1:1 Nat or Virtual Server

Jeff_ATS
Jeff_ATS Posts: 11  Freshman Member
First Comment Third Anniversary
in Security

I cannot get this to work. My WAN address is (300.1.1.1) obviously not real. But I need to connect to a Mesenger Server in my LAN with an address of 192.168.1.210 utilizing ports 14121n 14122 and 14123. I have created the following, but cannot get it to work. I have disabled the Windows 10 Firewall to test on the 192.168.1.210 device.

Messenger-Ports.jpg
Messenger-LAN.jpg
Messenger-WAN.jpg
Messenger NAT.jpg
MessengerObject.jpg

Accepted Solution

  • Jeff_ATS
    Jeff_ATS Posts: 11  Freshman Member
    First Comment Third Anniversary
    Answer ✓

    The issue has been resolved using Virtual Server and I had to uncheck NAAAAAAT loopback.

    Thank you all

All Replies

  • PeterUK
    PeterUK Posts: 3,459  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 2023

    Its Virtual Server you need but I don't think it will help.

    Can you packet capture the WAN when the outside connects to those ports like GRC port scan test

    https://www.grc.com/x/ne.dll?bh0bkyd2

  • smb_corp_user
    smb_corp_user Posts: 168  Master Member
    5 Answers First Comment Friend Collector Second Anniversary

    Good advice there from PeterUK.

    Just suggesting, even though it might not be necessary:

    Have you checked if UDP packet traffic is needed in your scenario? Or are most UDP ports open in your network between source and target?

  • MJStar
    MJStar Posts: 37  Freshman Member
    First Answer First Comment Friend Collector Third Anniversary

    Agree with smb_corp_user, you could try to use Virtual Server to obtain the goal.

  • DeanH
    DeanH Posts: 47  Freshman Member
    First Comment Fourth Anniversary

    Agreed with the others, use virtual server. Also, uncheck NAT loopback. I've had some issues with that being checked before - not sure why - so I always uncheck it now.

  • Jeff_ATS
    Jeff_ATS Posts: 11  Freshman Member
    First Comment Third Anniversary
    Answer ✓

    The issue has been resolved using Virtual Server and I had to uncheck NAAAAAAT loopback.

    Thank you all

  • Anoosh
    Anoosh Posts: 7  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    Hi, I know this is resolved thread, but I am having similar issue. Isn't 1:1 NAT with source address of any same as Virtual server? At least, based on this post:

    https://community.zyxel.com/en/discussion/14056/what-is-the-difference-between-virtual-server-and-1-1-nat

    In any case, my similar issue was also resolved when I switched to virtual server. Interesting enough, when I switched back to 1:1 NAT, it worked also! Something inside Zyxel may be caching. I have not restarted the Zyxel to see if this persists. Any insights? I am just trying make sure I do understand when to use Virtual Server vs 1:1 NAT better.

  • PeterUK
    PeterUK Posts: 3,459  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    I have not come across when to use 1:1 NAT when Virtual Server works I had thought 1:1 NAT is when you have a WAN subnet that you then map a give WAN IP to a give LAN IP that being 1:1 NAT.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）