Unable to open port /NAT on USG40W

ice2921
ice2921 Posts: 7
First Comment Second Anniversary
in Security
I have followed both of these guide to a "T" and my USG40W refuses to port forward:
https://mysupport.zyxel.com/hc/en-us/articles/360003880919--ZyWALL-USG-

How-to-open-ports-on-a-ZyWALL-USG-router-Port-Forwarding-NAT-
https://support.zyxel.eu/hc/en-us/articles/360001390934-NAT-Rule-Configuration-on-a-USG-Port-Forwarding-

I have checked and rechecked my objects and ports, but nothing seems to work in the logs I can see that traffic from expected IPs is trying to connect in because I get the following message:

notice
Security Policy Control
Match default rule, DROP [count=22]

There is definitely a policy at priority one that allows the appropriate service. What am i doing wrong here?

Accepted Solution

  • PeterUK
    PeterUK Posts: 2,195
    100 Answers 1000 Comments Friend Collector Fifth Anniversary
     Guru Member
    Answer ✓

    Check the port role and port you are connected too


All Replies

  • mMontana
    mMontana Posts: 1,248
    50 Answers 1000 Comments Friend Collector Fourth Anniversary
     Guru Member
    NAT instruct your device about how manage the packages.
    Then security policy allows the traffic.

    If you will publish (even masked/with data replaced) both NAT and Security policies i could analyze it and make my suggestions.
  • PeterUK
    PeterUK Posts: 2,195
    100 Answers 1000 Comments Friend Collector Fifth Anniversary
     Guru Member
    In the NAT rule have you left "source IP" to any?
  • ice2921
    ice2921 Posts: 7
    First Comment Second Anniversary
    Yes, source IP is set to any.

  • ice2921
    ice2921 Posts: 7
    First Comment Second Anniversary
    mMontana said:
    NAT instruct your device about how manage the packages.
    Then security policy allows the traffic.

    If you will publish (even masked/with data replaced) both NAT and Security policies i could analyze it and make my suggestions.
    Yes I am familiar on this concept and I am pretty sure its configured correctly

    NAT:


    Security policy:

    Preview
  • ice2921
    ice2921 Posts: 7
    First Comment Second Anniversary
    PeterUK said:

    Check the port role and port you are connected too


    What do you mean? 

  • PeterUK
    PeterUK Posts: 2,195
    100 Answers 1000 Comments Friend Collector Fifth Anniversary
     Guru Member

    In config > network > interface that the device is connected to the port for Lan2


Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）