Overview

Port forwarding or port mapping is an application of static NAT (Network address translation ) with PAT (Port address Translation) that redirects a communication request from one address and port number combination to another while the packets are traversing a network gateway. This technique is most commonly used to make services on a host residing on a protected or masqueraded (internal) network available to hosts on the opposite side of the gateway (external network), by remapping the destination IP address and port number of the communication to an internal host.

Port Forwarding allows remote computers (for example, computers on the Internet) to connect to a specific computer or service within a private local-area network behind UTM.

Applicable Version: All

Scenario

Create a port forwarding Rule named “RDP” to access RDP service (TCP Port:- 3389) of local server.

Solution

All configurations are to be done from Web Admin Console using “Administrator” profile in Seqrite UTM.

To create and push down a Firewall Rule, follow the steps given below.

Steps:

• Navigate to Firewall > Forwarding Rules 

• Enter the Mapping Name and  the description for the rule.
• To make these rule active and generate the logs enable by clicking on checkbox.
• Browse or add Source Address(es) using the + (Add) icon.

• Select Protocol TCP from list has options as ALL, TCP and UDP.
• Select External IP. External IP is the WAN interface IP address which will be used in forwarding. Public computers access this IP address.
• 

• Select the Mapped IP by using + (Add) icon. Mapped IP is the destination computer’s IP address to which the forwarding has to be done.

  
  

• Create definition by entering name, IP address and by selecting type as shown above and click on save button.

• Mapped IP will appear and then apply the setting.

For Verification of above port forwarding by using below methods.

A. Using port checker website ( i. e. ping.eu)

B. Doing telnet to that Public IP along with TCP port via CMD prompt.

A. Using port checker website ( i. e. ping.eu)

1. Check port status on port checker website (i. e. ping.eu) and select port checker link as below.

2. Enter your External IP (Public IP) and port no for which you want to check. If it shows “Open” then you can access that port from outside/Internet. If it shows “close” then first you need to check same port is opened or not in local network.

B. Doing telnet to that Public IP along with TCP port via CMD prompt.

Go to CMD and type this syntax “Telnet Public-IP TCP-PORT-NO” and then Press Enter.

If Cursor goes to next prompt it means that port is open. Instead of this, if you see this message “connecting to 1.22.124.221….” that means port is closed in local network.

Please contact Seqrite Technical Support for more assistance