Can't figure out how to port forward USG20-VPN FW 4.31(ABAQ.0)

Zendata

I have looked up numerous guides and youtube videos but most of the of the help is on an older version. I am using the latest version of the FW and still receive my connection is being rejected. My modemn is in bridge mode so I know that can't be the issue. I have attached screenshots so we can figure this out. The port I am trying to open is 32400. Any help? I've been going crazy over this.

Service Rule

Nat rule

Security Policy

Zyxel_Stanley

Hi @Zendata

Welcome to Zyxel community.

 

The NAT(port forwarding) rule is for external user easily accessing to internal server. And you just need creating the rule like it:

-The Original IP is the address your ISP provided to you.

-The Mapping IP is the address your server get.

-The Original port is the port number for outside user. User can use this port number to accessing the internal server.

-The Mapping port is the port number that your server is servicing.

And also you have to make sure your Policy Control has allowed the port 3389 from WAN to LAN.

[Deleted User]

Dear @Zendata
as following

Create service object:



Create the nat rule!

Note: NAT Loopback can be activated, so internal clients can contact server on the WAN IP-address. (Only if Original IP is not ANY.) therefore i filled in external ip

And then The policy control --

This should  work !
otherwise make a copy of your log and post it here :-) 

Zendata

I dont understand the original IP vs mapped ip. Our screenshots are different. This didnt work for me it is still denying. How do I provide logging.

Zendata

Also for the ending port, I cant specify it. When i specify 32400 for starting and ending and save. I reopen the service and the ending port is blank.

Zendata

Your screenshots say internal vs external. I dont know how that relates to my screens.

Zendata

I feel like we are lined up here idk what Im missing.

Zendata

Key thing to note my modemn is in bridge mode on public dhcp lease.

Zendata

The last thing I can possible think it could be is that zyxel is picking up my IP as a 192 address when my public is a 99.91 address (naturally).

Zyxel_Stanley

Hi @Zendata

Welcome to Zyxel community.

 

The NAT(port forwarding) rule is for external user easily accessing to internal server. And you just need creating the rule like it:

-The Original IP is the address your ISP provided to you.

-The Mapping IP is the address your server get.

-The Original port is the port number for outside user. User can use this port number to accessing the internal server.

-The Mapping port is the port number that your server is servicing.

And also you have to make sure your Policy Control has allowed the port 3389 from WAN to LAN.

[Deleted User]

Internal external mapped or original  its all the same just other description..
Everything is explained above.. 

Use youre orignal ip : this is the public wan ip from your ISP
Mapped ip is the nas ip internally

Zendata

As you can see from the screenshots provided that is exactly what I have. I'm still being denied. How do I upload logs. I need this working before friday next week.