Remote TC access via port forwarding

I have been trying to setup my network for remote TC access via port forwarding. Here's my setup:
Verizon FiOS router (main router, dhcp & nat) -> connected to TC set in bridge mode with a static IP
I can remotely access the TC using Back to my Mac with no problems, and of course locally on the home network via Wifi.
Since the TC has to connect in bridge mode, port forwarding is done on the FiOS router.
If I set a port forwarding rule in the FiOS router TCP,UDP (any) to port 548, it works. However I want to use a specific connection port
so others can't connect unless they know the forwarded port. BTW, I have remote disk sharing set with Use Device Password.
So here's what works:
FiOS Router (TCP any -> 548, UDP any ->548)
What doesn't work:
FiOS router (TCP 8990 -> 548, UDP 8990 -> 548).
Is there any additional setting required for specific port forwarding to work?

You're my hero!
I also have my TC in Bridge Mode to my Verizon FIOS Router. I used to be able to access my TC remotely, but since I upgraded my router (MI424WR GigE), I had forgotten some port forwarding rules I must have established in my old router. Once I re-created these two port forwarding rules (just like yours), I can remote access my TC (with TC password) again.
In addition, I have a static host name aliased to my dynamic IP address through dyndns.org (I have the free version, which I don't think is available anymore, but there are other free providers out there) for easier remote access.
Regarding, Secure Share Disks: with TC password vs a disk password. Is one more secure than the other?
Thanks!

Similar Messages

Cannot host (via Port Forwarding)

Just got my BT Infinity installed couple of hours ago, and the first thing I did was download some large file games also I wanted to host Terraria (Game) and I know how to port forward because I could before host with my older router given by my previous provider.
When I host my game, no one can join and even I my self cannot connect to my own game!
Am I port forwarding wrong? I added the game "Terraria" with ports 7777-7777 and then assigned to my computer, or is this all normal because I'm using a new line and I can't host yet?
Please reply, because one of the reason I bought Infinity was so I can host large amount of players and less lag.

Is there no sticker on the router that gives make/model info? If not, we really can't help you. Even if you did know what the make/model was, you'd probably need to contact the manufacturer or ISP for support.

Remote database access via JDBC?

Hello,
Can anyone give me info on accessing remote databases (i.e. Microsoft
Access, etc) from Java programs (Servlets, JSP's, Classes) residing on the
iSeries (AS400) or perhaps any platform?
I currently have a couple of web applications set up on the Websphere App server that access DB2/400 database and I also have some Java Classes on PC's that access MS Access datafiles. I would like to begin writing the majority of my applications that run on the iSeries (or host system) that can remotely access other databases on our network.
Any info would be of great help to me.
Thank you
Don

I don't know of any existing Access JDBC drivers that support remote access, after all, the Access database itself is not remote access capable except via file sharing. One possibility is to look for a Type 3 JDBC driver that supports reuse of other Type 1 (ODBC bridge), Type 2 (Java/Native Mix) and Type 4 (pure Java)JDBC drivers on the server side.
If you were using WebLogic Server, I suppose you could use its remote JDBC facilities, but that won't help you.
One problem you will have to face is that Access JDBC drivers are not (if I recall) meant to be used in a multithreaded fashion. Good luck. By the way, it might be far simpler to port the Access database to DB2/400.
Chuck

TMG 2010- SSL web access via port 2096

I configured TMG 2010 some time ago with additional SSL ports so that our internal users can access an externally hosted https website on port 2096. It worked fine for almost a year, until today...
Here is the TMG configuration:
C:\Users\marcos\Desktop>cscript "show added ports.vbs"
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.
NNTP: 563-563
SSL: 443-443
SSL 2083: 2083-2083
SSL 2096: 2096-2096
I could try to recreate the added ports but I'm reluctant to do that because it may require a restart (downtime) and probably won't solve the issue.
Many thanks for your help!
Marco S

Hi,
are you sure that the configuration of the SSL extension has been lost? Have you looked into the TMG realtime logging to see the reason why the clients cannot access the website over port 2096?
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

