User Documentation

Version 1.2 / August 2020 Page 43 / 102

Note: If the Router - for Internet access - has to pass the corporate Router/Firewall and Security systems

(controlled by company IT) then often the configuration of a HTTP proxy is necessary. In those cases,

please ask the responsible IT department for parameters and credentials for proxy settings.

Network → Forwarding

Configuration → Network → Forwarding

Function

Configuring of forwardings based on IP address, protocol and port number.

The forwarding can be used to forward IP packets incoming at selected “Public Interface”

(e.g. WAN) and having as original target IP the Routers WAN IP to a defined Target IP e.g.

behind LAN port.

This can either be done on special TCP/UDP ports or on a whole IP address. The table sup-

ports IP aliases on the Public interface, source NAT of the request and conditional matching

by filtering on the source address. Please take care of the position of each row, as the

table is progressed from the top to the bottom for each packet until a match is found.

If you run a restricting packet filter you must open the data paths there too. The packet filter

will see the forwarding target as destination and always the original source independent of

the SNAT checkbox.

The feature „IP address forwarding“ (also called Virtual Mapping) can be used to forward an

IP packet - addressed to “Local IP” – independent of protocol and port number – to a de-

fined “Target IP”.

Public interface

Incoming interface on which the IP packet - which shall be forwarded -

will arrive.

Protocol

Select protocol TCP or UDP if you want to forward a special port.

Use “*” if you want to forward all IP packets (ICMP, TCP, UDP) inde-

pendent from protocol and port.

Screenshot shows 3 defined Forwardings. Current Router IP settings: LAN IP 192.168.1.110 / 24, WAN IP 192.168.99.52 / 24

Entry 1: Router will forward any IP packet - addressed to its physical WAN IP 192.168.99.52 with protocol TCP and port 502 – to IP

192.168.1.125 with protocol TCP and port 502 (outgoing via LAN port).

Entry 2: Router will accept and forward any IP packet - addressed to virtual WAN IP 192.168.99.222 with protocol TCP and port 80 – to IP

192.168.1.150 with protocol TCP and port 80 (outgoing via LAN port).

Entry 3: Router will accept and forward any IP packet - addressed to virtual WAN IP 192.168.99.223 and independent of protocol and port

– to IP 192.168.1.151 leaving protocol and port of the received IP packet untouched (outgoing via LAN port).