To access the section of the router GUI required for port forwarding, navigate to Settings, Firewall then Allow Applications, Pinholes and DMZ Mode.
This page is divided into 2 sections; Section 1 will ask you select the device that you wish to forward ports to. There will be a device list here displaying the name of each device. If you are unsure of the device name that you want to forward ports to, navigate to Settings and then LAN, and the device list half way down the page will display the device name and it’s corresponding IP address. Once you have identified the correct device, navigate back to Allow Applications, Pinholes and DMZ Mode section and choose the appropriate device.
Section 2 has three options.
- Maximum Protection is the default state for all devices initially connected, and means all ports are actively blocked to that device.
- Allow Individual Applications is used to open a specific port or port range to a device, within this section there are a list of standard pre-defined port rules created for ease.
- Allow All Applications (DMZ Plus Mode) will allow unrestricted access through any port to the specified device. It’s worth noting that if you are on a dynamic or a single static IP, then DMZ Plus mode can only used for a device that’s currently set to DHCP, as the public IP must be forwarded to the device in question and it will lose it’s local private IP.
To add a pre-defined port, under Filter Applications By: select All Applications and it will display all pre-defined port rules in the box shown. Scroll down the list to the desired rule and select it, click on the Add button to move it over to Hosted Applications. Once all of the appropriate applications have been added, click the Save button at the bottom.
To create a user-defined port rule, below the list of pre-defined rules is the option Add a new user defined application. Once clicked you will be shown the Firewall Application Profile Definition page. In this section we only need to fill out 3 fields, Application profile name, Protocol and Port (or Range).
- Application Profile Name: This is used to name the rule that you are creating.
- Protocol: Use this to specify if the port is TCP or UDP
- Port (or Range): Enter the desired ports here. If it’s a single port, then enter the same port in both boxes.
Everything else can be left blank and will be added with default values, click on Add to list and port info will be listed at the bottom of the page. Repeat the process if more than 1 port or port rage is required for the rule. Once complete, click the Back button to be taken back to the main page
You will need to select the appropriate device again from the list in Section 1. Once selected, choose the User Defined tab from the Allow Individual Applications section, and all user created port rules will be listed in the box at the left. Select the desired rule and clock Add to add it as a hosted application. Once the desired rules have been added, click Save at the bottom. To check all rules added, click on the Status option at the top left of the screen, and all port rules for all devices will be listed at the top.
