topic Re: RV320 Port forwarding issue in Network Security

RV320 Port forwarding issue

rodrigocatarino — Fri, 21 Feb 2020 16:21:02 GMT

Hi all,

I've configured my RV320 to forward port 21 to my FTP server.

I am able to connect to FTP from inside my network, although from the internet I am not able to connect to FTP.

I've also created a firewall rule to allow from any source to the internal IP and still am not able to connect via FTP to my server.

Do you guys have any clue why is this happening?

Kind regards,

Rodrigo

Re: RV320 Port forwarding issue

Alex Pfeil — Sun, 14 Oct 2018 00:08:01 GMT

To connect to a firewall on the outside, you would have to have NAT setup. You would have an outside IP address and the inside FTP server associated to the outside IP address. You then need to have an outside firewall rule allowing the internet, or specific outside IP addresses, to the inside IP address.

Please rate helpful posts.

Re: RV320 Port forwarding issue

Spawn — Sun, 14 Oct 2018 07:03:54 GMT

i think you have missed the NAT part.

Re: RV320 Port forwarding issue

balaji.bandi — Sun, 14 Oct 2018 09:11:29 GMT

Can you give more information.

1. Do you have public Fixed IP address from provider ? or from DHCP ? - if DHCP the IP dynamically changes, so you always need to keep track of that IP for incoming FTP.

2. configuration limited access to an internal ftp server that need to configure One-to-one NAT with the ACL's to allow only the ALLOWED public address to connect.

you can do as below for testing:

Firewall>Access Control, create a rule, with priority 1, source interface WAN, PERMIT SOURCE XX.XX.XX.XX TO DESTINATION YY.YY.YY.YY (Private IP address).

below guide to help to understand.

https://sbkb.cisco.com/CiscoSB/GetArticle.aspx?docid=f6916a7709cb43d38d74bd6ef3e8d0a2_Configure_One_toOne_Network_Address_Translation__NAT__on_RV3.xml

Re: RV320 Port forwarding issue

rodrigocatarino — Sun, 14 Oct 2018 11:47:05 GMT

Hi,

Thanks guys for the quick reply!

I am using a dynamic DNS service to be able to reach my devices if the public IP changes...

As for the NAT, why cant i add my public IP addess? And for the range is it the subnet lenght?

Re: RV320 Port forwarding issue

Spawn — Mon, 15 Oct 2018 07:43:12 GMT

may be bit different for dynamic ip address on the wan side, you cannot map it to one ip address with one to one nat, as it will keep changing on reconnect.

check the documentation, wish i had that router to play around. Check - Assigning Dynamic DNS to a WAN Interface

https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv320/administration/guide/en/rv32x_ag_en.pdf