Help Needed - Remote Disk Access via MobileMe for AEBS

OK, I've done a lot of reading in this forum, but didn't find a resolution to my problem.
Here are my configuration:
1) ADSL Router(2Wire 2700HGV-2) in bridged mode
2) Airport Extreme Base Station (Simultaneous Dualband) with 7.4.1 firmware acting as the router using PPPOE
3) External USB disk formatted using Mac OS format attached to AEBS
Working:
1) Within the LAN, can access the disk without any problem
2) Over the WAN, Back to my Mac works fine for all my Mac computers
Not Working:
Over the WAN, I can see the AEBS in the shared section, however, upon clicking it, it always tells me that the connection failed after about 30 seconds, even when I try to use "connecting as".
Anyone has tried this feature and it worked? Really appreciate if you can help as I am going to be on trip soon and I wish to access the disk from Internet when I am over there.
Thank you!

Hi rekeno
Thanks for your post. I have the exact some problem. I'm sitting at work with my MacBook. At home there's my Airport Extreme and a Mac Pro.
I can see both in my "Shared" section AND they also have different IPv6 tunnel addresses:
[15:07 root@pm1] ping6 macpro.XXX.members.mac.com
PING6(56=4088 bytes) fd22:3569:a8da:4c12:217:f2ff:fed4:6de0 --> fd44:bbdd:fce3:3be9:21d:4fff:fe4b:b80
16 bytes from fd44:bbdd:fce3:3be9:21d:4fff:fe4b:b80, icmp_seq=0 hlim=64 time=54.748 ms
Works.
[15:14 root@pm1] ping6 airport.XXX.members.mac.com
PING6(56=4088 bytes) fd22:3569:a8da:4c12:217:f2ff:fed4:6de0 --> fdfe:d7a4:759a:a360:21b:63ff:fef5:30a2
^C
--- airport.XXX.members.mac.com ping6 statistics ---
3 packets transmitted, 0 packets received, 100% packet loss
This times out.
Interestingly I can use Screen Sharing to my MacPro and do the same:
[15:17 mau@macpro] ping6 airport.XXX.members.mac.com
PING6(56=4088 bytes) fd44:bbdd:fce3:3be9:21d:4fff:fe4b:b80 --> fdfe:d7a4:759a:a360:21b:63ff:fef5:30a2
16 bytes from fdfe:d7a4:759a:a360:21b:63ff:fef5:30a2, icmp_seq=2 hlim=64 time=0.721 ms
This works AND it uses the SAME IPv6 address.
I have also checked that my IPv6 tunnel configuration is allowed in the Airport Utility.
Do you see the same behaviour? Can you run the same commands?
Thanks a lot!
Patrick

I want to port forward my time Capsule which I use as my router.

For my son I'm trying to set up a Minecraft server and I want to open access via port forwarding. How do I do that? I have seen quite a few directions on the net, but one compatible with the OS X 10.8.3 version.

See this User Tip by forum expert Tesserax to get started.
AirPort - Port Mapping Basics using AirPort Utility v6.x

Disable access via insecure port 7001

Is there a way in OVM Manager 3.1.1 to disable access via port 7001 and only allow access via the encrypted port 7002 through the web interface? I have a customer that is trying to lock things down security wise and they would like to see that happen. Thanks!

Did you try this in the weblogic console?
http://yourserver:7001/console

Problems with Port Forwarding for RDP in WebVPN

Hi,
I'm hoping somebody can help me solve this problem that's been bugging for weeks. We recently implemented a double-layer firewall architecture. Before that, our users can access RDP via port forwarding on WebVPN or the Cisco VPN client without any problems.
After we implemented the double-layer firewall architecture, users who are going through the WebVPN and port forwarding for RDP began to experience frequent disconnections, slowness or freezing connections. The users who are using the client are fine.
I checked the logs and I'm getting repetitive TCP-O for the port forwarding connections for RDP. Additional information: the FW we installed as a 2nd layer is Netscreen. I've already set the policy on it to Any-Any for the meantime to help in troubleshooting but to no avail.
I hope somebody can help me in sorting this out as I'm kind of confused on the difference between the port-forwarding for RDP via the WebVPN and the normal RDP via the client.

