New Member
•
3 Messages
Can't connect to static IP nor can ping from outside
Set router up with several options several times and still no luck. Have 2 tried servers (Domino and Apache) which work fine with spalsh screens on LAN and have appropriate Port forwarding set up and all test fine behind firewall. Disabled most firewall functions and still can't see on internet. Disable ICMP on WAN address does nothing when you toggle it.
Accepted Solution
train_wreck
Gold Problem solver
•
610 Messages
11 years ago
mind telling us what models of router, Comcast-provided modem, and/or firewall you have? as well, the specific firewall functions that have been disabled? and maybe the specific ports you've tried to forward for Domino and Apache?
i can say that i have multiple clients with static IPs, and all of the Disable ICMP on WAN address options work fine for me. i can ping both the static IP configured devices behind the modems, as well as the actual modems themselves (the "default gateway" address given to you by Comcast). I find that this function workd normally.
0
Accepted Solution
CC_John
Retired Employee
•
1.9K Messages
11 years ago
HI Restorecosystem. The port forwarding rules in place on the gateway point to LAN IP 10.1.10.11. Using the gateway IP X.X.X>250 port 80 responds with the IBM Domino splash screen when tested from the internet. The other 3 port rules in place receive a time out. This could be due to an access list rule on the Server, the application/port may not be available to request form the WAN interface. At this time we do not see your Static IP X.X.X.249 assigned to a device connected to the gateway. By assigning the Static IP directly to your webserver the port frowarding roules could be removed from the gaeway. Please let us know if additional testing is needed.
Thank You
0
0
train_wreck
Gold Problem solver
•
610 Messages
11 years ago
1 step ahead of me, Comcast_John
0
0
Restorecosystem
New Member
•
3 Messages
11 years ago
also, attempted to add static route and get Status: Invalid Destination IP Address.. What is the sequence ?? do I use X.X.X.249 as Destination IP?
0
0
Restorecosystem
New Member
•
3 Messages
11 years ago
Thats more than I could see when I tried yesterday from another office.. I don't expect the other ports (1352, 2050 and 389) to be responsive except for the notes client as the server will only respond to that. I set up apache (on 10.1.10.29, not forwarded presently) just to test system and couldn't see that from the intenet as well. Port 80 now pointed to domino server as you pointed out. Currently you should see just the domino splashscreen on port 80. I have a COMCAST supplied Netgear CG3000 gateway. Could it be up intermittently?
0
0
CC_John
Retired Employee
•
1.9K Messages
11 years ago
HI Restorecosytem. The Static IP address X.X.X.249 is the routable that would be assigned to the WAN interface of your Server. The port forwarding rules on the Comcast gateway utilizes the IP scope on the LAN DHCP, in this case 10.1.10.1.X.
With your current configuration, outside access to your network is via X.X.X.250:port#. If this current configuration meets your operational needs no other changes are necessary. However please consider adding a login challenge as an additional measure of security.
Thank You
0
0
VBSSP-RICH
Advocate
•
1.4K Messages
11 years ago
Hello Restorecosystem,
It is necessary for you to go into your the Server Network Configuration to add the following parameters to your Comcast provided staticIP configuration:
1. Static IP Routable Adress
2. Static IP Gateway Address
3. Static IP Subnet Mask
4. Primary DNS usually 75.75.75.75
5. Secondary DNS usually 75.75.76.76
If you need to open specific ports on your Static IP Routable Address device, then procede as follows after you get the correct Static IP configured as shown above and you test it by sucessfully pinging the Static IP Routable Address device from the internet:
1. log into the NG3K using browser to 10.1.10.1 then username=cusadmin, password=highspeed
2. Click firewall, then click the check mark next to disable (uncheck) True Static IP firewall to enable it, then click apply
3. Next click on Port Management tab, then click on True Static IP Port Management link. Makes sure that the dropdown selection box menu item is "block all ports with the following exceptions" because this is the highest level of security setting by ONLY opening the ports on your static IP device that is needed for access.
4. Then click add new button and type in port openings as follows:
OpenPort1 Port1 Port1 Port1 Port1 Both Static IP Routable Address
click apply
Next Port:
OpenPort2 Port2 Port2 Port2 Port2 Both Static IP Routable Address
click apply
etc., etc..............
click apply
Hope this helps you out
0
0