Reply
Initial Contributor
Posts: 4
Registered: ‎2012-05-06

FVS318N Can’t Port Forward

Okay. I’m throwing the uncle card.

I can’t get the FVS318N to port forward. I’m trying to forward port 1723 (PPtP) for VPN into our server. I get out, I hit the server, but it is being blocked on the return by the FVS318N. A port scan shows the same. I can change the port from “Stealth” to “Closed”, when I port scan and can’t get any further.

Client (Dell D830; XP, Static IP) --> Switch (HP 1810G) --> FVS318N --> Modem (Motorola SB5101) --> IP Provider (DHCP; no ports blocked)

1. Security > Services > Custom Service Table: create custom TCP service for PPtP on port 1723

2. Security > Firewall > LAN WAN Rules: Create custom Inbound Service Rule.

- Tried both the preconfigured PPtP service in the FVS318N and the manually created custom service;
- Tried both the static IP client address and the router address in the "Send to LAN Server";
- The LAN device addresses have been reconfigured to 192.168.124.1 +;
- Tried bypassing the switch, with direct Ethernet into the FVS318N (rule out the hop from the switch);
- The Client has Zone Alarm as anti-virus with firewall. Tried to open a port in the firewall; likewise, shutdown Zone Alarm (rule out the AV/Firewall software);
- Tried a port scan from another client running Vista with the same results (rule out the AV/Firewall software and O.S. and machine);

What am I missing?
Regular Contributor
Posts: 89,285
Registered: ‎2009-01-27

Re: FVS318N Can’t Port Forward

Why use pptp, You should consider using SSL-VPN
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Highlighted
Moderator
Posts: 8,868
Registered: ‎2009-01-27

Re: FVS318N Can’t Port Forward

Does the FVS have a public IP on it's WAN?
Initial Contributor
Posts: 4
Registered: ‎2012-05-06

Re: FVS318N Can’t Port Forward

adit wrote:
Does the FVS have a public IP on it's WAN?


Adit, thanks for replying.

I’m *assuming* “public IP on WAN” refers to the Inbound Service field (WAN Destination to IP Address)?

And I’m also assuming that should be populated by the IP Provider’s IP address that can be found here:
Network Configuration >> Broadband ISP Settings >> Broadband Status ?

or the server's IP address that's trying to get in?
Regular Contributor
Posts: 89,285
Registered: ‎2009-01-27

Re: FVS318N Can’t Port Forward

I’m *assuming* “public IP on WAN” refers to the Inbound Service field (WAN Destination to IP Address)


inbound is for the remote WAN IP that is coming from

actual WAN of the router ... I think you have since 5120 is just a basic cable modem
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Initial Contributor
Posts: 4
Registered: ‎2012-05-06

Re: FVS318N Can’t Port Forward

jmizoguchi wrote:
inbound is for the remote WAN IP that is coming from

actual WAN of the router ... I think you have since 5120 is just a basic cable modem


June, Thanks for replying.

So for the the Inbound Service rule, in the WAN Destination IP Address, this should be set to the "Broadband"? Or the IP Address of the FVS318N?
Regular Contributor
Posts: 89,285
Registered: ‎2009-01-27

Re: FVS318N Can’t Port Forward

lippy wrote:
June, Thanks for replying.

So for the the Inbound Service rule, in the WAN Destination IP Address, this should be set to the "Broadband"? Or the IP Address of the FVS318N?


REMOTE public IP that is coming from.

NOT broadband or FVS.

REMOTE... OTHER than your local network IP.. if you are doing from HOME, you need HOME PUBLIC IP.. = if you don't have static IP with your ISP then you can not use it respectively since IP can change depending on ISP at home.


WAN destination is feature to secure the IP (REMOTE) so that ONLY remote IP can use this ...
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Initial Contributor
Posts: 4
Registered: ‎2012-05-06

Re: FVS318N Can’t Port Forward

June, thanks for the answer, and I understand.

I want to backup to a more basic level: Port Forwarding.

I followed the instructions posted here:
http://kbserver.netgear.com/kb_web_files/N101145.asp
with the second set of instructions (FVS318v3); that set of instructions is closer than the others.

I created a inbound rule from the standard rules for FTP (port 21). In the 'Send to LAN' I have put the IP address of my static-IP client (192.168.124.175).

When I perform a port scan through ShiedsUP!, I can see the port change from 'Stealth' to 'Closed'. I can never get it to 'Open'.

What am I missing?
Regular Contributor
Posts: 89,285
Registered: ‎2009-01-27

Re: FVS318N Can’t Port Forward

some ISP blocks common ports like ftp so make sure you check it out
VPN Case Study

VPNCASESTUDY.COM

"Our Second To None VPN Related Setup Case Study[/COLOR][/URL]

"One Stop Solution To Your Netgear VPN Connectivity"

*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]





June Mizoguchi-
Occasional Contributor
Posts: 7
Registered: ‎2013-01-21

Re: FVS318N Can’t Port Forward

I too am having the same problem...
I upgraded from an FVS-318 (non wireless, circa 2003) to an FVS-318N (brand new) and setup the port forwarding.
ShieldsUp web site shows port 80 OPEN.
The server to which I am forwarding the port (manual config LAN IP) is not processing the message...
Previously, the same server, same server address, same ISP, was working with the old FVS-318 router with the HTTP service configured.
I must be missing some little thing in how to configure the FVS-318N.
Yes, I am sure the ISP does not block the port 80 packet.
Yes, the server machine is correctly configured.
Terry Smiley Happy
Discussion Stats
  • 20 replies
  • 29337 views
  • 0 kudos
  • 5 in conversation
Top Contributors