Fios G3100 - Port Forward from specific external IP -> specific internal IP

I'm trying to open SSH port 22 on the router to forward to a specific host on my internal network.

And, I'd like to restrict external access to a specific IP address.

So far, I've created a port forwarding rule for the internal host on port 22. But can't figure out how to limit incoming access to a single IP address.

Also, the port forwarding isn't working -- can't connect via ssh from external host.

Can connect if I set the local host as DMZ.

Can you walk me thru the steps to accomplish this?

Thanks in advance.

Accepted answers

Cang_Household

Port forwarding is always forwarding the port to a specific internal host unless you are forwarding to a network object containing multiple hosts.

To better assist you, can you provide the screenshot of your port forwarding rule? Thanks.

Since G3100 itself uses port 22 for its own SSH, I don't think you can disable it through the GUI. TR-069 at Verizon's backend may achieve this, but that's available only to engineering team I think (engineering team is not accessible to customers).

The easiest solution would be forward from a different external port and, when accessing the SSH remotely, specify a different port to connect.

All comments

Cang_Household

Port forwarding is always forwarding the port to a specific internal host unless you are forwarding to a network object containing multiple hosts.

To better assist you, can you provide the screenshot of your port forwarding rule? Thanks.

The easiest solution would be forward from a different external port and, when accessing the SSH remotely, specify a different port to connect.

DonJo2

Changing the ssh port did the trick.

Thanks 👌

DonJo2

But...2nd part of my question:

Is it possible to limit an internal port service to a single external IP🤔?

Cang_Household

Yes, if you have business service and bought more than one static IP address.

No, if you have residential service.