Draytek vigor 2820 force specific traffic via static IP [closed] - networking

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 6 years ago.
Improve this question
I've got a Draytek Vigor 2820 that's used to connect to the internet. WAN1 is used as an ADSL backup, and WAN2 is our main fibre connection. WAN2 has a total of 6 IP addresses, a single dynamic one and 5 static IPs and is configured up as a PPPoE connection with DynamicIP.
I use NAT Port Redirection to open up some specific ports to various servers (web development, FTP, RDC etc)
I use NAT Open Ports to open up some static IP ports to specific servers
I use NAT Address Mapping to force all traffic received on one static IP to our Exchange server
What I want to do is to force outgoing traffic to use one of the static IPs and have hit a brick wall. Ideally I'd like to force specific traffic but would settle for all!
Under LAN is the ability to configure Static Routes, but this is purely there to allow internal routing (for VLANs).
Anybody else who has this type of router and can give me any suggestions?

OK, managed to work this one out.
Under WAN > Internet Access, select WAN2
On the PPPoE page, change the "Fixed IP" to Yes and enter one of the static IP's into the Fixed IP Address box. Click OK and then reboot the router.
All traffic will now go from that IP address. If you go back to the same page and click WAN IP Alias, the top spot will have the IP address entered in it which will likely be repeated in the list, I just removed the 'double' from the NAT pool and everything seems to work OK.
Sadly there appears to be no way of having all traffic to one IP being sent via one static IP

Related

Why is port forwarding not working in my network? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
I'm trying to enable port forwarding in my router (ZTE F660) but for some reason it is not working at all. First I started my server application in my ubuntu machine and I fixed its ip address to 192.168.1.2. Then, I set the rules as following:
It did not work. So, I've tried to disabled the firewall on my router settings:
It did not work as well, then I've disabled the firewall of my host machine by typing:
sudo ufw disable
And it did not work. Then, I tried to use many different ports and it did not work! :(
I've tried to use some port forwarding testers (like this one: https://hidemy.name/en/port-scanner/) and it always says that the state of the port is "filtered". I called the provider of my internet and they said that the port forwarding should be running but they did not offer technical help. Can anyone help me with this? Can't think about anything else to do.
Your ISP is using CGN (Carrier-Grade NAT) because your WAN address is in the Shared address space (100.64.0.0/10). That is not public address space, and it is defined by RFC 6598, IANA-Reserved IPv4 Prefix for Shared Address Space:
Abstract
This document requests the allocation of an IPv4 /10 address block to
be used as Shared Address Space to accommodate the needs of Carrier-
Grade NAT (CGN) devices. It is anticipated that Service Providers will
use this Shared Address Space to number the interfaces that connect
CGN devices to Customer Premises Equipment (CPE).
Shared Address Space is distinct from RFC 1918 private address space
because it is intended for use on Service Provider networks. However,
it may be used in a manner similar to RFC 1918 private address space
on routing equipment that is able to do address translation across
router interfaces when the addresses are identical on two different
interfaces. Details are provided in the text of this document.
This document details the allocation of an additional special-use IPv4
address block and updates RFC 5735.
The address block is detailed in Section 7:
7. IANA
Considerations
IANA has recorded the allocation of an IPv4 /10 for use as Shared
Address Space.
The Shared Address Space address range is 100.64.0.0/10.
That address space is also found in the IANA IPv4 Special-Purpose Address Registry.
What that means is that you have a home/residential ISP agreement. The ISPs are using CGN to save their precious public addresses for businesses willing to pay for them. The ISP NAT would also need to be configured to forward the port to your WAN addressing the Shared space, but the ISP cannot do that because others behind the CGN may also want that port forwarded to them.
The ISP does not really care that this breaks what you want to do because your residential ISP contract contains a clause forbidding you from running services from your network to the public Internet. You will need a public address and ISP permission to do what you want, and that probably means a business contract. The proliferation of CGN is a big driver for hosting companies, and that is an alternative way to do it.

Can I reach a device if I know its local IP address and the ip address of the router its connected to? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 7 years ago.
Improve this question
On my home network there is printer I want to print from. I know the the local IP of my printer at home, and I know the IP address of my home router.
From a different location, is there any way I can access the printer with these pieces of information?
From inside the network (while you're connected to your router at home) that would be enough information. However from outside the network, the firewall on the router would have to be set up. The place you would want to set up would be the Port Forwarding feature of your router.
While at home:
1) Login to your router
2) Look for something like "Port Forwarding/Port Triggering", "WAN", "Firewall" or something like that. It will be different on different routers.
3) Most of the time the default port for network printers is 9100 so you can set up traffic coming into the router on port 9100 to be forwarded to the printer's IP address. This is why it's called "Port Forwarding" because you're forwarding traffic on that port.
4) Once that's set up you'll have to set up a printer on your computer and use the public IP address of your home router. For example, it will be something other than "192.168.x.x".
There you have it!

