Port Forwarding for SpeedFusion NAT Mode LAN Clients

[Alan]

As of Firmware 6.3.2, Peplink routers can designate ports for each of their LAN clients while running NAT on SpeedFusion. This ensures that remote devices will be able to reach each LAN client individually.

For this document, a server is defined as the device with NAT mode enabled:

There are two steps to enabling this function:

Reserving the IP Address for DHCP on the Server Side Router

Navigate to Status > SF to locate the clients to enable port forwarding for. The ones that need port forwarding are marked as "With Client" on the Web UI.  Navigate to Status > Client List and find the IP of the client to enable port forwarding for. Click on the  button, and then click "Save". Unless you want to modify the IP address, no changes are needed on the "Add to DHCP Reservation" dialogue. 

Side note: The MAC Address you are adding to the DHCP Reservation is virtual. For the default naming convention, the "30:C9:AF" is derived from the serial number of the device.

Navigate to Network > LAN > Network Settings and enter the VLAN of the SpeedFusion Tunnel under DHCP Reservation

Enabling Port Forwarding on the Client Router

Access the WebUI of the client router, and enable port forwarding . When defining port forwarding services, please select "PepVPN" for the Inbound IP Address.  For full instructions on enabling port forwarding, please refer to this article.

[smammen]

When using NAT Mode and SpeedFusion, do the remote LANs have to be unique for the tunnel to establish?

[Tim_S]

By selecting this option, the remote unit VPN will be assigned with an IP address from the local DHCP server. All the remote side traffic via this VPN will go through Network Address Translation (NAT) using the assigned IP address.

Thanks.

[dennis.hofheinz]

Hi,

is this also possible with a Fusion Hub? With FH there is no DHCP reservation possible.

Thanks
Dennis