Has anyone got Port Forwarding working on Zyxel f1000

stylie

Hi,

Trying to port forward to my freenas server, ssh works from within my local network, but forwarding ports so I can connect over the internet just does not work, same user same port all I am changing is the ip address(which is static).
When I test the ports I set up in the Port Forwarding section of the router with online tools they time out when I scan so something is changing, but I still cant connect.
I dont want to set the router to bridge as thats not an elegant solution.

S

BeerWolf

Can't say I got the solution, but give this site a look:

Port Forwarding (Zyxel f1000 // P-2812HNU-Fx)

Default Guide

stylie

Unfortunately none of those methods work, and eircom refuse to help as they don't support any configurations on the router.

ED E

Have you dropped the firewall to low? Thats required.

stylie

Dropped it to low and turned it off completely, the only port that shows open on the router is the DNS 53, others that you try to open time out but do not connect.

anoble66

I have the opposite to you, port forwarding will work fine when hitting the ports from over the internet via the VDSL, but if I try to access the ports via the LAN, I get blocked! I have tried firewall on and off, NAT rules are correct as they work from my phone. The old modem would allow me to hit the external DynDNS name for whatever service from both the LAN or Internet but this one does not.

So for example for the home alarm I can access over the internet by using example.dyndns.org 8711, but from the LAN I cannot connect yet I can resolve example.dyndns.org to the WAN IP. Obviously a limitation to this modem. Annoying as it now means I need to configure multiple instances within the apps one for external and another for referencing the LAN IP instead of DNS.

stylie

Your problem makes less sense than mine. Can I ask you what settings your using in the NAT or elsewhere to get access from outside.

keno-daytrader

I was having the same problem. I discovered when i set the port forwarding under the nat settings, there is a box to check that says "active" I had forgot to check it and took me ages to realize what I had failed to do.

Can you post a screen shot of your port forwarding edit?

stylie

Not right not but the box is ticked active, stop start translation stop start are all 1234(tried diff ports) and ip is lan address 1.102. So you got port forwarding working on the F1000 with eircoms software on it ?

keno-daytrader

stylie wrote: »

Not right not but the box is ticked active, stop start translation stop start are all 1234(tried diff ports) and ip is lan address 1.102. So you got port forwarding working on the F1000 with eircoms software on it ?

Yes I have it working, TCP/UDP chosen?

stylie

Yes I have picked those protocols. Have you any other settings changed on the box ? Are you using a dynamic dns service or static ip ?

keno-daytrader

Using a static ip, nothing else I set up except in nat that we talked about

anoble66

Also working fine for me with the standard Eircom F1000 with firmware 1.00(AAHA.4)D0 - except the LAN port forward issue.


If it helps, here are my NAT rules:-

1 cam VDSL 192.168.0.67 8183 8183 8183 8183 TCP/UDP
2 plex VDSL 192.168.0.85 32400 32400 32400 32400 TCP
3 alarm VDSL 192.168.0.90 8711 8711 8711 8711 TCP/UDP

I am using DynDNS and externally these rules work, but from the internal LAN they fail. Obviously on this modem the NAT rules only work if the NAT interface (VDSL) is hit from the outside, traffic coming from the inside / LAN to the VDSL interface looks to be dropped even with the firewall off. In fairness, a lot of NAT devices will work in this way but it's a pain for a consumer level device.

stylie

This is my setting, nothing else changed in the NAT tab

stylie

Well damn it, I was so convinced the mistake was with the router I neglected my servers settings. Turns out my default gateway was in correct. Thanks for the help

Dermot McDonnell

For the record, in order for Port Forwarding to work on the F1000:

Firewall must be OFF.
Full Cone NAT (aka Port Forwarding) must be enabled (Network Settings -> Broadband -> VDSL).
You must add the NAT service and Turn it on.
A listening service, on the Port specified, must be running on the device with the specified IP address.

anoble66

I see no difference between firewall on or off or full cone NAT on or off. Port forwarding will work from the Internet, just not from the LAN.

keno-daytrader

anoble66 wrote: »

I see no difference between firewall on or off or full cone NAT on or off. Port forwarding will work from the Internet, just not from the LAN.

Ive found the same on my setup, makes no difference, I have mine set to med also and still works.

Dermot McDonnell

anoble66 wrote: »

I see no difference between firewall on or off or full cone NAT on or off. Port forwarding will work from the Internet, just not from the LAN.

You are right of course. The listening service I used, netcat, terminates when the port is probed. Apologies for my misdirection. It is as it should be

bearlink

Hi,

On the same topic, has anybody managed to get a CCTV IP camera port forwarded using
Eircom EFibre with the standard Zxytel F1000 modem? If so, could you share your F1000
port forwarding configuration (and perhaps that of the camera too)?
I have one IP camera connected to the F1000 and can log in to the camera locally and view
the video just fine.
(BTW - Great picture from these yokes, even in bad street light - I'm seriously impressed).

So now I need to set up for remote viewing over the internet.
I have managed to get as far as the camera login page from a remote external connection on the
internet, but when I log in, I don't see any image from the camera. I tried several PC browsers and
an internet connection from a smartphone - no luck. I'm probably missing some setting, and there are
lots of them!
And what is RTSP on port 554 all about?
Any help would be much appreciated.

Thanks.

stylie

I dont know anything about IP cameras but can you tell us what type it is? maybe it needs two ports open ? what is your upload speed ?
RTSP is a video streaming protocol and 554 is its default port. Can you screen shot your NAT settings and tell us the type of camera.

bearlink

Hi Stylie,

Thanks for the reply. I'm new here, so they won't let me post pics.
But here is my port forwarding setting:

Service WAN WAN Server Trig End Trans Trans
Name IFace IP IP Start Port Start End Protocol
====== ===== === ========= ===== ==== ==== === ========
name1 VDSL <blank> 192.168.1.12 8183 8183 8183 8183 TCP/UDP
name2 VDSL <blank> 192.168.1.12 554 554 554 554 TCP/UDP

(where 192.168.1.12 is the camera IP)

Download Speed: 15Mbps
Upload Speed: 10Mbps
Camera: ESCAM Brick QD300 (720P, ONVIF compliant)

The camera HTTP Port is set to 8183, so you access the camera externally (from the internet)
by entering your external IP address, followed by the port number,ie
<external_IP>:8183
This gets me as far as the login page.
But no picture after login.
I'm not sure about that second port (name2 554 etc) and this may be the problem.
If the video streaming is on Port 554, do you then need to map this port to Port 8183, or something?
Or go to <external_IP>:554?
I'm just unclear about this.

Thanks.

stylie

Hi,

I have never used an IP camera but from what I understand the http port is the cameras webserver, the video streaming is handled by a different port 554 in your case and sound if the camera did that another different port. I would have guessed <external.ip>:554 would allow you to see what the camera can see, is that not the case ? Can you check is port 554 open ?

anoble66

Hi bearlink,

As long as you have forwarded ports 8183 and 554 then it should work. One tip would be to disable QOS on the router, I had intermittent port forwarding issues until I disabled QOS, its now working perfectly bot from the internet and the LAN.