A customer with a Unifi Dream Machine is having trouble making an Inbound Port Forward. Here are some tests to narrow down the problem.<\/p>\n\n\n\n
Double NAT:
look at the IP address on the Internet Interface (usually 8 or 9 on a Dream Machine)
if it is in the range 10.x.x.x or 192.168.x.x or 172.x.x.x then it is a PRIVATE IP address and the internet will not “Start a conversation” with it.
It’s like a one-way valve.
The usual way to fix this is to put your ISP supplied modem into “Bridge Mode” just makes it act more like a switch than a router.<\/p>\n\n\n\n
ISP Filtering:
Create a Port Forward to a website you can verify works internally. For my test I installed Windows Admin Center which uses TCP port 6516 by default. We need to test from an internal PC that ISN’T the PC that the Port Forward points to. In a browser type https:\/\/ReplaceWithMyPublicIp:6516 If you can get to that address from an internal PC, we know the port-forward is working correctly. If we can’t get there from an external PC, then there is a REALLLY good chance the ISP is filtering your inbound connections, usually because they don’t want you using a consumer internet for business purposes.<\/p>\n\n\n\n
All the usual fixes apply
Test with the Windows Firewall OFF
If you have an AntiVirus product installed, verify it doesn’t include a yet another Firewall (yes i’m looking at you Symantec)
Update the firmware on your Firewall
Use ping to see if the IP is reachable
Use the IP first to rule out a problem with DNS lookup
Use the DNS name in a separate test to make double sure
Verify your internal subnet masks don’t cause overlapping networks. Use a subnet calculator to find the begin\/end of the range.<\/p>\n\n\n\n
I read in one post that Unifi Dream machine can’t handle Port Forwards on the Failover WAN interface but I didn’t find that was the problem.<\/p>\n","protected":false},"excerpt":{"rendered":"
A customer with a Unifi Dream Machine is having trouble making an Inbound Port Forward. Here are some tests to narrow down the problem. Double NAT:look at the IP address…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[105],"class_list":["post-2485","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-troubleshooting"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2485","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2485"}],"version-history":[{"count":6,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2485\/revisions"}],"predecessor-version":[{"id":2495,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2485\/revisions\/2495"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2485"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2485"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}