How can I forward an external WAN IP:PORT to internal LAN IP (no port desiganted)? Zyxel USG-20

PeterUK

No I mean 192.168.1.254 (192.168.1.250 is your NVR) can your USG-20 make a virtual interface on LAN1?

If your USG does not have a virtual interface option do the following.

Make a NAT virtual server with the following:

Incoming Interface LAN1

Original IP User defined

User-defined Original IP 192.168.1.1 (the Gateway LAN1)

Mapped IP User defined

User-defined Mapped IP 23.241.176.188

Port mapping with port 250

with routing rule as above

Then have the NVR connect to 192.168.1.1 by port 250 which with connect to the IP camera at 23.241.176.188.

OldTiger

Do you mean adding a VLAN (Configuration/Network/Interface/VLAN(tab)/add VLAN)?

If yes, then I can, but it has a lot of fields that are over my head (sorry for my lack of expertise on this).

PeterUK

No not a VLAN its likely your USG 20 don't have virtual interface so try without one as said above.

OldTiger

Configuration/Network/Interface/Ethernet tab/create virtual interface with 192.168.1.250/255.255.255.0 and I get the same loop back to the login for my page of my USG-20 (same as if I typed 192.168.1.1).

PeterUK

I said 192.168.1.254 for the virtual interface.

You have a NVR with what IP?

Your trying to connect to a IP camera at 23.241.176.188 port 250 yes?

OldTiger

Sorry for any confusion.

192.168.1.254 is not on my network.

192.168.1.250 is where I wish to be able to access 23.241.176.188:250

My NVR is on 192.168.1.100

If/when I am able to type 192.168.1.250 into my web browser and access the IP camera, I will be able to add it to my NVR without any problem (theoretically).

Right now 192.168.1.250 just takes me to my Zyxel login screen, I assume I have done something wrong in my NAT?

PeterUK

“192.168.1.254 is not on my network.”

Thats the whole point of virtual interface 192.168.1.254 will become 23.241.176.188 like a tunnel or proxy.

You make the NVR on 192.168.1.100 connect to 192.168.1.254 which will then connect to 23.241.176.188 with the NAT and routing rules posted.

https://businessforum.zyxel.com/discussion/comment/9741/#Comment_9741

OldTiger

I think we are on the same page, the only variance is you are saying 192.168.1.254 and I am saying 192.168.1.250. I promise I have followed all your advise with that sole exception. Perhaps the fact that my originating port was 250, and my target IP ends in 250 confused things for you.

And your explanation above is 100% correct for what my goal is, the problem is that "so far" 23.241.176.188:250 is not forwarding to 192.168.1.250.

Do you think it is because of the :PORT?

OldTiger

I just did something and I think it may have brought me closer to my goal. On my NAT, I changed port mapping type = PORT to ANY. Now, when I type 192.168.1.250 I still get nothing, but when I type 192.168.1.250:250 it takes me to the remote camera as desired. I think if I can figure out how to forward 192.168.1.250:1-254 to 192.168.1.250 I may be in business.

OldTiger

When you have time, please see the screenshot below. This is what I need to happen (port mapping), but I don't know the proper work around.