1-1 NAT not working on 7800DX

[oakworthy]

I have a block of 16 public IP addresses, and I want to start setting them up for use.

As a starting point, I manually assigned an IP camera the private address of 192.168.1.160. Then, in my 7800DX, I set up a 1-1 NAT entry to map one of my public addresses to it.

My understanding is that, having done this, people should be able to access the camera via the public address. But when they try, they get the web login page for the router, not for the camera.

I am clearly doing something wrong, but what?

Using the latest 7800DX firmware - I updated last night from 2.31 to 2.32 but it made no difference
I have opened a firewall port for the public address.
I have checked that the camera is accessible on 192.168.1.160 from inside my LAN, and it is.
I have checked that the router is not set to the camera's public address. It's not.
If I delete the 1-1 NAT entry, I can no longer see the router's login page at the camera's expected address. So the NAT is clearly doing something, but not the right thing.

In case it matters, this is a FTTC connection using a BT Openreach modem on the EWAN port.

Any advice would be welcome. Thanks.

[billion_fan]

I have a block of 16 public IP addresses, and I want to start setting them up for use.

As a starting point, I manually assigned an IP camera the private address of 192.168.1.160. Then, in my 7800DX, I set up a 1-1 NAT entry to map one of my public addresses to it.

My understanding is that, having done this, people should be able to access the camera via the public address. But when they try, they get the web login page for the router, not for the camera.

I am clearly doing something wrong, but what?

Using the latest 7800DX firmware - I updated last night from 2.31 to 2.32 but it made no difference
I have opened a firewall port for the public address.
I have checked that the camera is accessible on 192.168.1.160 from inside my LAN, and it is.
I have checked that the router is not set to the camera's public address. It's not.
If I delete the 1-1 NAT entry, I can no longer see the router's login page at the camera's expected address. So the NAT is clearly doing something, but not the right thing.

In case it matters, this is a FTTC connection using a BT Openreach modem on the EWAN port.

Any advice would be welcome. Thanks.

This is strange, entering the One to One NAT WAN IP, should not redirect you to the routers WAN IP, as they are on different WAN IP's I would expect either you get a connection to your web cam, or there is no reply from the one to one NAT IP.

I am planning on running some test tomorrow/friday, once our FTTC line with a range of static IP's becomes free (in use at the moment) and I will drop you a update with my results.

[oakworthy]

Thanks. Happy to give you remote access to my router if you want to see for yourself, or to supply all relevant IP addresses.

[billion_fan]

Thanks. Happy to give you remote access to my router if you want to see for yourself, or to supply all relevant IP addresses.

Once I have run our tests here, if needed, I will let you (don't really want to bother you, if we can do the tests here in our lab)

[billion_fan]

We tested the one to one NAT function on our Idnet FTTC line with a range of static IP's and everything worked fine.

Check out the attached screen shots of our setup

On '1to1 nat test.png' you can see our WAN IP (eth) on the routers web gui, our internal IP (win 8), and a web page showing our external WAN IP. (http://www.whatsmyip.org/)

[oakworthy]

Thanks for that. I shall work through a similar example here and see what the differences are.

Rob

[oakworthy]

OK, thanks for that feedback. Appreciated. However, I *still* have the problem and I can't work out what I'm doing wrong.

If you (or anyone else here) has 4 minutes to spare, please could I ask you to take a look at http://www.youtube.com/watch?v=prgtHpJdlCM where you'll find a screencast video of me demonstrating the precise problem that I'm having with 1-1 NAT on my 7800DX. I simply can't get it to do what I expect it should do. I guess I'm obviously doing something stupid, and failing to understand how this router works, but I really can't work it out. I'd hate to have to dump this piece of kit so soon after having bought it.

That URL again: http://www.youtube.com/watch?v=prgtHpJdlCM

Many thanks,

Rob

[billion_fan]

OK, thanks for that feedback. Appreciated. However, I *still* have the problem and I can't work out what I'm doing wrong.

If you (or anyone else here) has 4 minutes to spare, please could I ask you to take a look at http://www.youtube.com/watch?v=prgtHpJdlCM where you'll find a screencast video of me demonstrating the precise problem that I'm having with 1-1 NAT on my 7800DX. I simply can't get it to do what I expect it should do. I guess I'm obviously doing something stupid, and failing to understand how this router works, but I really can't work it out. I'd hate to have to dump this piece of kit so soon after having bought it.

That URL again: http://www.youtube.com/watch?v=prgtHpJdlCM

Many thanks,

Rob

I tested the same setup, as shown in your video, and I can replicate your issue when I am directly connected to the internal network ( I have informed our engineers and waiting for reply, I assume it has something to do with NAT loop back)

Then when I tested the external IP set on one to one NAT section, from a remote location (another DSL line) I could access VNC on that WAN IP, so it seems to work fine from a external/remote location, but not when connected to the local network, a workaround would be to use the internal IP address.

Once our engineers reply, I will run some tests with a HTTP server and let you know the results

[oakworthy]

Thank you! Glad I'm not going mad!

[billion_fan]

Thank you! Glad I'm not going mad!

After checking with our engineers, the issue seems to be with NAT Loop back and one to one NAT. PC1 under 78xx can’t use the WAN IP Address to access the PC2 in the same LAN Segment.

Our engineers have stated if they atempt to fix it, this will cause other issues with UPNP and IPTV.

The work around solution is to use the internal IP when on the local network and when outside/remote you can use the external one to one NAT IP.

If you need me to test this with a HTTP server running on port 80, I can do so, with a one to one NAT IP and try to login from a remote location (I tested this yesterday with VNC port 5800 and it worked fine, so I don't see why should not work with other devices eg web cams)