RV320 Port forwarding issue

[rodrigocatarino]

Hi all,

I've configured my RV320 to forward port 21 to my FTP server.

I am able to connect to FTP from inside my network, although from the internet I am not able to connect to FTP.

 

I've also created a firewall rule to allow from any source to the internal IP and still am not able to connect via FTP to my server.

Do you guys have any clue why is this happening?

Kind regards,

Rodrigo

[Alex Pfeil]

To connect to a firewall on the outside, you would have to have NAT setup. You would have an outside IP address and the inside FTP server associated to the outside IP address. You then need to have an outside firewall rule allowing the internet, or specific outside IP addresses, to the inside IP address.

Please rate helpful posts.

[Spawn]

i think you have missed the NAT part.

[balaji.bandi]

Can you give more information.

1. Do you have public Fixed IP address from provider ? or from DHCP ? - if DHCP the IP dynamically changes, so you always need to keep track of that IP for incoming FTP.

2. configuration limited access to an internal ftp server that need to configure  One-to-one NAT with the ACL's to allow only the ALLOWED public address to connect.

you can do as below for testing:

Firewall>Access Control, create a rule, with priority 1, source interface WAN, PERMIT SOURCE XX.XX.XX.XX  TO DESTINATION YY.YY.YY.YY (Private IP address).

below guide to help to understand.

https://sbkb.cisco.com/CiscoSB/GetArticle.aspx?docid=f6916a7709cb43d38d74bd6ef3e8d0a2_Configure_One_toOne_Network_Address_Translation__NAT__on_RV3.xml

[rodrigocatarino]

Hi,

Thanks guys for the quick reply!

I am using a dynamic DNS service to be able to reach my devices if the public IP changes...

As for the NAT, why cant i add my public IP addess? And for the range is it the subnet lenght?

[Spawn]

may be bit different for dynamic ip address on the wan side, you cannot map it to one ip address with one to one nat, as it will keep changing on reconnect.

check the documentation, wish i had that router to play around. Check - Assigning Dynamic DNS to a WAN Interface

https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv320/administration/guide/en/rv32x_ag_en.pdf