User comments on ISPs
  >> AAISP


Register (or login) on our website and you will not see this ad.


  Print Thread
Standard User chunkf
(newbie) Thu 17-May-18 11:54:32
Print Post

Public IP on VMG3925 B10B


[link to this post]
 
I just upgraded from the TG582 to a VMG3925 B10B after getting VDSL. With the old router you could assign the connection's static IP to a single local device so it wasn't behind the NAT. That was handy for me because I sometimes run a public HTTP server on my computer for web development.

Is there a way to do this with the Zyxel router?

I found the DMZ feature but with that turned on my computer still gets assigned a local IP, and when I access the public IP to use the development server I get the router's admin interface.

Anyone know how to set this up?
Standard User RobertoS
(elder) Thu 17-May-18 13:52:53
Print Post

Re: Public IP on VMG3925 B10B


[re: chunkf] [link to this post]
 
IPv4 or IPv6? You have a /48 IPv6 block so could permanently assign a static one to the device. Preferably from the initially assigned /64 for the line to save complication.

My broadband basic info/help site - www.robertos.me.uk. Domains, site and mail hosting - Tsohost.
Connection - AAISP Home::1 80/20. 200GB. Sync 66321/13379Kbps @ 600m. BQMs - IPv4 & IPv6
Standard User bsdnazz
(regular) Thu 17-May-18 16:28:38
Print Post

Re: Public IP on VMG3925 B10B


[re: chunkf] [link to this post]
 
This sounds like a form of bulk port-forwarding so that all incoming connections from the internet are directed to one internal IP address.

You may find the VMG3925 uses different terminology (I've see Internet Server used) or only supports a protocol by protocol ( HTTP, SSH, TELNET, FTP ) mapping and you may have to create multiple mappings.


Register (or login) on our website and you will not see this ad.

Standard User chunkf
(newbie) Fri 18-May-18 13:29:47
Print Post

Re: Public IP on VMG3925 B10B


[re: bsdnazz] [link to this post]
 
In reply to a post by bsdnazz:
This sounds like a form of bulk port-forwarding so that all incoming connections from the internet are directed to one internal IP address.


I think that's what it amounts to, but the Technicolor router actually assigned the public IP via DHCP to a particular device you could nominate (by MAC address), yet would still support other devices behind the NAT, so that's what I was trying to reproduce.
Standard User chunkf
(newbie) Fri 18-May-18 13:31:34
Print Post

Re: Public IP on VMG3925 B10B


[re: RobertoS] [link to this post]
 
In reply to a post by RobertoS:
IPv4 or IPv6? You have a /48 IPv6 block so could permanently assign a static one to the device. Preferably from the initially assigned /64 for the line to save complication.

Unfortunately the server needs to be accessible by people other than me so IPv4 is still a requirement.
Standard User bsdnazz
(regular) Fri 18-May-18 13:44:03
Print Post

Re: Public IP on VMG3925 B10B


[re: chunkf] [link to this post]
 
Looking at the online manual I found Chapter 11 on Network Address Translation and 11.2 the Port Forwarding screen looks to be a good starting point.

It looks like you have to add a rule per service rather than being able to map everything to one IP address. It's more flexible but also more fiddly.
Standard User ferretuk
(member) Sat 19-May-18 14:38:41
Print Post

Re: Public IP on VMG3925 B10B


[re: chunkf] [link to this post]
 
Two things to consider here:

1. Do you get the web GUI for the router if you access the public IP from outside your network (regardless of DMZ settings etc)? Hopefully no.

2. Putting your development PC in the DMZ in order to run the webserver is unnecessary and opens up security issues. You just need to set up a port forward to port 80 in the router NAT settings.

Your more than likely can't test from within your network as the router may not support hairpin NAT. Make sure all your testing is from outside your LAN.

AAISP Home::1 Terabyte | IPv4 BQM | IPv6 BQM | AAISP VOIP | ER-Lite Router | Unifi AC-Lite Wifi AP
Standard User ionic
(fountain of knowledge) Mon 21-May-18 10:56:02
Print Post

Re: Public IP on VMG3925 B10B


[re: chunkf] [link to this post]
 
Why not just ask for a /29 or/30 public allocation and route that through directly rather than going to the trouble of spoofing the router's public IP?
  Print Thread

Jump to