Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Single port forwarding to multiple machines

    NAT
    4
    5
    1.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      ariban99
      last edited by

      Hi,
      Is there a way to forward a single port to multiple machines on my network?
      I have 3 dvrs, for some reason i cant change the port they use and they all use the same port.
      if i create an alias with 3 ip address as such (my internal lan)
      192.168.1.88
      192.168.1.89
      192.168.1.90

      and i go to nat and create a new nat and rule to forward port 67 to the above alias, it wont work, i can not remotely connect.

      if i only open this port for ONE machine at a time, then it works.

      so my question is, is there a way to make a single port be opened to multiple machines / ip on the internal network?

      Thank you
      Ben

      1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott
        last edited by

        You have to use 3 separate port numbers, 2 non-standard, on the WAN side and forward them to the 3 DVRs.  This means you'll also have to specify the port numbers for the 2 non-standard ones when you try to access them.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          For starters why would you be forwarding 67?  Is that the port, that is a dhcp port.  Did you just random pick that port?

          To show you what Jknott is talking about.  I doubt you want 67 so lets say you want to access your dvr on port 80 which seems more likely.

          You would setup these forwards

          publicIP:80 –-> 192.168.1.88:80
          publicIP:81 ---> 192.168.1.89:80
          publicIP:82 ---> 192.168.1.90:80

          Then when you want to access say 1.89 you would connect to your publicIP:81 it would be forwarded to 1.89:80

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            Or don't do any of that. You should not expose weak systems like DVRs to the Internet directly. Use a remote access VPN to reach your internal network and you won't have any of these problems trying to connect to the DVRs.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              ^ yes this is much better way to do it.  This is how I access anything on my network.  I don't have any forwards other than to my ntp server that is member of the ntp pool.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.