port 80 blocked by ISP [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 8 years ago.
Improve this question
I want to run a web server on my home network but my ISP doesn't let incoming requests from port 80, so I have to use port 81, is there a way I could hide the port number from my domain so that people don't have to type mysite.com:81 in the address bar?
I tried to use an SRV record but after failing so many times I realized that the browser needs to obey the SRV record and it doesn't so that's why it doesn't work.
Note
My ISP also wouldn't let me buy a static IP so I have to use a dynamic dns service provided by noip.com.
If your ISP blocks port 80, then you can't run anything, not even a port forwarder, on port 80. Which means your visitors will need to use the port number. Period. Sorry, but there's just no way to make the browser use a different port without telling it to.
One thing that some dyndns providers allow you to do is to create a page that's shown when the domain is offline. You could get jordanjones.noip.com and realjordanjones.noip.com, set jordanjones.noip.com to offline, and make a page there that's nothing but a frameset with one big frame that pulls in realjordanjones.com:81. Don't know if noip.com offers that service, though.
The only real answer is: get a decent provider.
You need to do either port forwarding or redirect requests on server.
For example run server on 8080 port and redirect all requests from port 80 to 8080.
See this: Apache VirtualHost: How to ServerName a port different from 80

setting up a server for local small office [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
Closed 6 years ago.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Improve this question
I am very new in networking and setting up server. I have only used XAMPP to develop my site locally on my desktop computer. I did some researches and learn about all those network equipment online, but I found myself still confused about what I need to do to set up a server between computers. So I hope I can find the answers from experts. I have 4 computers in my office, and I am trying to create a local network that allows all 4 computers to access the files and localhost in the desktop computer.
1.) I have a modem and a router. My desktop computer and the other 2 computers are using wireless while my sister's computer is using cable that connects to the modem. In order for my sister and the other computers to access my files and localhost, do I need to plug all of the computers into a switch?
2.) I have read online that people set up port forwarding to allow others to access their website online. But right now I am just trying to make a local files and web server, do I need to set up port forwarding as well?
I am using Windows Vista and XAMPP. I couldn't solve any of the questions and confusion after 1 week of looking through online. So if anyone has a detailed guide for setting local file/web server, that will help me so much and thank you for your time as well.
1) You do not need a switch for setting up a server. An switch is just a device that basicly expands the amount cabled network connections you have. Most routers come often with 4 LAN ports and one WAN(probably conencted to your modem).
If you have lets say, 5 computers that needs a cabled connection. You will need a switch to be able to connect all those computers at the same time.
2) You only need to do port forwarding if you want others to connect from outside your local network. If you want to put a website up on a server, you will need to port forward port 80 (the port for http) to your servers local IP.
All port forwaring does is to say to your router that if it gets a packet of data with this port number to your public IP, then send it to this spesific local IP adress (your server with XAMPP). If you don't port forward, the router doesent know what local ip adress to send the packet of data to, then it just discards it, which means others cant access your website.
If you want to open your website from outside your local network, and have port forwarded your router. You probably want to setup a domain with DDNS (dynamic domain name system).
What that does is that people can write something like "www.google.com" instead of your public ip adress. A good site for that is: http://www.no-ip.com . Keep in mind that if you don't want to add a domain and just use the ip adress, your routers public IP address may change over time. Unless you have ordered a static IP address from your ISP (Internet service provider).
For your file server i would suggest a FileZilla FTP Server (FTP = File Transport Protocoll). Set this up on your server machine and follow this tutorial: https://www.youtube.com/watch?v=251TQq98zmo . Then after you have set up and configured your FTP server, you can connect your clients to the server.
I would suggest this guide to connect your other machines to the FTP server:
http://www.wintuts.com/Map-Network-Drive
Keep in mind if you want to access your FTP server from outside your network you will need to port forward both port 20 and 21. For security reasons i will strongly suggesting a password on your FTP server, unless you want anyone to connect to it.
Hope this helped!
-Kad
(PS: just comment on this post if something is unclear, or have further questions! :D )

Hosting a web from my PC (Using IIS7) [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
I was wondering why not host the application from my office itself? I have a static IP. What else do I need to make my local server accessible on the Internet? I know I need a domain name but I am new to hosting so I don't know how to go about it. How will I link my static WAN IP to the domain. Right now when I type my WAN IP on the net , my ISP shows up a site blocked page. I don't know what to do.
It is an ASP.net web app.
There are a number of things that need to fall in place before the web application will be accessible from the Internet.
You need to open the relevant ports on your router/firewall (Port 80/443 for web apps).
If you are in a NAT situation you need to forward the ports to the right machine.
The machine also needs to have its firewall set to open the ports.
The above steps will allow the page to load via the IP address only. To load the page with a domain name you need to adjust your site's DNS server to recognize the IP address for that domain name.
All of this is very broad because without knowing your exact configuration detailed answers can't be given.
First, are your sure the IP address you have at your office is a static public ip address? You may have an internal IP. What I mean is that YOUR Computer may have an internal IP address so yo would need to configure your router to forward connections to port 80 to your specific IP address inside your LAN.
You can register your domain at any registrar of your choice (I am hesitant to mention one). You should have an option to link your domain name to your IP address somewhere at the registrar's site. After you do this, you should be able to go http://yourdomainjustregistered.com and hit your IIS Server.
My understanding is that versions of IIS that are shipped with regular home computers have restrictions on how many connections can be made concurrently. You would need to get a Server version of Windows.
If your ISP shows a site blocked page when you type your ip address, it may be the case that they block port 80 to their customers so that they don't run personal websites without paying them a fee. You need to find out what's their policy regarding this, drop them if they do something like this and find another ISP. Alternatively, you can run your web server on a different port (8180, for example) and use all kinds of techniques to redirect users that hit http://yourdomain.com to this port on your box. You would need to adjust IIS to listen on this port too.

Resources