How to set up port forwarding to a server located on a private network

We share useful information for users of virtual machines. Clients often contact Tucha's technical support service with a question on how to configure port forwarding to a server located on a private network, and each time we send a detailed and clear instruction in response. Now we decided on the basis of these letters to create a useful article that will help other users to understand this process.

Why configure such port forwarding at all? Let's look at an example. By following all of the following steps, you can establish a TCP and UDP connection to a server connected to a private network. In this case, port 3389 of this server will receive what will arrive on port 13666 of the external interface of the virtual router.

By the way, if you are interested in how it all works, we recommend that you look at the article "What happens when connections inside and outside the VPN tunnel", namely, the sections "Position two" and "Position three".

So, setting up port forwarding to a server located on a private network is very simple: help desk support jobs

1. Go to the Network section, select our network (NET-2019111913000635), and then select View IP Address:

2. Next, select the IP address - 195.3.205.13 (since we have several addresses, select the one for which Source NAT is enabled):

3. Now we need the Configuration tab:

4. Select the firewall settings mode:

5. After that, select the source prefix (Source CIDR), the protocol (Protocol) and the range of ports (Start Port, End Port), access to which must be allowed. Next, click the Add button:

6. Then we return to the previous menu and go to the port forwarding control mode: 

7. Select the range of ports on the server to which traffic should be forwarded (Private Port), select the range of ports on the virtual router (Public Port) and the protocol (Protocol). Next, click the Add button:

8. The last step is to select the server to which this traffic should be forwarded, and its address:

That's all. As you can see, there is nothing complicated in the process of setting up port forwarding to a server located on a private network.