, or 255.
I would suggest that you fix the illegal addresses, then see if that resolves your problem.
Here is the full set of rules for using fixed LAN IP addresses:
With Linksys routers, a fixed (static) LAN IP addresses must be assigned in the device that is using the address. So you need to enter the fixed address in the computer or printer, not in the router.
When using a Linksys router, any fixed LAN IP address must be outside the DHCP server range (typically 192.168.1.100 thru 192.168.1.149), and it cannot end in 0, 1, or 255.
Therefore any fixed LAN IP address would normally need to be in the range of
192.168.1.2 thru 192.168.1.99 or
192.168.1.150 thru 192.168.1.254
assuming you are still using the default DHCP server range.
Also, in the computer, when you set up a static LAN IP address, you would need to set the "Subnet mask" to 255.255.255.0 and the "Default Gateway" to 192.168.1.1 and "DNS server" to 192.168.1.1
It is also important that no two devices on your network be set to the same static LAN IP address.

Similar Messages

WRT160n Port Range forwarding problem

I have a WRT160n that I am trying to forward some ports on for some DVR equipment. When I use the single port forwarding and enter each port separately it works fine. But I have 2 DVR's and they use a bunch of ports each so I want to use the port range forwarding because there are not enough spots in the single port forwarding section. The ports I am trying to forward are 8000-8004 for one IP address and 8005-8009 for a second IP address. I have entered it into the port range forwarding section but I can not connect from outside my network. As I said if I enter them in the single port section seperately as 8000,8001,8002,8003,8004 then I can connect fine outside my network. Any idea's what the problem is?

chuckb223 wrote:
jaymay wrote:
How about you isolate it first by forwarding the ports for one DVR. Forward them one by one on the Port Forwarding Range page then see if it works on one DVR. If it will, try to do the same thing for the other DVR.
Yes I already tried this with no luck. I tried just opening one port in the port forwarding for 1 DVR and it did not work, Opening this same port in the single port forwarding did work.
Is your router a version 1,2, or 3? Your router probably needs to be updated (firmware).
Firmware
11/08/2010
Ver.1.02.11
Download
3.15 MB
Firmware
11/15/2010
Ver.2.0.03 Build 9
Download
3.25 MB
Firmware
07/12/2010
Ver.3.0.03 Build 3
Download
3.31 MB
And then reset and reconfigure your router again for internet connection and try the port range forward again and see if you can both DVRs working properly.

HELP!! asa 5505 8.4(5) problem with port forwarding-smtp

Hi I am having a big problem with port forwarding on my asa. I am trying to forward smtp through the asa to my mail server.
my mail server ip is 10.0.0.2 and my outside interface is 80.80.80.80 , the ASA is setup with pppoe (I get internet access no problem and that seems fine)
When I run a trace i get "(ACL-Drop) - flow is deied by configured rule"
below is my config file , any help would be appreciated
Result of the command: "show running-config"
: Saved
ASA Version 8.4(5)
hostname ciscoasa
domain-name domain.local
enable password mXa5sNUu4rCZ.t5y encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 10.0.0.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
pppoe client vpdn group ISPDsl
ip address 80.80.80.80 255.255.255.255 pppoe setroute
ftp mode passive
dns server-group DefaultDNS
domain-name domain.local
same-security-traffic permit intra-interface
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network Server_SMTP
host 10.0.0.2
access-list outside_access_in extended permit tcp any object server_SMTP eq smtp
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
object network obj_any
nat (inside,outside) dynamic interface
object network server_SMTP
nat (inside,outside) static interface service tcp smtp smtp
nat (inside,outside) after-auto source dynamic any interface
access-group outside_access_in in interface outside
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
http server enable
http 10.0.0.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
telnet timeout 5
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0
vpdn group ISP request dialout pppoe
vpdn group ISP localname [email protected]
vpdn group ISP ppp authentication chap
vpdn username [email protected] password *****
dhcpd auto_config outside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:c5570d7ddffd46c528a76e515e65f366
: end

Hi Jennifer
I have removed that nat line as suggested but still no joy.
here is my current config
Result of the command: "show running-config"
: Saved
ASA Version 8.4(5)
hostname ciscoasa
domain-name domain.local
enable password mXa5sNUu4rCZ.t5y encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 10.0.0.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
pppoe client vpdn group ISP
ip address 80.80.80.80 255.255.255.255 pppoe setroute
ftp mode passive
dns server-group DefaultDNS
domain-name domain.local
same-security-traffic permit intra-interface
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network Server_Mail
host 10.0.0.2
access-list outside_access_in extended permit tcp any object Server_Mail eq smtp
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
object network obj_any
nat (inside,outside) dynamic interface
object network Server_Mail
nat (inside,outside) static interface service tcp smtp smtp
access-group outside_access_in in interface outside
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
http server enable
http 10.0.0.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
telnet timeout 5
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0
vpdn group ISP request dialout pppoe
vpdn group ISP localname [email protected]
vpdn group ISP ppp authentication chap
vpdn username [email protected] password *****
dhcpd auto_config outside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:f3bd954d1f9499595aab4f9da8c15795
: end
also here is the packet trace
and my acl
Thanks

Problem with Port Forwarding in WRT320N

Good day.
I have a web-server and Internet-radio translator to local network of my provider. And I found a problem with Port Forwarding. I'm trying to setup 80 & 8000 ports to forward. And it's working but only for Internet, without provider's local network. My web-server isn't accessible in local network and radio-translator too.
So is it possible to forward ports absolutely - for any type of connections?
P.S. DMZ is working like Port Forwarding.

