RV320 - Cannot connect to WAN1 IP from LAN1 when Firewall is active

[ersterhanswurst]

Hey there,

I have a Cloudstorage Server which only works from the WAN1 IP. You can connect from LAN but the file transfer cannot be done from there. I forward the HTTPS port to this Server(Setup-> Forwarding) to have access from the internet (https://*WAN1-IP*). This works fine from the internet but when the RV320-Firewall is active I cannot connect form LAN1 via Browser to https://*WAN1-IP*. If I disable the Firewall I have access.

Is there a way to have access from the LAN1 to the WAN1 interface without disabling the Firewall?

Please find the diagram attached.

[SamirD]

This is kinda a common issue with routers.  Some cannot 'hairpin' and reach the inside network from outside like that.  That is if reaching that server works via a client from the wan-side.  If that doesn't work, it's still a configuration error on the port forwarding.

[ersterhanswurst]

Thanks for your answer Samir.

There is a Client for this Cloudstorage but its also not working if connecting to this server with the WAN1-IP. 

Is there any workarround without disabling the firewall?

[SamirD]

If what you are saying is that there is a client outside the network trying to connect via the wan ip and is not able to connect, then there is still a configuration problem that is not allowing access to the cloudstorage server.

As an experiment, try putting the cloudstorage server in the dmz of the rv320 and see if the client can connect from the outside. If it can, then try the internal client. If both work, then it is simply something missed on the port forwarding configuration.

[ersterhanswurst]

The outside client works perfectly but the inside client(same network, LAN) trying to connect the https://*WAN1-IP* doesn't work.

I try from DMZ with the following Access Rule. Also doesn't work.

[SamirD]

This is commonly known as 'hairpinning' and some routers will do it and some won't.  Obviously the rv320 won't.  You'll only be able to access the cloudstorage from the internal IP address.