Hi,
I didnt see anything marked with red in the above? (Atleast when I was reading)
I have not really had to deal with Routers at all since we all access control and NAT with firewalls.
But to me it seems you have allowed the traffic to the actual IP address of the internal server rather than the public IP NAT IP address which in this case seems to be configured to use your FastEthernet4 interfaces public IP address.
There also seems to be a Static NAT configured for the same internal host so I am wondering why the Static PAT (Port Forward) is used?
- Jouni

Scan port forwarding problem

I have a two nodes 11g r2 rac and I am unable to connect via port forwarding to the scan connection. I can connect to the vip addresses but not to the scan. I get an ORA-12170: TNS:Connect timeout occurred
Should I forward the scan ports to both nodes? Which host should I use? Any clues?
Thank you.

Then no, use VIP directly.
Its possible ofcourse to "hack" it a little, but I think its useless, because you can connect using VIP instead:
* Use SSH to forward each VIP port to your local computer, but each VIP to different local interface... for example node1-vip:1521 forward to 127.0.0.1:1521, node2-vip:1521 to 127.0.0.2:1521 and so on
* Add all VIP hostnames to your hosts file... so node1-vip.yourdomain will resolve to 127.0.0.1, node2-vip will resolve to 127.0.0.2 and so on
Now when you connect to SCAN, your local computer will know how to resolve and connect each VIP the SCAN redirects it to.

Remote Access POrt Forwarding

I
My ISP provided me a Public IP 64.89.5.xx. Thus I don't get a DHCP IP. I want to able to program my Airport Extreme in order to connect remotely to my Mac Mini.
How to I configure port forwarding?
Thanks

Hello dgonzo45. Welcome to the Apple Discussions!
Overall port forwarding takes two basic steps: 1) Assign a static or dynamic reserved IP address to the host device on the LAN which you want to access from the Internet, and 2) Assign the port(s) to be forwarded, using the AirPort Utility, on the AirPort base station.
In this case, you want to assign your Mac Mini the static or dynamic reserved IP address. This address will still be a Private IP address as your AirPort Extreme Base Station (AEBS) will be using the static Public IP address provided by your ISP.
To reserve an Private IP address for your Mac Mini:
AirPort Utility > Manual Setup > Internet > DHCP > DHCP Reservations
o Click on the Plus button to add a reservation.
o Description: <enter a description here>
o Reserve address by: MAC Address, and then click Continue.
o MAC Address: <enter your Mac Mini's AirPort ID>
o IPv4 Address: <enter the IP address that you want to reserve for the Mac Mini>
o Click Done
To configure Port Mappings:
AirPort Utility > Manual Setup > Internet > NAT > Configure Port Mappings...
o Click on the Plus button to configure the port maps.
o Service: <either select a pre-defined service or ignore this setting>
o Public TCP Port(s): <enter the Public TCP port(s) required>
o Public UDP Port(s): <enter the Public UDP port(s) required>
o Private IP Address: <enter the DHCP reserved IP address you assigned the Mac Mini earlier>
o Private TCP Port(s): <enter the Private TCP port(s) required>
o Private UDP Port(s): <enter the Private UDP port(s) required>

Application And Gaming / Port Forwarding || HELP NEEDED || Can Only Access Via LAN

Hi.
I have just bought a Wireless Router, Model Number: WGKPC354G-UK. With the intention of setting up a small server. This server will run from my PC (directly wired into router), running a game called "Counter Strike" - I had to download a dedicated-server tool for this and i successfuly installed this and followed the tutorial to set it all up..
So I thought i had done it, but I could only access my server with my internal IP 192.168.1.64 (LAN).
I then found out that i needed to "Port-Forward" I followed a tutorial on www.portforward.com - This showed me how to open the ports, and which ones to open.
I did all this and i still encounter the same problem !
So i then opened all my router ports "DNZ" and it still doesnt work !!!
Any help will be greatly aprreciated !
PS. Below Are The Required Ports.
http://portforward.com/english/routers/port_forwarding/Linksys/WAG354G/Counter_Strike.htm

Keep in mind your ISP could be blocking the ports needed. DMZ almost ALWAYS works and if it doesnt, most likely your ISP blocks the ports.
another test is to make sure you can connect to the game server from another CS machine on the inside of your network. If this works, that means your server is up and running properly and its probably your ISP blocking certain ports needed for the CS Server.
You should also check you have the Windows firewall disabled, and any other software firewall on your server disabled.

