Got it

Port forwarding on HUAWEI 5G CPE Pro 2

Created: Apr 13, 2021 06:38:43Latest reply: Jul 30, 2021 16:33:41 10054 21 0 0 0
  HiCoins as reward: 0 (problem unresolved)

I'm trying to configure port forwarding ("virtual server") on a Huawei 5G CPE Pro 2 H122-373 for a small server farm (two servers in an Active Directory). Unfortunately, it is not possible to assign a WAN port twice, e.g. the main ports like 80 and 443. This would be the default configuration as it can be configured on all other routers, including FritzBox and LTE/WLAN routers like the Alcatel HHV40 (an 80 € item). So the Huawei router (a 400 € item that claims to offer the latest technologies) seems to be useless. Please provide some guidance on how to fix this problem or publish a firmware update as soon as possible, otherwise I will sell the router again. Thx and best regards!


Meanwhile I solved it myself, as I described in this thread: The HUAWEI router in bridge mode with a connected hardware firewall behind it, which does the port forwarding. Good solution anyway, since DDOS attack protection is implemented. A normal router or Fritzbox could also do the job here. Anyway, this was intended as workaround only. I'll forward the feature request to the local ISP or the local Huawei's department as discussed.

View more
  • x
  • convention:

Chenxintao
Chenxintao Created Apr 15, 2021 02:47:50 (0) (0)
Hi, my friend!
That's great!  
All Answers
Hi, friend!
H122-373 is a consumer product, please give me a moment to confirm the problem.
Can you provide the version of the device and your city?
View more
  • x
  • convention:

Posted by Chenxintao at 2021-04-13 06:42 Hi, friend!H122-373 is a consumer product, please give me a moment to confirm the problem.Can you pr ...

Hy and thanks for the reply! The router was bought in Austria (Magenta Internet 5G Box Pro2), for getting the firmware version (if needed) I would have to start and connect the router at first again. But I don't think that this would be a firmware version issue - although the firmware obviously would have to be updated urgently.

View more
  • x
  • convention:

Posted by Uwe_Martens at 2021-04-13 06:54 Hy and thanks for the reply! The router was bought in Austria (Magenta Internet 5G Box Pro2), for ...
Hi,
I'm looking at this, but for the configuration of port forwarding, can you give a screenshot of the configuration interface? Because I can't figure out what the problem is, if you can log into the device's web interface, you should be able to see the software version of the device to determine if you can fix the problem by updating the firmware.
Thanks!
View more
  • x
  • convention:

Posted by Chenxintao at 2021-04-13 07:02 Hi, I'm looking at this, but for the configuration of port forwarding, can you give a screenshot o ...
The latest firmware version 10.0.5.13(H612SP5C1217) is installed. The error message is:

This WAN port range has been occupied by another virtual server, please enter a new range

See screenshot (data blurred):

HUAWEI 5G CPE Pro 2 Port forwarding error



View more
  • x
  • convention:

Chenxintao
Chenxintao Created Apr 13, 2021 08:49:29 (0) (0)
Hi, friend!
I'm sorry I didn't respond to your message after reading this message and went straight to find a solution.
For accuracy, I've asked the device owner to simulate the operation, but it will take some time. To avoid wasting your time, I suggest you log in after a few hours and check the post's comments.  
Posted by Uwe_Martens at 2021-04-13 08:03 The latest firmware version 10.0.5.13(H612SP5C1217) is installed. The error message is:This WAN po ...
Hi, friend!
The red message indicates that port 80 is occupied by the device.
I need a little time to verify.
View more
  • x
  • convention:

Posted by Chenxintao at 2021-04-13 08:44 Hi, friend!The red message indicates that port 80 is occupied by the device.I need a little time t ...
Well, this is very easy to replicate: Just connect any two devices to the router and try to assign port 80 (or which port ever) for both of them. So the port is not occupied by the router, but by the first device. BTW: This behaviour is independent from the NAT setting (cone or symmetric mode). The normal behavior would be to allow multiple bindings. The creator of the menu thought this would never gonna happen, but in fact it is a very common use case (connecting multiple servers of an AD, e.g. a domain controller and an Exchange server, etc.). This should be easy for the dev team to fix. Otherwise, the router is unfortunately useless for business purposes. And please note that this router comes along only as part of business contracts from T-Mobile!
View more
  • x
  • convention:

Posted by Uwe_Martens at 2021-04-13 11:29 Well, this is very easy to replicate: Just connect any two devices to the router and try to assign ...

Hi, friend!

Here's a screenshot of the configuration I simulated with your device version:

CPE

According to your description, I seem to understand the reason why you failed to configure port forwarding.

Have you added a forwarding rule and then want to add another forwarding rule that only modifies the LAN IP address?


eg:

Rule number one, WAN Port:80, LAN IP:192.168.x.100, LAN Port:80

Rule number two, WAN Port:80, LAN IP:192.168.x.101, LAN Port:80


If this is the case, the rule cannot be added. The prompt on the device configuration interface clearly states that you need to switch to another port because one of the rules already uses WAN port 80.


Thanks!



View more
  • x
  • convention:

Uwe_Martens
Uwe_Martens Created Apr 13, 2021 12:58:05 (0) (0)
And about your scenario below the screenshot:

Rule number one, WAN Port:80, LAN IP:192.168.x.100, LAN Port:80
Rule number two, WAN Port:80, LAN IP:192.168.x.101, LAN Port:80

Yes, this is the needed configuration as described. So if you want to tell me "this doesn't work" this is nothing new to me. If you want to tell me further, that your dev team don't care about the issue I'll give back the router, that's it!  
Chenxintao
Chenxintao Reply Uwe_Martens  Created Apr 13, 2021 13:10:23 (0) (0)
I've confirmed that this feature needs to be reviewed by the local office.
You can consult the local office.  
Uwe_Martens
Uwe_Martens Reply Chenxintao  Created Apr 13, 2021 13:19:54 (0) (0)
Thanks! But what does "the local office" mean here? Magenta/Telekom doesn't care, as this is HUAWEI's responsibility.  
Posted by Chenxintao at 2021-04-13 12:41 Posted by Uwe_Martens at 2021-04-13 12:41 Well, this is very easy to replicate: Just connect any ...
Unfortunately this is only step 1 of 2 to reproduce. Now please try to assign port 80 to a second device and you'll get the error message. In the worst case your dev team would have to modify/complement the NAT system, but I think it's just a user interface issue.
View more
  • x
  • convention:

Posted by Uwe_Martens at 2021-04-13 12:50Unfortunately this is only step 1 of 2 to reproduce. Now please try to assign port 80 to a second  ...

Yes, I understand what you mean.
However, the current version of the device does not support this operation.
If you want to create multiple rules for the same port,  need to contact the local office for solutions.

View more
  • x
  • convention:

12
Back to list

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.