Orbi WiFi 7 RBE973
Reply

Re: BR500 Connectivity Issue - Port forwarding

Equest
Tutor

BR500 Connectivity Issue - Port forwarding

I have configured port forwarding on my BR500 to allow access from the WAN to a port on the LAN for a webcam system, and this works fine.

If I enter the FQDN:port on a browser anywhere on the internet, I connect to the webcam system.

However, any computer or device on my own LAN using the same FQDN:port address fails to recognise the port, even though the computer is connected to the same subnet as the webcam system.

If I use the numerical address of my BR500 WAN port with the port number when connected to my own LAN I have the same result.

I would add that using the webcam system local LAN address:port  on my LAN works fine.

If I ping the WAN address of the BR500 from a computer on my LAN, then I get a reply. So the issue relates to the BR500 recognising the port I am trying to access when using the router WAN address with a port number from my own LAN.

This would not be a problem, but many portable devices (eg phones) need to access this system from my own LAN and from the internet.

I found and earlier discussion related to this subject in these pages with a solution based on traffic rules. However, implementing this solution didn't solve my problem.

 

 

Model: BR500|Insight Instant VPN Router
Message 1 of 3
schumaku
Guru

Re: BR500 Connectivity Issue - Port forwarding

The FQDN does most likely resolve to the WAN (Internet) public IP address as most consumer environment don't have a local DNS infrastructure allowing split horizon config. If port forwardings (or many2one NAT) can't reach ports from the LAN it's simply lack of, or broken NAT loopback. @YeZ ideas?

PS: There are only two kinds of Internet direct accessible Webcams - those already exploited, and those which will be exploited soon.

Message 2 of 3
Equest
Tutor

Re: BR500 Connectivity Issue - Port forwarding

Yes, the FQDN is correctly resolved to the WAN address, however, the BR500 doesn't recognise its own WAN address when called from the LAN with a port added to the address, even though the port is recognised when the router is called from anywhere else on the internet. If I ping the WAN address from the LAN I get a reply.

I am using several webcams but these are accessed via a Synology NAS running video surveillance software - although I am not certain how secure this arrangement is. I note your comments about the security of webcams with a direct connection to the internet.

 

 

 

Model: BR500|Insight Instant VPN Router
Message 3 of 3
Top Contributors
Discussion stats
  • 2 replies
  • 2110 views
  • 0 kudos
  • 2 in conversation
Announcements