Port Redirection (Few ports / few IP's)

[fetster]

I have a single static IP and I would like to connect to a few different CCTV recorders on my network (say 192.168.1.60 to 65) from an app on my iphone remotely (works fine on another network that has only 1 device and I use open ports for this).

Each cctv system uses TCP on ports 554 & 8000 and http on 80.

Router is a Draytek 2860.

How would I set up NAT etc for this?

Many thanks for your assistance with this.

 

[joeyjojo]

If each one needs several ports (80, 554, 8000) then I can't see a way to do it with simple NAT. You could in principle map 3 ports to each IP, e.g.

Port A -> 192.168.1.60:80
Port B -> 192.168.1.60:554
Port C -> 192.168.1.60:8000
Port D -> 192.168.1.61:80
...

but that's horrible, and totally insecure.

I think you probably want to set up a VPN server and make it accessible to the internet. Then you can connect to the VPN (must be possible on an iphone) and should have unfettered access to the 192.168.1.x subnet (if you set it up right).

 

[fetster]

Thanks Joeyjojo,

Is there a range of ports that are not used by any service that I could use for the public ports? I'm worried about blocking other traffic from our SIP phone system / epos ...... etc

 

[bremen1874]

With a 2860 you shouldn't have any problem setting up a VPN an iPhone can connect to. Once you're connected you should be able to access them using the LAN IPs.