If you ask questions you have to mention that you have an PPTP connection to the internet and another network directly on the internet port. Otherwise noone will really understand your question as it is a very unusual setup.
Your setup is not one really supported by the router. You are lucky that it works but don't expect too much. Port forwarding only the internet connection. If you use PPTP the network on the internet port is basically hidden. Using that local network on the internet port is not supported.
The DMZ host is the IP address to which all ports are forwarded to which are not forwarded otherwise. The same restriction applies here.
I would recommend to ask your ISP which router they recommend for their internet connection. I think most/all Linksys routers and many other brand's consumer routers won't really support a setup like yours...

Linksys e1200 PORT RANGE FORWARDING is not working

I currently have an E1200. I can port forward single ports, but when I attempt to forward a range of ports it doesn't work and there is no error in the log.
Specifically I am port forwarding RTP ports (10000 - 20000). I am aware of the security risks, please do not preach.

I have a problem with port forwarding http port 80 this for i surveillance camera.
I have all the settings are correct but I can not convert. Opening this port Also no other ports open. Who can help me on the way to this is to get together. I mtu gezte the firewall function in 1400 and put on the standard port 80 http to put. and of course the ip address that is in the same range.
I do not know what I'm doing wrong because the old linksys just worked. It I hope someone can help me.

What's safer: Port range forwarding or Upap?

Hello there,
I recently replaced my router and since then have been unable to get video and audio chats to work. I get the "XXXXX did not respond" message. Text chat is fine. By what I have read in this forum, my problem has to do with port settings on my new router, a Linksys wrt54gx2.
My question is this; is it safer/more secure to use port range forwarding or the universal plug and play option? Do I need both?
The Mac OS X firewall settings are currently off.
Thanks in advance for any advice.
John

HI John,
This is not a suitable device for iChat for some reason.
This page is for the WRT54GX (not the GX2)
This shows the Port Forwarding for this device (and the default IP and User ID and Password).
You should not use Port Forwarding and UPnP together.
The UPnP setting in in the Admistration tab.
Port Forwarding uses NAT (Network Adress Translation) and this can cause problems between some devices.
UPnP does Broadcast that is available but is normally limited to a few Hops.
In most device this can be limited to just one hop if you require.
1:27 PM Monday; May 29, 2006

Unable to Save in Port Range Forwarding

I'm using the BEFW11S4 wireless router and am unable to save the new port range forwarding settings I have entered. Everytime I click Save Settings, I receive a box which reads:
"The server 192.168.1.1 at Linksys BEFW11S4 V4 requires a username and password.
Warning: This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection)."
When I enter the same u/p that I used to access the router in the first place, it rejects and keeps bringing up the log in screen.
I cannot get the port range forwarding to save at all due to this.
Does anyone have any suggestions?
Thank you!

try remembering the password you used for first time while installing the router .... if not then use default password admin with out any username ....
If still not working then you need to reset the router ....

Router won't save settings of Single Port Forward or Port Range Forwarding

Hi everyone, I'm having a bit of trouble tonight trying to get my Playstation 3 to play games online and in doing so I'm attempting to enable Single Port Forwarding and or Port Range Forwarding.
To start, I am using this link below this paragraph as a guide.
http://portforward.com/english/routers/port_forwarding/Cisco/Linksys-E1000/PS3_Endless_Saga.htm
Each time I go and set the settings and click save, it tells me the settings have been saved successfully then when I click continue onto the next page it shows they actually haven't saved at all. My router is out of it's 90 day phone support with Linksys and I refuse to pay anything extra for support so I'm hoping someone else will be able to help me with my issue since they refuse to unless I pay them.

Hello. Sucks you ran into trouble just after PSN got back online
Try clearing your cache / cookies then re-do the settings. Also, try using a different Internet browser.

WRT54GL Port Range Forwarding?

Hi. In Port Range Forwarding there are only 10 lines (konfigurating 10 diff. ports). What if you need to forward more ports than 10?
Solved!
Go to Solution.

Install 3rd party firmware like dd-wrt or tomato.
Of course, you shouldn't need so many forwardings to begin with.

