User Documentation

Version 1.2 / August 2020 Page 44 / 102
Local IP
Enter a free available IP address which will behave as an additional
(virtual) IP address of the selected “Public Interface” (mostly WAN). In
case of physical interfaces this address is most likely one of the public
interface range. In case of OpenVPN or IPsec interfaces it should be
one of the VPN address range. The device will take this additional IP ad-
dress as its own and will forward the traffic - addressed to this IP – to de-
fined Target IP. This option cannot be used on 4G or DSL links.
If you leave it empty, the current IP address of the defined (incoming) in-
terface will be used as ‘Local IP’.
Local port
The addressed port belonging to “Local IP” if protocol TCP or UDP is se-
lected. Leave empty if entry ‘*’ is selected for protocol.
Target IP
The target IP to which the IP packet – addressed to “Local IP” will be for-
warded. This can be any reachable IP address.
Target Port
The addressed port belonging to “Target IP” if protocol TCP or UDP is
selected. Leave empty if entry ‘*’ is selected for protocol.
SNAT
In enabled the source of the connection will be hidden behind the local
address of the device on the outgoing interface (i.e. LAN). This is helpful
if the target does not know an IP route to the original source (e.g. a S7
PLC with no default gateway or a default gateway to a different router).
The target will only see the local address and therefore will not need an
IP route to the original source.
Source Network
Will only enable the forward if the original source of the request is within
the given IP subnet. The syntax is IP/mask (i.e. 192.168.0.0/24)- Leave
empty if unsure.
Comment
An optional comment
Enabled
Enables or disables the entry.
Position
Move the entries to the correct position in the table. The Router is check-
ing the defined Forwardings from Top to Down until an entry is matching.
Example: You can configure a forward of TCP port 80 to an internal ad-
dress of the device itself (i.e. the LAN IP address) as the first row. Then
a second row insert a forward with protocol “*” to a target IP.
The effect will be that you can reach the device on its web interface TCP
port 80 but all other ports and protocols including ICMP pings will be for-
warded to the target.
Note after editing a value, press accept  or delete x, otherwise the message “Syntax error
applying data” will appear.