How can I forward an external WAN IP:PORT to internal LAN IP (no port desiganted)? Zyxel USG-20

24

All Replies

  • PeterUK
    PeterUK Posts: 2,655  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited September 2019

    No I mean 192.168.1.254 (192.168.1.250 is your NVR) can your USG-20 make a virtual interface on LAN1?

    If your USG does not have a virtual interface option do the following.

    Make a NAT virtual server with the following:

    Incoming Interface LAN1

    Original IP User defined

    User-defined Original IP 192.168.1.1 (the Gateway LAN1)

    Mapped IP User defined

    User-defined Mapped IP 23.241.176.188

    Port mapping with port 250

    with routing rule as above

    Then have the NVR connect to 192.168.1.1 by port 250 which with connect to the IP camera at 23.241.176.188.

  • OldTiger
    OldTiger Posts: 19  Freshman Member
    First Comment

    Do you mean adding a VLAN (Configuration/Network/Interface/VLAN(tab)/add VLAN)?

    If yes, then I can, but it has a lot of fields that are over my head (sorry for my lack of expertise on this).

  • PeterUK
    PeterUK Posts: 2,655  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer

    No not a VLAN its likely your USG 20 don't have virtual interface so try without one as said above.


  • OldTiger
    OldTiger Posts: 19  Freshman Member
    First Comment

    Configuration/Network/Interface/Ethernet tab/create virtual interface with 192.168.1.250/255.255.255.0 and I get the same loop back to the login for my page of my USG-20 (same as if I typed 192.168.1.1).

  • PeterUK
    PeterUK Posts: 2,655  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited September 2019

    I said 192.168.1.254 for the virtual interface.

    You have a NVR with what IP?

    Your trying to connect to a IP camera at 23.241.176.188 port 250 yes?

  • OldTiger
    OldTiger Posts: 19  Freshman Member
    First Comment

    Sorry for any confusion.

    192.168.1.254 is not on my network.

    192.168.1.250 is where I wish to be able to access 23.241.176.188:250

    My NVR is on 192.168.1.100

    If/when I am able to type 192.168.1.250 into my web browser and access the IP camera, I will be able to add it to my NVR without any problem (theoretically).

    Right now 192.168.1.250 just takes me to my Zyxel login screen, I assume I have done something wrong in my NAT?

  • PeterUK
    PeterUK Posts: 2,655  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited September 2019

    “192.168.1.254 is not on my network.”

    Thats the whole point of virtual interface 192.168.1.254 will become 23.241.176.188 like a tunnel or proxy.

    You make the NVR on 192.168.1.100 connect to 192.168.1.254 which will then connect to 23.241.176.188 with the NAT and routing rules posted.

    https://businessforum.zyxel.com/discussion/comment/9741/#Comment_9741

  • OldTiger
    OldTiger Posts: 19  Freshman Member
    First Comment

    I think we are on the same page, the only variance is you are saying 192.168.1.254 and I am saying 192.168.1.250. I promise I have followed all your advise with that sole exception. Perhaps the fact that my originating port was 250, and my target IP ends in 250 confused things for you.

    And your explanation above is 100% correct for what my goal is, the problem is that "so far" 23.241.176.188:250 is not forwarding to 192.168.1.250.

    Do you think it is because of the :PORT?

  • OldTiger
    OldTiger Posts: 19  Freshman Member
    First Comment

    I just did something and I think it may have brought me closer to my goal. On my NAT, I changed port mapping type = PORT to ANY. Now, when I type 192.168.1.250 I still get nothing, but when I type 192.168.1.250:250 it takes me to the remote camera as desired. I think if I can figure out how to forward 192.168.1.250:1-254 to 192.168.1.250 I may be in business.


  • OldTiger
    OldTiger Posts: 19  Freshman Member
    First Comment

    When you have time, please see the screenshot below. This is what I need to happen (port mapping), but I don't know the proper work around.


Security Highlight