134
1.877.877.2269
BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
6.8.3 PORT AND PROTOCOL FORWARDING
When using IP Masquerading, devices on the external network cannot initiate connections to devices on the internal network.
To work around this, Port Forwards can be set up to allow external users to connect to a specific port, or range of ports on the
external interface of the console server or cellular router. Port forwarding also allows the console server or cellular router to redirect
data to a specified internal address and port range.
To setup a port and protocol forward:
Navigate to System > Firewall.
FIGURE 6-23.
Click the Port/Protocol Forwarding tab.
Click New Port/Protocol Forward.
Fill in the following fields.
TABLE 6-7. PORT/PROTOCOL FORWARDING FIELDS
FIELD
PURPOSE
Name
Name for the port forward. This should describe the target and the service that the port forward is used to
access.
Input Interface
This allows the user to only forward the port from a specific interface. In most cases, this should be left as Any.
Source Address/Address Range
This allows the user to restrict access to a port forward to a specific source IP address or IP address range of
the data. This may be left blank. IP address ranges use the format ip/netmask (where netmask is in bits 1-32).
Destination Address/Address
Range
The destination IP address/address range to match. This may be left blank. IP address ranges use the format
ip/netmask (where netmask is in bits 1-32)
Input Port Range
The range of ports to forward to the destination IP. These will be the port(s) specified when accessing the port
forward. These ports need not be the same as the output port range.
Protocol
The protocol of the data being forwarded. The options are TCP, UDP, TCP and UDP, ICMP, ESP, GRE, or Any.
Output Address
The target of the port forward. This is an address on the internal network where packets sent to the Input
Interface on the input port range are sent.
Output Port Range
The port or range of ports that the packets will be redirected to on the Output Address. Ranges use the format
start-finish. Only valid for TCP and UDP protocols.
CHAPTER 6: FIREWALL, FAILOVER AND OOB ACCESS