The provider did not give me a white ip long ago.I forwarded the ports to the cameras and the router, but I can only connect from outside my network, I cannot connect to the router and cameras via an external ip in the local network,
router - Zyxel Keenetic Extra 2
  • So the router does not know how to wrap requests back. – Determined Dolphin Jul 2 '19 at 15:02
  • Annoying Antelope, knows how it is scientifically :) – Determined Dolphin Jul 2 '19 at 15:06
  • Determined Dolphin, scientifically it is"fu so do" :) – Unsightly49 Jul 2 '19 at 15:14
  • Unsightly49, wrap up or call not you? :) – Determined Dolphin Jul 2 '19 at 15:21
  • Faced with the fact that some routers poorly understand the situation when a local network is addressed to its external IP address and the ports are being forwarded to the local network, they did not find a solution, but they didn’t look for it. – Hitler's74 Jul 2 '19 at 15:28
  • Determined Dolphin, wrap.
    Sokhi is usually able to do this by default(it’s strange that this one doesn’t), any more or less adequate equipment will fight back for a long time and call for help :)
    – Unsightly49 Jul 2 '19 at 16:51

5 Answers 5

Obviously, the NAT on the router is configured incorrectly.There is no more information) All the magic balls are busy, and fortune tellers are on vacation.Throw the NAT settings, then we'll talk.
what could be wrong?
Today, the moon is not directed perpendicular to Saturn because of this access to the ports on Zuhel is closed.
You need to configure HairpinNat.
I don’t have a specific recipe for how to do this in Zyxel-e, but Google probably knows.
This is sometimes called loopbackNat.
As you already answered correctly[[karabanov]] you need to configure hairpin nat.
Without this access to internal resources over white IP will not.

On the native firmware, the kinetics cannot be done, at least from the webmord, although from the command line you can try adding the necessary iptables rules.
Therefore, either change the router to micro, or do without it.
For example - go to the wrong address, but by the domain name.
And send the domain name on the local network to your gray, internal IP.
In NDMS V2 Internet centers, the NAT Loopback function has been added since version V2.01(xxxx) B20.If your device uses an earlier version, it does not support NAT Loopback.Update the system components.