Business Community > Routers > ER6020 - Port forward problem with Access Control enabled
< Routers

ER6020 - Port forward problem with Access Control enabled

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

ER6020 - Port forward problem with Access Control enabled

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
ER6020 - Port forward problem with Access Control enabled
ER6020 - Port forward problem with Access Control enabled
2018-01-13 14:59:00 - last edited 2021-04-20 12:02:42
Model :

Hardware Version :

Firmware Version :

ISP :

1. ER6020. Under access rules a number of rules (total 10) are configured with ALLOW. The last rule ie. rule #11 is a BLOCK ALL rule from ANY in Source LAN to ANY. All services are blocked so that only the services allowed in rules 1 to 10 are permitted. This works perfectly.

2. However the moment this rule #11 is added, the ports forwarded under Virtual Servers are not permitted any more and seem to be blocked. For e.g one of the allowed rules is port 443. I also have a virtual server forwarding WAN_ALL to port 443 of an internal machine. This forward from external WAN is not working.

3. The moment I delete the rule #11 that has the BLOCK ALL ANY source LAN to ANY the port forward works.

Can someone guide me on how to block services but still have virtual servers forwarding working.

Thanks
  0      
 
  0      
 
#1
Options
3 Reply
Re:ER6020 - Port forward problem with Access Control enabled
2018-02-12 14:06:52 - last edited 2021-04-20 12:02:42
need add a ACL allow entry for virtual server.

I found an article on their official website which may be helpful. https://www.tp-link.com/en/faq-2026.html what hardware version is your TL-ER6020? you need add the first entry of this article' ACL entry in the middle of your ACL entries.
  0  
  0  
#2
Options
Re:ER6020 - Port forward problem with Access Control enabled
2018-02-13 14:10:03 - last edited 2021-04-20 12:02:42
I did try that ear.ier also. However it does not work. Please note though that my requirement is a little different.

1. I want any external IP to be able to access. I did that by adding an access control rule similar to above but allowed any ip.
2. This works as long as I dont add a rule to block all other ports from LAN to WAN. Basically other than http/s I dont want to allow any other traffic from LAN to WAN. The block all rule is the last and all the allow rules are before that.
The moment I add the block all rule, the port forwarding to the virtual server stops working. If I remove that it works.
  0  
  0  
#3
Options
Re:ER6020 - Port forward problem with Access Control enabled
2018-02-28 09:06:05 - last edited 2021-04-20 12:02:42
Communication is dual-direction. Before the Block ALL rule, you should add a Allow rule to allow your virtual server to work.
  0  
  0  
#4
Options

Information

Helpful: 0

Views: 1474

Replies: 3

Related Articles
Port forward
542 0
Adding port forward drops internet
217 0
 Port Forward Disconnects
436 0
 Logging port forward
274 0
 ER6020 and port+IP filtering
489 0
Unable to port forward ports 465 and 587
1272 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.