Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Introduction

Port forwarding is a network configuration method that directs incoming traffic from an external network to a specific device within a private network. It uses predefined rules to map external ports to internal IP addresses and ports, ensuring consistent access to services. This approach enables reliable connectivity for applications like servers, remote access, and online services.

Procedure for Testing 

TCP - Method used SSH server 
1)In Your client machine(LAN)you should have SSH installed
2)In router 'Add service' under Advanced > Port Forwarding
3)Select
4)In your client machine(LAN)run https service(In browser https://www.google.com)
5)Goto to your external network(WAN),try access ftp server of client machine(ftp -p 192.168.2.30).incoming traffic on ports 21 after seeing an outgoing packet on port 443Common Service as SSH service and Service Type as TCP, then enter Server IPv4 Address where ssh server is installed, port is 22 and save.
4)Try ssh for lan client device using gateway ip address, we should able to access lan client through gateway ip using ssh service.



UDP - The Netcat (nc) command is a command-line utility for reading and writing data between two computer networks. The communication happens using either TCP or UDP
1)In router configure Trigger port 443:443 and Target port 2399:2399Advance > Port Forwarding > Add Service, Common Service as other, Service Name as Netcat and Service Type as UDP, add lan clients's Server IPv4 Address 
2)In Your client machine(LAN)you have to run :  nc -u -l 2399
3)From external WAN machine run nc -u 192.168.2.30 2399 (192.168.2.30 - router router uplink ip address) 
4)In your client machine(LAN)run https service(In browser  https://www.google.com)
5)Goto to your external network(WAN), access server of client machine(Try sending some packets to wan client). Able to see incoming traffic on ports 2399 after seeing an outgoing packet on port 443
TCP - iperf is a tool to measure the network performance.
1)In router configure Trigger port 443:443 and Target port 5001:5001
2)In Your client machine (LAN)you have to run: iperf -s -B 10.0.0.106 -i 1 -p 5001 (10.0.0.106 - LAN IP)
3)From external WAN machine run  iperf -c 192.168.161.216 -p 5001 -i  1 -t 60 -B 192.168.160.173 (192.168.161.216 - router uplink ip address, 192.168.160.173 - WAN PC Ip)
4)In your client machine (LAN)run https service (In browser https://www.google.com)
5)In the WAN PC you will be able to see the traffic and, in the LAN PC, you will be able to see the traffic summery once you stopped the step 3.

By default Port triggering will be disabled in the RPI .We can enable using two methods .One is through DM and other way is through UI

DM : 

...





dmcli eRT setv Device.NAT.X_CISCO_COM_PortTriggers.Trigger.1.ForwardPortEnd uint 4000WEBUI

Step 1: Login to webui, from navigation -> Advanced ->Port Triggering. Click on Add Port Trigger.

...

Image Removed

...

In Your client machine(LAN)you have to run : nc -u -l 2399 
From external WAN machine run nc -u 192.168.2.30 2399, while client machine(LAN)run https service(In browser https://www.google.com)

Iperf

DM : 

...

...

WEB GUI: 

Step 1: Login to webui, from navigation -> Advanced ->Port Triggering. Click on Add Port Trigger (Configure Trigger port as 443:443 and Target port as 5001:5001)

Image Removed

Step2: In Your client machine (LAN)you have to run: iperf -s -B 10.0.0.106 -i 1 -p 5001 (10.0.0.106 - LAN IP)

Image Removed

Step3: In the WAN machine run  iperf -c 192.168.161.216 -p 5001 -i  1 -t 60 -B 192.168.160.173 (192.168.161.216 - router uplink ip address, 192.168.160.173 - WAN PC Ip) same time in the client machine (LAN)run https service (In browser https://www.google.com)

Image Removed

Supported devices

RaspberryPi , BananaPi

References

EPIC/User Stories

REFPLTB-1735
Table Filter
fixedCols
totalrow
ddSeparator
sparkNameSparkline
hidePaneFiltration panel
limitHeight
default
cell-width
totalRowName
totalColName
id1706512201091
formatVersion2
order
inverse
numbering
isNewfalse
sort
totalcol
rowsPerPage
separatorPoint (.)
labels
thousandSeparator
ignoreFirstNrows
heightValue
isORAND

Jira
serverJIRA
columnIdsissuekey,summary,issuetype,created,updated,duedate,assignee,reporter,priority,status,resolution
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId11deff04-0380-3a3d-a916-0849d4e573f7
keyREFPLTB-2851

Jira
serverJIRA
columnIdsissuekey,summary,issuetype,created,updated,duedate,assignee,reporter,priority,status,resolution
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId11deff04-0380-3a3d-a916-0849d4e573f7
key