How to Configure Port Mapping to Allow a Designated External User to Access a Specified Intranet Device

Keywords:

Port mapping
1. Configuration Requirements
A CCTV camera is connected to the intranet of a Reyee EG router, which has portmapping configured for the camera. To ensure security, the customer wants to grant camera access to a specific external user through the port mapping policy.

2. Device Model and Firmware

Device Type	Device Model	Firmware  Version
Reyee  EG router	EG305GH-P-E	ReyeeOS 2.283.0.1904

3. Configuration Notes

• Configure port mapping onthe EG router.
• Specify the public IPaddress of the external user.
• Configure ACLs.
  

4. Solution
This section explains how to configure port mapping to allow an external user to access an AP on the intranet.
4.1 Configuring Port Mapping on the EG Router
IP address of the AP: 192.168.110.4
Choose Gateway > Advanced > Port Mapping.




Performan access test.
Port mapping functions properly.


4.2 Specifying the Public IP Address of the External User
Visit https://whatismyipaddress.com/ to find the public IP address of the network where the external user is located.


4.3 ConfiguringACLs

• Configure an ACL to deny all accesses to the LAN IP address in the port mapping policy.
  

If the destination address in the ACL is the WAN port address of the EG router, this requirement cannot be implemented. This is because data entering the WAN port from the external network undergoes NAT before the ACL is applied. Therefore, the destination address in the ACL must be the LAN IP address.
In this example, the IP address of the intranet device is 192.168.110.4, and the destination port is TCP 80.




•

Then, configure an ACL toonly allow access from the public IP address in Section 4.2.



After the configuration is complete, ensure that the Allow rule is prioritized overthe Block rule. If necessary, click the Match Order column to adjust the order,as rules higher up have a higher priority.

4.4Test
• Test the configuration on aPC with public IP address of 112.x.x.x.


Successful access:


• Test the configuration on aPC with public IP address of 2xx.xxx.xxx.xxx.


Access failed: