NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
bastibugla
Sep 11, 2015Guide
Using RN202 behind WNDR 4500v2
Hi, as described above i am using a WNDR 4500v2 router. Until now i had a 2TB storage conntected to one of the USB ports directly. After having troubles with it and noticing that the router can only...
- Sep 12, 2015
bastibugla wrote:
Hi StephenB,
thanks for the quick answer!
Can you explain a bit more detailled how I can setup portforwarding in router? I guess I already set it up, but unfortunately it doesn't work at the moment. That's what i set up in router:
Internal IP address is of course that one of NAS.
# Service Name External Start Port External End Port Internal Start Port Internal End Port Internal IP address 1 FTP passive ports 50000 50004 50000 50004 192.168.1.7 2 FTP 20 21 20 21 192.168.1.7 On the other hand, what does "Masquerade" mean in NAS set up? Do I have to enter that folder into my ftp address like: ftp://bastibugla.mynetgear.com/readyNAS ? I guess I need to sign up to those folder with that one, which i defined in NAS, not that admin login, with what i get into my router, correct?
Thanks for your support!!
It looks to me like you set up port forwarding correctly (though you didn't need to forward port 20, that is used for active FTP which won't work through firewalls). You do need to configure that same passive port range in the NAS. You do need to disable the FTP service in your router though (otherwise it will be listening on port 21, which could interfere with the connection).
The way FTP passive mode works, the FTP server (e.g., the NAS) sends the passive port information to the client on port 21. That passive port information includes the IP address (e.g., 192.168.1.7:50000 in your case). But the 192.168.1.7 part won't reach you over the internet, instead the server needs to send the public IP address of your router (which is what bastibugla.mynetgear.com would resolve to). Masquerading tells the NAS to use a different IP address, and not the 192.168.1.7.
Some clients (for instance FileZilla) don't need the masquerade. They automatically detect that the 192.168.1.7 is not routable, and do their own masquerade (taking the public IP address they used to reach your router instead). None of my clients need it, so I leave it disabled. If you do need it, you'd set it to bastibugla.mynetgear.com
On ftp://bastibugla.mynetgear.com/readyNAS, you don't normally include the sharename. ftp://bastibugla.mynetgear.com is enough to reach the NAS (the connection uses port 21, which you have forwarded). The client will give you a user/password challenge, and then show you all the folders that are available. It might show some folders that you aren't allowed to access with that log on, but shouldn't let you navigate into them. But you can include the folder if you wish (like HTTP it is case-sensitive).
bastibugla
Sep 12, 2015Guide
Hi StephenB,
thanks for the quick answer!
Can you explain a bit more detailled how I can setup portforwarding in router? I guess I already set it up, but unfortunately it doesn't work at the moment. That's what i set up in router:
Internal IP address is of course that one of NAS.
# | Service Name | External Start Port | External End Port | Internal Start Port | Internal End Port | Internal IP address | |
1 | FTP passive ports | 50000 | 50004 | 50000 | 50004 | 192.168.1.7 | |
2 | FTP | 20 | 21 | 20 | 21 | 192.168.1.7 |
On the other hand, what does "Masquerade" mean in NAS set up? Do I have to enter that folder into my ftp address like: ftp://bastibugla.mynetgear.com/readyNAS ? I guess I need to sign up to those folder with that one, which i defined in NAS, not that admin login, with what i get into my router, correct?
Thanks for your support!!
StephenB
Sep 12, 2015Guru - Experienced User
bastibugla wrote:
Hi StephenB,
thanks for the quick answer!
Can you explain a bit more detailled how I can setup portforwarding in router? I guess I already set it up, but unfortunately it doesn't work at the moment. That's what i set up in router:
Internal IP address is of course that one of NAS.
# Service Name External Start Port External End Port Internal Start Port Internal End Port Internal IP address 1 FTP passive ports 50000 50004 50000 50004 192.168.1.7 2 FTP 20 21 20 21 192.168.1.7
On the other hand, what does "Masquerade" mean in NAS set up? Do I have to enter that folder into my ftp address like: ftp://bastibugla.mynetgear.com/readyNAS ? I guess I need to sign up to those folder with that one, which i defined in NAS, not that admin login, with what i get into my router, correct?
Thanks for your support!!
It looks to me like you set up port forwarding correctly (though you didn't need to forward port 20, that is used for active FTP which won't work through firewalls). You do need to configure that same passive port range in the NAS. You do need to disable the FTP service in your router though (otherwise it will be listening on port 21, which could interfere with the connection).
The way FTP passive mode works, the FTP server (e.g., the NAS) sends the passive port information to the client on port 21. That passive port information includes the IP address (e.g., 192.168.1.7:50000 in your case). But the 192.168.1.7 part won't reach you over the internet, instead the server needs to send the public IP address of your router (which is what bastibugla.mynetgear.com would resolve to). Masquerading tells the NAS to use a different IP address, and not the 192.168.1.7.
Some clients (for instance FileZilla) don't need the masquerade. They automatically detect that the 192.168.1.7 is not routable, and do their own masquerade (taking the public IP address they used to reach your router instead). None of my clients need it, so I leave it disabled. If you do need it, you'd set it to bastibugla.mynetgear.com
On ftp://bastibugla.mynetgear.com/readyNAS, you don't normally include the sharename. ftp://bastibugla.mynetgear.com is enough to reach the NAS (the connection uses port 21, which you have forwarded). The client will give you a user/password challenge, and then show you all the folders that are available. It might show some folders that you aren't allowed to access with that log on, but shouldn't let you navigate into them. But you can include the folder if you wish (like HTTP it is case-sensitive).
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!