Port Forwarding - Tripp Lite B092-016 Owner's Manual

Chapter 5: Firewall, Failover and Out-of-Band
5.5.3

Port Forwarding

When using IP Masquerading, devices on the external network cannot initiate connections to devices on the internal network.
To work around this, Port Forwards can be set up to allow external users to connect to a specific port, or range of ports on the
external interface of the Console Server, and have the Console Server redirect the data to a specified internal address and port
range.
To setup a port forward:
• Navigate to the System: Firewall page, and click on the Port Forwarding tab
• Click Add New Port Forward
• Fill in the following fields:
Name: Name for the port forward. This should describe the target and the service that the port forward is used to
access
Input Interface: This allows the user to only forward the port from a specific interface. In most cases, this should be left
as "Any"
Source Address/
Address Range: This allows the user to restrict access to a port forward to a specific source IP address or IP address
range of the data. This may be left blank. IP address ranges use the format ip/netmask (where netmask is
in bits 1-32).
Input Port Range: The range of ports to forward to the destination IP . These will be the port(s) specified when accessing the
port forward. These ports need not be the same as the output port range.
Protocol: The protocol of the data being forwarded. The options are TCP or UDP
Output Address: The target of the port forward. This is an address on the internal network where packets sent to the Input
Interface on the input port range are sent.
Output Port Range: The port or ports that the packets will be redirected to on the Output Address.
For example, to forward port 8443 to an internal HTTPS server on 192.168.10.2, the following settings would be used:
Input Interface: Any
Input Port Range: 8443
Protocol: TCP
Output Address: 192.168.10.2
Output Port Range: 443
79