Remote access via ftp

Hi.
I am trying to set up remote access to my mac so I can upload files to it remotely from a PC. I want the simplest free solution as I simply want occasional access to back up files from my work PC to my home mac. I have got 90% of the way, but fallen at the final hurdle.
I am using OSX Leopard 10.5.8 and a Linksys WRT54G wireless router
I am trying to access my imac via ftp as this appears to be the simplest route. So far I have done the following:
(a) Followed the advice in "Mac OSX Missing Manual" and portforwarding.com: i.e. ...
(b) Set up a static IP address on my mac through system preferences. This is working as I can access the internet fine.
(c) Turned off "Block anonymous internet requests" in the router settings
(d) Set up port forwarding of port 21 using the static IP address I have set up
(e) In system preferences, turned on file sharing using ftp
(f) Tested access using Safari - typed in my local static IP address as specified in the file sharing ftp box in the sharing section of system preferences. I logged in with my main account log in info. This worked - I immediately got a finder window pop up with my folders visible. The ftp server was also mounted on my desktop.
(g) Tested access using Safari via my public IP address. This was much slower. I eventually got the login box, but when I entered the same main account login info I eventually got an error message saying password / username were incorrect. They weren't, as I have tried this several times. (I don't have access to a PC on another network to test that way.)
Very grateful for any help.
Thanks

I am not sure which type of FTP Apple uses but this will give you the differences the in firewall policy for active and passive. http://slacksite.com/other/ftp.html you will need to set the firewall accordingly.
You may also have problems with the firewall in use at work, it depends on how its been locked down.
It depends on how much time you have to spend on the problem. There are free remote control applications that include file transfer, have a look at this site http://www.teamviewer.com/download/index.aspx , there is a free version available but I have not used this software. There are other similar products some free, some cost.
If you cannot get any answers to your question at least there are other esiaer options open to you.
regards

Network camera access via airport extreme ie: i need to assign a port and a

please help me i have a cabin in the mountains that is off the grid... and i use solar power... i have my internet access via wifi and an antenna... it goes to a d-link router in my electric room then from there via a cat 5 cable to a apple airport extreme base station... and i would like to plug the camera into the base station via a cat 5 cable....
i am trying to set up a network camera to via a airport extreme base station.... the tech support on the camera end (airlink 101 skyIP cam500 model aicn500) said to enable port 80 and to assign a IP address (which i have)... apple support has been unable to help me after almost 1 hour with tech support.... here is what the camera tech support page suggests....
You will now need to forward the Second HTTP Port through your router to the IP address of the camera. If you have an AirLink101 router, we have instructions in our knowledge base for port forwarding. If you have a router from another company, you will need to contact them for instructions on port forwarding.
When accessing the camera from a remote location you will need to open a browser and type in the internet IP address of your network (not the ip address of the camera) and the port into a web browser. The address and port will need to be typed in like this:
http://x.x.x.x:port
x.x.x.x = Internet IP address
port = Second HTTP Port
Here is an example of what it would look like: http://123.123.123.123:81
can anyone please help me?

i can not thank you enough for taking the time time to help me!!! i really appreciate it.... i have done the set up with the d link router and am now trying to access the camera from the web.... but i am having trouble logging in and finding it? i am not sure what ip address to enter into my web browser? i think that i need to add the ip addresss folllowed by a forward slash and then the port # 80.... but what ip address should i add? in the device info part of the d link router i have found a number of ip address's... but none of them seem to work? what am i doing wrong? or not doing? my apple base station is set up in the bridge mode with a password to protect it...
thanks again...
josh

Remote access via internet

Have an Vitek DVR with several cameras and after correctly configuring port forwarding on the router and input the IP to the DVR, I am able to view the camera pictures without any problems on the MacBook Pro. However, being able to view the camera results from the IPHONE via remote access, through Safari, requires an APP. Having tried the VITEK DVRViewer app, and half a dozen other apps, I am unable to connect via the iphone. I contacted VITEK and was informed that they are aware of the problem, which they say is due from the IOS6 update, an updated app was submitted to Apple for approval, which would solve the issue.
I have found many hits on the YouTube with the same issues. Does anyone know of a solution, or if they were told by VITEK of the same solution?
Thank you

This would not seem to be an issue with Apple Remote Desktop, Apple's software for managing networked Macs and the topic of this forum. I'd suggest you take this up in the iPhone forum, where you'll be more likely to encounter someone attempting to run the same app and hence provide suggestions.
Regards.

