RV042 port forwarding from a specific WAN IP address

[christiangosch]

Hi there!

I have tried to forward a port from a specific WAN ip address with One-to-One NAT feature in Cisco RV042 with firmware 4.2.3.03

private range is 10.0.1.60

public range is set to the external IP from the other customer

range length is set to 1

Then i have created an access rule to allow this traffic from WAN to LAN.

Allow

HTTP [80]

WAN1

Any

10.0.1.60 ~ 10.0.1.60

Always

Can anyone please help me to get this working? 

[cchamorr]

Hello Sir, 

Im sorry that you are having issues with the device.

Just to let you know, there is no way to configure the router to forward a port only from a single WAN. When you configure port forward, you will be opening the port on both WAN connections.

To configure port forwarding go to setup and then click on Forwarding.

Now, One to One NAT is a different feature that requires a few things to work:

1- You need to have a range of static IP's from your provider

2- You router should have a static IP address configured on the WAN port and it needs to be on the same subnet as the range from the ISP.

3- When you enable the feature you will be forwarding all the ports to the private IP address.

Please let me know which one are you trying to do and I will help you further.

[christiangosch]

Hello - i have all static IP addresses LAN and WAN.

What I want is port forwarding from a specific WAN IP (source) address and not for ANY..

Do you know what i mean?

[cchamorr]

Thank you,

Yes, I know what you mean, so, do you have multiple public ip addresses that you are allowed to use from your ISP?

[cchamorr]

Hello, 

After discussing this with you I understand now that you are trying to allow a single specific address to be able to use the port forward, this is definitely possible.

Basically, you will need to go to setup and forwarding and create a forwarding rule for the port that you want to allow access to.

Then go to access rules and create a deny rule for all traffic coming from WAN to the Ip address of the server.

Under access rules create an allow rule from wan to LAN for the specific port coming from the specific public IP address of your customer going to the internal address of the server.

Finally, Make sure the deny rule is priority 2 and the allow is priority 1 and then it will work as you want to.

Please let me know if this helps.