Zyxel AMG/VMG [Wireless Router] - Configuring and troubleshooting port forwarding on the AMG/VMG device

This article describes you, in a few steps, how to enable port forwarding in an AMG or VMG device. This setting is a requirement to access devices like NAS or cameras from the internet. For details about ports settings and services that these LAN resources require, please refer to the user guide of the LAN device.

Port forwarding (New Web GUI)

The most common usage of port forwarding is when you want to reach a NAS (192.168.1.34) or a server in your network on the HTTPS (443) port, then the request coming from the PC (Originating IP 94.33.45.234) at work, have to be forwarded to the correct device (192.168.1.34) in your home when a request is coming on the port 443. A big misconception is that you are opening a port on your router, but that's not true. You are forwarding a port to a device in your network to be able to access it. You must either limit the source IPs (Originating IP) to the trusted IPs connecting from the internet or create perfect security on the device/server you port forward to.

• Login to your Device WEB GUI
• Navigate to Network Settings > NAT
• Click on "Add"

• Choose to Activate the rule
• Set a service name for this Port Forwarding rule
• Type in the Start and End Ports where the Router is listening to
• Type in the Translation Start and End Port, which is the Port you want to use internally
• Set up the Server IP Address, which is the internal device where you want to forward the service to
• Choose which type of Protocol you want to use (TCP / UDP / both)

Field descriptions

• Status: Is the port forward active or not? 
• Service Name: The name of the port forwarding rule
• Originating IP: The source IP (where the public IP is coming from on the internet site)
• WAN Interface: What public WAN interface to be triggered when a port forwarding is happening
• Server IP address: The device in your network to which the router is going to forward the traffic to
• Start Port: What external starting port do you want to forward
• End Port: What external ending port do you want to forward (if it's only one port, e.g. HTTPS 443, then select 443 on both the start port and the end port).
• Translation Start Port: What internal starting port do you want to forward
• Translation End Port: What internal ending port do you want to forward (if it's only one port, e.g. HTTPS 443, then select 443 on both the start and end ports)? This is, in most cases, configured as the same as the start port and end port

Port forwarding (Old Web GUI)

The most common usage of port forwarding is when you want to reach a NAS (192.168.1.34) or a server in your network on the HTTPS (443) port, then the request coming from the PC (Originating IP 94.33.45.234) at work, have to be forwarded to the correct device (192.168.1.34) in your home when a request is coming on the port 443. A big misconception is that you are opening a port on your router, but that's not true. You are forwarding a port to a device in your network to be able to access it. You must either limit the source IPs (Originating IP) to the trusted IPs connecting from the internet or create perfect security on the device/server you port forward to.

• Login to your Device WEB GUI
• Navigate to Network Settings > NAT > Port Forwarding
• Click on "Add"

• Choose to Activate the rule
• Set a service name for this Port Forwarding rule
• Type in the Start and End Ports where the Router is listening to
• Type in the Translation Start and End Port, which is the Port you want to use internally
• Set up the Server IP Address, which is the internal device where you want to forward the service to
• Choose which type of Protocol you want to use (TCP / UDP / both)

Field descriptions

• What does it mean?
• Status: Is the port forward active or not? 
• Service Name: The name of the port forwarding rule
• Originating IP: The source IP (where the public IP is coming from on the internet site)
• WAN Interface: What public WAN interface to be triggered when a port forwarding is happening
• Server IP address: The device in your network to which the router is going to forward the traffic to
• Start Port: What external starting port do you want to forward
• End Port: What external ending port do you want to forward (if it's only one port, e.g. HTTPS 443, then select 443 on both the start port and the end port).
• Translation Start Port: What internal starting port do you want to forward
• Translation End Port: What internal ending port do you want to forward (if it's only one port, e.g. HTTPS 443, then select 443 on both the start port and the end port). This is, in most cases, configured as the same as the start port and end port.