The router forgets Port Range Forward settings

Hello, after a year or so of working absolutely flawlessly, the router, all of a sudden, started forgetting the Port Range Forward settings. In particular, I have port 80 set to go to a specific IP address. Every now and then, it will start going to a different address within the network (even though the Port Range Forward page still shows it pointing to the right IP address).
I disable Port Forwarding for that port, then re-enable it and everything is fine. For about day or two and then the problem re-appears.
What could be the issue?
Thanks.

What is the model no of the Router...?
Who is your ISP...?
What firmware you are using on the router...?
Try to reset the router and re-configure it from scratch.Now,check if that make any difference.

Nexus1000v : ip access-list with port range

Hi,
I am configuring ip access-list policy with port range on Nexus1000v. I want to block traffic of a VM based on specific port or port range. Following is the example showing, blocking of rdp service (port - 3389) of vm x.x.x.x. But the scipt blocks all traffic of x.x.x.x.
Can any body verify the scirpt and tell whats the problem with the script?
vm x.x.x.x is on Veth2
config t
ip access-list Veth2_rc_vmfw_acl_in
deny tcp any host x.x.x.x eq 3389
exit
ip access-list Veth2_rc_vmfw_acl_out
deny tcp host x.x.x.x any eq 3389
exit
interface Veth2
ip port access-group Veth2_rc_vmfw_acl_in in
ip port access-group Veth2_rc_vmfw_acl_out out
exit
exit
Thanks

License? Check Data Features

WRT54GC resetting Port Range Forwarding

I have a WRT54GC, with firmware v1.05.7. And I have recently modified the Port Range Forwarding. It will work OK for a day or two, then for no reason it stops working. When I check the configuration, I see it has reverted to the old Port Range Forwarding config. So I change it again, save it, and again it will work for a day or two before reverting to the old config. How can this be happening?

Hey try resetting the router reset button in such a way that power light is blinking on the router & then do a complete network power cycle i.e., unplug the power cables from the modem & from the router & then plug in the power cable to the modem first once all the lights are solid green you could plug in the power cable to the router & check out it will definately work!!

DMZ v. Port Range Forwarding????

Ok, DMZ opens all ports. But I was wondering if port range forwarding might be better. Once again I am still trying to eliminate lag with my 360. I enabled the port forwarding for the ports specified by the 360. I also blew all ports wide open with DMZ. Is it better to just port forward without DMZ? I don't care about the security issues. I just want speed. I already disabled all firewall features of the router. My PC is locked up tight and I'm not worried about it. The ports I forwarded are 88 TCP and 3074 Both. Is there something I'm missing here? I'm running a 5 meg connection. It's faster than my old DSL connection. I even found a website that told me to change my IP manually on 360 which I have done and it worked to open my NAT. Any gamers please help. Again I'm not trying to do anything to my PC. That connection is fine. Just need to tweak more upload with less lag to 360.

ok.......How do I use them? Triggered Range start port? to end port? Forwarded Range start point? to end point? Would it be the same forwarded ports? do I put the same port # in all for areas? I'm working with WRT54GS ver. 6

Port/Port Range Forward limit on Airport Extreme (N)

Hi there,
Can anyone please tell me if there is a limit to how many ports I can forward to separate machines in my LAN in the new Airport Exreme N?
Currently routers like the Linksys WRT300N only provide 10 items for port forwarding and port range forwarding, respectively. Flashing a Linksys router with DD-WRT gives you an unlimited amount.
Thanks very much!
Mac OS X (10.4.8)

There is no noticeable limit. Everything I see in the manual hints that you should be able to shove as many as will fit into memory... which is a lot.
The main reason for the limitation is that companies like Linksys, for whatever reason, do not like to mess with the complicated HTML required to support 'unlimited' port forwarding in their tool. They get around the complexity by putting enough fields on the page so that they hope their customers don't run out.
In Apple's case, the configuration tool is a native application, rather than a web page, so it is simple to support 'unlimited' port forwarding.

Link Problem with port 2 in WLC 4402

Hi,
I have a problem with port 2 in Wireless Lan Controler 4402. The problem is that the distribution port 2 of the WLC not link with the switch (3750). We receive the WLC and we follow the autostart wizard and we enable LAG. The wizard finish, I restart the system and all works fine. The two distribution ports of WLC, 1 and 2 appears UP and the LAG works correctly. After this we upgrade the firmware of the WLC to the version AIR-WLC4400-k9-6-0-182-0.aes and we restart the system again but at this time port 2 does not link and port 1 link OK. We do not know the reason why port 2 doesn´t link? Could you help me ?
Thank in advance.
Regards.

Does it properly refuse authentication ? Or does the login page stop appearing or something ?
There was a bug with the webauth dying under heavy load, regardless of number of identical accounts used.
One good way for you to check would be, when problem occurs, to create a second backup guest user and see if that would start working. If it doesn't, the account is not the problem.
I'm not aware of any maximum of usage of the same account.
Which 4.2 exactly are you running ?

Problem with Port Range Forwarding WRV54G

Similar Messages

Maybe you are looking for