Setting up NAT PAT with a ZTE router

axellle1 Posted messages 44 Status Member -  
 cach -
Hello everyone,

As mentioned in the title, I would like to do NAT PAT with a ZTE router, specifically the ZXHN H268N model.

This router is provided by Orange to ADSL subscribers in Senegal.
I would like to make my Proxmox server accessible from the French public IP of the Senegalese connection. To do this, I want to set up NAT PAT, but I'm having trouble.

I've found a menu in the router interface called port forwarding, which seems to match what I'm trying to do, but among the parameters to enter, there is one I don't know! It's "WAN host IP range"
I tried putting zero everywhere, but it didn't work; then I entered 192.168.1.1 twice, but still nothing happened.

I’m attaching a screenshot so you can see better what I’m talking about:



If someone can guide me, ^^
For your information, the LAN host IP is, of course, the IP of my Proxmox server, and port 8006 is the port I need to access it through the web browser.

I forgot to mention, but of course the server works very well locally.

Thank you!

4 answers

  1. axellle1 Posted messages 44 Status Member 1
     
    In the end, we managed to find the problem, so in the WAN IP menu, you need to enter the 8 zeros. But you have to set the router's firewall to low; otherwise, the router blocks all external IPs trying to query it...
    2
    1. brupala Posted messages 111140 Registration date   Status Member Last intervention   14 441
       
      ah OK,
      I didn't know there was a built-in firewall; it's true that if it blocks everything that comes in, that's not great.
      What's a shame is that they don't mention it in the menu on the left.
      Well done.
      1
    2. Judge_DT Posted messages 27651 Registration date   Status Moderator Last intervention   10 013
       
      QED, I was sure the firewall had something to do with the story… ;-(

      What nonsense these things are…
      0
  2. brupala Posted messages 111140 Registration date   Status Member Last intervention   14 441
     
    Hi, if you don't know the local IP address of your (fixed) server, you won't get very far.

    0
    1. axellle1 Posted messages 44 Status Member 1
       
      If I know the fixed IP of my server, it's 192.168.1.150

      This is the IP of my Proxmox server
      By the way, if you look at my screenshot, you will see that in the LAN host section there is this famous IP.
      What I don't understand is what they call the WAN IP...
      0
    2. brupala Posted messages 111140 Registration date   Status Member Last intervention   14 441 > axellle1 Posted messages 44 Status Member
       
      OK,
      leave the WAN interface empty if you want to allow everyone
      0
    3. axellle1 Posted messages 44 Status Member 1
       
      I can't actually do it.
      By default, there are zeros everywhere, but if I remove them and leave nothing, I can't validate.

      I also tried putting a public IP of the connection I want to use to access the server in that spot, but even connecting with that IP doesn't work...
      0
    4. brupala Posted messages 111140 Registration date   Status Member Last intervention   14 441 > axellle1 Posted messages 44 Status Member
       
      Leave the zeros then, something must be missing elsewhere...
      You do have internet access with this router, right?
      Is the Proxmox machine configured to only accept local addresses?
      Also,
      it's a kind of hypervisor; how are the servers in Proxmox connected to the physical machine?
      NAT as well or bridge? Do they have a different address from the physical address?
      Actually, do you want to access the hypervisor or a virtual server?
      Both should have different addresses.
      0
    5. Judge_DT Posted messages 27651 Registration date   Status Moderator Last intervention   10 013 > axellle1 Posted messages 44 Status Member
       
      And with 0.0.0.0 in both, it doesn't work, either?

      Maybe 0.0.0.0 - 255.255.255.255 then.

      Otherwise, you need to make sure that the redirection isn't getting stuck elsewhere or that you don't have a restriction upstream.

      How is your ZTE "box" connected / to what?

      Because it mentions "WAN" and an "Orange" connection in WAN, but WAN is in principle when you have another device before the router and bring internet via an Ethernet cable into a WAN port.
      0
  3. ste0005
     
    Thank you for kindly providing me with the procedure.
    0
  4. cach
     
    go to the tab internet>security>local service control> add a new service:
    Name: Proxmox

    Mode: Allow

    Entry: Any WAN

    IP address range: 0.0.0.0~0.0.0.0

    Service Type: HTTP FTP TELNET HTTPS PING (check the desired service)
    0