Port Forwarding - CCTV Server

[redman_8888]

My current network structure is :

CCTV Server(192.168.1.3)->LAN->(NIC1 192.168.1.2)Wingate Server (NIC2 192.168.0.2)->(192.168.0.1)Router/Modem(ADSL)->internet

1. How do i set the port forwarding to allow external access to internal CCTV server (port TCP1999)? because the Router network IP range is different to my LAN IP range. I set them as different IP range because to prevent internal staff to connect router directly without pass thru the wingate. Am i correct??

[genie]

You have to configure 2 relays: one is on ADSL router (if it is a router with separate IP address) - and relay traffic on port 1999 to 192.168.0.1 and another on Wingate machine, allowing traffic from Internet to Wingate machine to be relayed to 192.168.1.3

[redman_8888]

my router IP is 192.168.0.1 and it is connected to my wingate server NIC2 (192.168.0.2). So you mean i need to do the port forwarding tcp1999 192.168.0.2, then i need to create TCP Mapping service to forward to 192.168.1.3 tcp1999, am i rite?

"relays" means ports mapping,rite?

[genie]

Aye - first you have to allow forwarding packets from the router to your Wingate machine and then - either TCP mapping or (better) - port action Relay in ENS settings to your client machine.

[redman_8888]

thanks
It is work fine when set the ENS (Extended Network driver)->Port Security->Redirect packet to cctv server IP with 1999 port.

But it is cannot work when at a new TCP maping with default server IP (CCTV server) on port 1999. What's wrong?

[genie]

Well, the difference between TCP mapping and NAT relay is that if TCP mapping is used, the source address from the client perspective is the Wingate machine address.