NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
FVS318N Can’t Port Forward
Okay. I’m throwing the uncle card.
I can’t get the FVS318N to port forward. I’m trying to forward port 1723 (PPtP) for VPN into our server. I get out, I hit the server, but it is being blocked on the return by the FVS318N. A port scan shows the same. I can change the port from “Stealth” to “Closed”, when I port scan and can’t get any further.
Client (Dell D830; XP, Static IP) --> Switch (HP 1810G) --> FVS318N --> Modem (Motorola SB5101) --> IP Provider (DHCP; no ports blocked)
1. Security > Services > Custom Service Table: create custom TCP service for PPtP on port 1723
2. Security > Firewall > LAN WAN Rules: Create custom Inbound Service Rule.
- Tried both the preconfigured PPtP service in the FVS318N and the manually created custom service;
- Tried both the static IP client address and the router address in the "Send to LAN Server";
- The LAN device addresses have been reconfigured to 192.168.124.1 +;
- Tried bypassing the switch, with direct Ethernet into the FVS318N (rule out the hop from the switch);
- The Client has Zone Alarm as anti-virus with firewall. Tried to open a port in the firewall; likewise, shutdown Zone Alarm (rule out the AV/Firewall software);
- Tried a port scan from another client running Vista with the same results (rule out the AV/Firewall software and O.S. and machine);
What am I missing?
I can’t get the FVS318N to port forward. I’m trying to forward port 1723 (PPtP) for VPN into our server. I get out, I hit the server, but it is being blocked on the return by the FVS318N. A port scan shows the same. I can change the port from “Stealth” to “Closed”, when I port scan and can’t get any further.
Client (Dell D830; XP, Static IP) --> Switch (HP 1810G) --> FVS318N --> Modem (Motorola SB5101) --> IP Provider (DHCP; no ports blocked)
1. Security > Services > Custom Service Table: create custom TCP service for PPtP on port 1723
2. Security > Firewall > LAN WAN Rules: Create custom Inbound Service Rule.
- Tried both the preconfigured PPtP service in the FVS318N and the manually created custom service;
- Tried both the static IP client address and the router address in the "Send to LAN Server";
- The LAN device addresses have been reconfigured to 192.168.124.1 +;
- Tried bypassing the switch, with direct Ethernet into the FVS318N (rule out the hop from the switch);
- The Client has Zone Alarm as anti-virus with firewall. Tried to open a port in the firewall; likewise, shutdown Zone Alarm (rule out the AV/Firewall software);
- Tried a port scan from another client running Vista with the same results (rule out the AV/Firewall software and O.S. and machine);
What am I missing?
20 Replies
- Why use pptp, You should consider using SSL-VPN
- Does the FVS have a public IP on it's WAN?
adit wrote: Does the FVS have a public IP on it's WAN?
Adit, thanks for replying.
I’m *assuming* “public IP on WAN” refers to the Inbound Service field (WAN Destination to IP Address)?
And I’m also assuming that should be populated by the IP Provider’s IP address that can be found here:
Network Configuration >> Broadband ISP Settings >> Broadband Status ?
or the server's IP address that's trying to get in?I’m *assuming* “public IP on WAN” refers to the Inbound Service field (WAN Destination to IP Address)
inbound is for the remote WAN IP that is coming from
actual WAN of the router ... I think you have since 5120 is just a basic cable modemjmizoguchi wrote: inbound is for the remote WAN IP that is coming from
actual WAN of the router ... I think you have since 5120 is just a basic cable modem
June, Thanks for replying.
So for the the Inbound Service rule, in the WAN Destination IP Address, this should be set to the "Broadband"? Or the IP Address of the FVS318N?lippy wrote: June, Thanks for replying.
So for the the Inbound Service rule, in the WAN Destination IP Address, this should be set to the "Broadband"? Or the IP Address of the FVS318N?
REMOTE public IP that is coming from.
NOT broadband or FVS.
REMOTE... OTHER than your local network IP.. if you are doing from HOME, you need HOME PUBLIC IP.. = if you don't have static IP with your ISP then you can not use it respectively since IP can change depending on ISP at home.
WAN destination is feature to secure the IP (REMOTE) so that ONLY remote IP can use this ...- June, thanks for the answer, and I understand.
I want to backup to a more basic level: Port Forwarding.
I followed the instructions posted here:
http://kbserver.netgear.com/kb_web_files/N101145.asp
with the second set of instructions (FVS318v3); that set of instructions is closer than the others.
I created a inbound rule from the standard rules for FTP (port 21). In the 'Send to LAN' I have put the IP address of my static-IP client (192.168.124.175).
When I perform a port scan through ShiedsUP!, I can see the port change from 'Stealth' to 'Closed'. I can never get it to 'Open'.
What am I missing? - some ISP blocks common ports like ftp so make sure you check it out
- I too am having the same problem...
I upgraded from an FVS-318 (non wireless, circa 2003) to an FVS-318N (brand new) and setup the port forwarding.
ShieldsUp web site shows port 80 OPEN.
The server to which I am forwarding the port (manual config LAN IP) is not processing the message...
Previously, the same server, same server address, same ISP, was working with the old FVS-318 router with the HTTP service configured.
I must be missing some little thing in how to configure the FVS-318N.
Yes, I am sure the ISP does not block the port 80 packet.
Yes, the server machine is correctly configured.
Terry :) - So from remote location you are not able to reach the server?
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
