Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Port Forwarding to remote or cctv (Port Forwarding to Internal Server on seperate VLAN)
  •  
Ahingsagha

Messages: 3
Karma: 0
Send a private message to this user
Our LAN is seperated into 15 vlans and I would like to know if you can forward a port from our external IP to a server located on a different internal VLAN?

I Have problem about Remote Desktop Service and Forward Port anything.. via ddns
I have detail about my network let go
my router ip address = 192.168.1.1 and I forward port anything
remote = 192.168.1.202 port 3389
CCTV1 = 192.168.1.81 port 81
CCTV2 = 192.168.1.82 port 82
CCTV3 = 192.168.1.83 port 83
.............................

Firewall (Kerio Control) ip address Lan interface = 192.168.10.1
ip address Wan interface = 192.168.1.10
dhcp = no, because I config my Switch to dhcp to Vlan all about 15 Vlan
ip address Vlan 10 = 192.168.10.0
ip address Vlan 20 = 192.168.20.0
ip address Vlan 30 = 192.168.30.0
..........................................................
ip address Vlan 150 = 192.168.150.0

See picture traffice Policy
./fa/3064/0/

remote = local (192.168.20.2) Vlan 20
CCTV1 = local (192.168.30.1) Vlan 30

Finally all vlan can access to Internet
But from external or internet can't access remote or CCTV via browser
Why ??????? where wrong ????

[Updated on: Mon, 08 July 2013 09:30]


"You'll Never Walk Alone"
  •  
Jonas Rodrigues (Kerio)

Messages: 262
Karma: 22
Send a private message to this user
Hi Ahingsagha,

Have you created a rule to allow traffic between your VLANs and your Firewall?


All the best,



Kerio Technical Support
Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
  •  
Ahingsagha

Messages: 3
Karma: 0
Send a private message to this user
Jonas Rodrigues (Kerio) wrote on Mon, 08 July 2013 09:28
Hi Ahingsagha,

Have you created a rule to allow traffic between your VLANs and your Firewall?


All the best,



Hi Jonas
My Firewall(Kerio control) no create Vlan

I Config my switch (L3) to all vlan access internet via vlan Firewall and Finally all vlan can access to Internet

and I hope you help me check Routing table of firewall right,

see picture Routing table
./fa/3065/0/

Thank Jonas

  • Attachment: Routing2.jpg
    (Size: 92.58KB, Downloaded 2260 times)

"You'll Never Walk Alone"
  •  
Lisa Lyons (Kerio)

Messages: 175
Karma: 8
Send a private message to this user
Out of interest, what version of Control are you currently using?

If it's the latest, 8.1.0, have you used the IP Tools to see if you can ping the devices in each vlan?

It may be worth your while exporting the Support Info (found on the system health screen) and looking for the routing table there; this may give you a good idea of the way the firewall is seeing the vlans.

Kerio Technical Support
Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
  •  
Ahingsagha

Messages: 3
Karma: 0
Send a private message to this user
Lisa Lyons (Kerio) wrote on Wed, 10 July 2013 13:05
Out of interest, what version of Control are you currently using?

If it's the latest, 8.1.0, have you used the IP Tools to see if you can ping the devices in each vlan?

It may be worth your while exporting the Support Info (found on the system health screen) and looking for the routing table there; this may give you a good idea of the way the firewall is seeing the vlans.


Thanks Lisa Lyons

Kerio Control my version 7.4.1 build 5051

Network Diagram me
./fa/3067/0/
and now all vlan can access to Internet
But from external or internet can't access remote or CCTV via browser
Why ???????
where wrong ????
How to check next step ???

  • Attachment: Network2.jpg
    (Size: 125.75KB, Downloaded 4192 times)

"You'll Never Walk Alone"
Previous Topic: Logging vpn connection on users' computers
Next Topic: Multiple PPPOE Kerio Control 8.1
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Oct 18 09:09:55 CEST 2017

Total time taken to generate the page: 0.00473 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.