How to IPsec site to site vpn port forwarding to remote site?

Hi All,
The scenario where a Site to Site VPN tunnel has been established between Site A and Site B. Lan on Site A can ping Lan on Site B. My problem is a Printer behind Site B needs to be accessed by using the WAN IP address of Site A. Also i could not ping the remote lan or printer from the router.
Below are my configure on the Cisco 877 in site A. Would you please advise the solution for that?
Building configuration...
Current configuration : 5425 bytes
! Last configuration change at 15:09:21 PCTime Fri Jun 15 2012 by admin01
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Laverton
boot-start-marker
boot-end-marker
logging message-counter syslog
no logging buffered
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa session-id common
clock timezone PCTime 10
crypto pki trustpoint TP-self-signed-1119949081
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1119949081
revocation-check none
rsakeypair TP-self-signed-1119949081
crypto pki certificate chain TP-self-signed-1119949081
certificate self-signed 01
XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX
XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX
69666963 6174652D 31313139 39343930 3831301E 170D3132 30363135 30343032
30385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 31313939
            quit
dot11 syslog
ip source-route
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.50
ip dhcp pool DHCP_LAN
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   dns-server 61.9.134.49
   lease infinite
ip cef
no ipv6 cef
multilink bundle-name authenticated
object-group network VPN
description ---Port Forward to vpn Turnnel---
host 192.168.2.99
username admin01 privilege 15 secret 5 $1$6pJE$ngWtGp051xpSXLAizsX6B.
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key mypasswordkey address 0.0.0.0 0.0.0.0
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map SDM_DYNMAP_1 1
set transform-set ESP-3DES-SHA
match address 100
crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1
archive
log config
hidekeys
no ip ftp passive
interface ATM0
description ---Telstra ADSL---
no ip address
no atm ilmi-keepalive
pvc 8/35
tx-ring-limit 3
encapsulation aal5snap
protocol ppp dialer
dialer pool-member 1
dsl operating-mode auto
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
switchport access vlan 10
shutdown
interface FastEthernet3
interface Vlan1
description ---Ethernet LAN---
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1420
interface Vlan10
ip dhcp relay information trusted
ip dhcp relay information check-reply none
no ip dhcp client request tftp-server-address
no ip dhcp client request netbios-nameserver
no ip dhcp client request vendor-specific
no ip dhcp client request static-route
ip address dhcp
ip nat outside
ip virtual-reassembly
interface Dialer0
description ---ADSL Detail---
ip address negotiated
ip mtu 1460
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1420
dialer pool 1
dialer-group 1
ppp chap hostname [email protected]
ppp chap password 0 mypassword
crypto map SDM_CMAP_1
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip dns server
ip nat inside source static tcp 192.168.2.99 80 interface Dialer0 8000
ip nat inside source static tcp 192.168.2.99 9100 interface Dialer0 9100
ip nat inside source route-map SDM_RMAP_1 interface Dialer0 overload
ip nat inside source route-map SDM_RMAP_2 interface Dialer0 overload
ip access-list extended NAT
remark CCP_ACL Category=16
remark IPSec Rule
deny   ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
permit ip 192.168.1.0 0.0.0.255 any
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 100 remark CCP_ACL Category=4
access-list 100 remark IPSec Rule
access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 remark CCP_ACL Category=2
access-list 101 remark IPSec Rule
access-list 101 deny   ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.2.0 0.0.0.255 any
route-map SDM_RMAP_1 permit 1
match ip address NAT
route-map SDM_RMAP_2 permit 1
match ip address 101
control-plane
line con 0
no modem enable
line aux 0
line vty 0 4
transport input telnet ssh
scheduler max-task-time 5000
end
Your help would be very appreciated!
PS: I know it is easier if i config Site A as the VPN server but in out scenario, we need to access printer from internet over static WAN IP of site A.
Thanks,
Thai

Is there anyone can help please?

Remote TC access via port forwarding

Similar Messages

Maybe you are looking for