Dual WAN port forwarding possible?

[gradoj]

Hello all. I have a RT-AX92U running the latest code 3.0.0.4.386_45934. I have Dual WAN enabled in load sharing on two different ISPs. I would like to port forward port 80 from both WANs but doesn't seem possible. Seems like kind of a basic config for a dual wan router. Am i missing something? any recipe kicking around to do something like this on the cli? Any help appreciated.

 

[Justinh]

I've never used dual WAN, but I'd think port forwards has nothing to do with it. The forwarding should work for any WAN connection. The router uses only one WAN connection at a time, right? So whatever that connection is, the firewall will work against it.

 

[gradoj]

well i have it in load balancing not failover so i'd expect to be able to do something like this: publicIP1:80 and publicIP2:80 each forwarded to its own machine

 

[drabisan]

What you're looking for is technically possible. But not in home-routers price league.
Router "knows" the interface the inbound request came from, it can do the destination NAT properly and return the traffic on the same interface, doing source NAT properly.
But it makes little sense as a business case. How many home users will require such functionality? I can't see it being implemented. A user with such needs will most likely be a business user willing to pay premium for such features.
My 2c: this is not a bug, but rather a feature. Feature Asus may decide to implement or not.

 

[gradoj]

Yep, i totally understand and never called it a bug. Was actually hoping someone would give me a little guidance with iptables or rules cause i know it is very close

 

[MEDICGUY]

I'm currently waiting for my secondary line to be installed so I can run Dual Wan on my AC68U and was trying to think of a way you could do this. Assuming you've got 2 machines both listening on port 80 why don't you just set up some Routing Rules as follows (just example IPs of course):

Source	Destination	WAN
192.168.1.100	all	Primary WAN
all	192.168.1.100	Primary WAN
192.168.1.120	all	Secondary WAN
all	192.168.1.120	Secondary WAN

And in your Virtual Servers / Port Forwarding section just have a rule set up so the External Port is say 8080 but goes to 80 internally and your secondary one could be 8081 to port 80 internally. I'd always avoid opening port 80 up directly, at least use an obscure port.

 

[gradoj]

Thanks for the response. The port 80 was just an example. I setup the routing rules like you suggested but the same external port cannot be routed to different internal IP addresses even if they are on different WANs and have different external IP addresses. I have two public ip addresses and would like to forward both of them which seems quite basic for a dual wan router but I would call it a limitation on this implementation

 

[MEDICGUY]

Thanks for the response. The port 80 was just an example. I setup the routing rules like you suggested but the same external port cannot be routed to different internal IP addresses even if they are on different WANs and have different external IP addresses. I have two public ip addresses and would like to forward both of them which seems quite basic for a dual wan router but I would call it a limitation on this implementation

Ah I see what you mean. And yes, I would say it's just a limitation of what you can set in the "Virtual Servers / Port Forwarding" section. Really what you want is another drop-down which says which WAN it is coming in on.

 

[gradoj]

exactly. i'm assuming this can be done with iptables and ip rule but a bit over my head right now