help tutorial configure endian to access from outside

[Guest]

[mangthjik]

Hello all master here..

 I have 2 uplink.
 main uplink with ip 192.168.3.3 gateway 192.168.3.2
second uplink  with ip 192.168.2.2 gateway 192.168.2.1
green ip/lan 192.168.1.15
I want to access endian webserver configuration from outside with webconfig and ssh console.
Please help me how to create Nat rule or somting else to gain the access
I had configure NAT as bellow

Incoming ip type : zone/vpn/uplink
select interface: <any>
incoming service port : 10443
protocol: TCP/UDP


Translate To:
type : IP
insert ip : 192.168.1.15
port range : 10443
Nat : NAT

Access From
source type:zone/vpn/uplink
select interface : mainuplink192.168.3.3
Filter policy : Allow With ips

I had try but can't access the webconfig endian server from outside. please correct myrule or any thing else I need do...
 for using vpn I am also can't confogure it. I am noob in here, any help and correction really appreciate.

Regards

[timupci]

For security reason, I would not open any access to configuration from the outside. However, you can setup the OpenVPN and remote into your local network and access the EFW.

Also, be sure to check the Firewall > System Access to make sure your OpenVPN subnet has access to EFW Config.

[mangthjik]

I am relly confuse when activating and using vpn so complext ,,, using certificate ect...ect.... I just want the simple one. so I am plant using direct port foward. what about my config rule ?

For security reason, I would not open any access to configuration from the outside. However, you can setup the OpenVPN and remote into your local network and access the EFW.

Also, be sure to check the Firewall > System Access to make sure your OpenVPN subnet has access to EFW Config.

[erikgee]

It should be straight forward, even for a noob :-)

In the webinterface navigate to firewall and from there choose "System access"
In the Source address fill in the IP address from which you want to access the firewall. In the Source interface choose "RED"
now you can leave everything as is if you want total access to your firewall from before mentioned IP address or you can specify for instance: Policy - User defined - TCP - 10443 to access only to the administrator webconsole.