Help with with port forward on EdgeRouter Lite

Knightsman

Well-Known Member
Reaction score
32
So im having a really hard time getting this to work. Ive cross posted on ubnt communities page, but wanted to try my luck here, as I know there are some others that use this gear.

Here is my current config file, it is NOT working. Any help is greatly appreciated!

Code:
ubnt@ubnt:~$ configure                                                          
[edit]                                                                          
ubnt@ubnt# show                                                                 
 firewall {                                                                     
 firewall {                                                                     
     name WAN_IN {                                                              
         default-action drop                                                    
         description "WAN to internal"                                          
         rule 10 {                                                              
             action accept                                                      
             description "Allow established"                                    
             log disable                                                        
             protocol all                                                       
             state {                                                            
                 established enable                                             
                 related enable                                                 
             }                                                                  
         }                                                                      
         rule 20 {                                                              
             action drop                                                        
             description "Drop Invalid"                                         
             log enable                                                         
             protocol all                                                       
             state {                                                            
                 invalid enable                                                 
             }                                                                  
         }                                                                      
         rule 21 {
             action accept
             description RDP
             destination {
                 address 192.168.1.54
                 port 3389
             }
             log disable
             protocol tcp_udp
             state {
                 established enable
                 invalid disable
                 new enable
                 related enable
             }
         }
     }
     name WAN_LOCAL {
         default-action drop
         description "WAN to router"
         rule 10 {
             action accept
             description "allow established"
             log disable
             protocol all
             state {
                 established enable
                 related enable
             }
         }
         rule 20 {
             action drop
             description "drop invalid"
             log enable
             protocol all
             state {
                 invalid enable
             }
         }
     }
 }
 interfaces {
     ethernet eth0 {
         address 192.168.1.1/24
         description Local
         vif 20 {
             address 192.168.3.1/24
             description hotspotVLAN
         }
     }
     ethernet eth1 {
         address dhcp
         description Internet
         firewall {
             in {
                 name WAN_IN
             }
             local {
                 name WAN_LOCAL
             }
         }
     }
     ethernet eth2 {
         address 192.168.2.1/24
         description "Local 2"
     }
     loopback lo {
     }
 }
 port-forward {
     auto-firewall enable
     hairpin-nat disable
     rule 1 {
         description RDP
         forward-to {
             address 192.168.1.54
             port 3389
         }
         original-port 3389
         protocol tcp_udp
     }
     wan-interface eth1
 }
 service {
     dhcp-server {
         shared-network-name Hotspot {
             subnet 192.168.3.0/24 {
                 default-router 192.168.3.1
                 dns-server 192.168.1.1
                 dns-server 8.8.8.8
                 start 192.168.3.2 {
                     stop 192.168.3.254
                 }
             }
         }
         shared-network-name LAN1 {
             subnet 192.168.1.0/24 {
                 default-router 192.168.1.1
                 dns-server 192.168.1.1
                 start 192.168.1.21 {
                     stop 192.168.1.240
                 }
             }
         }
         shared-network-name LAN2 {
             subnet 192.168.2.0/24 {
                 default-router 192.168.2.1
                 dns-server 192.168.2.1
                 start 192.168.2.21 {
                     stop 192.168.2.240
                 }
             }
         }
     }
     dns {
         forwarding {
             listen-on eth0
             listen-on eth2
         }
     }
     gui {
     }
     nat {
         rule 1 {
             description RDP
             destination {
                 address 73.0.0.0 (changed on purpose)
                 port 3389
             }
             exclude
 
Last edited:
I have not dug into the cli yet, but found the gui port forwarding wizard to work quite well. Have you tried that method to create your rules?
 
I have not dug into the cli yet, but found the gui port forwarding wizard to work quite well. Have you tried that method to create your rules?

Seems that took that feature out in v1.5 and somehow merged it into a basic port forwarding gui, that is "supposed" to setup the firewall automatically.
 
Back
Top