Use Case

You may need to set up port forwarding on a router so that you can access a single device on a customer network without having to set up a whole VPN. 

Configuration

The first thing you'll want to do is note the internal IP of the device you're going to be remotely accessing. 

Make sure you have the correct client selected, then click on Clients and then filter the device you need, make note of its internal IP address. 

Next, you'll click on Settings > Firewall & Security and you'll click on + Add to add the new rule. 

Adding the Rule you'll have a few fields to fill in: 

1. Name: Add a name to the rule
2. Interface: Some routers may have two or more ISP connections, make sure to select the Primary connection here. 
3. Source Address: Enter the IP from which you'll be connecting, go to https://icanhazip.com or similar to find your IP. 
4. External Port: Enter the external port you want to connect to. This can be any port you want, in this case we'll use 12345
5. Internal IP Address: Enter the internal IP of the device you're connecting to. 
6. Internal Port: Enter the port that the device's web UI uses. In most cases this is either HTTP (80) or HTTPS (443). E.g. Algo devices use port 80 while Yealink devices use 443. 

Simply click Save when finished.

Once you have this configured, you should now be able to connect to the router's external IP combined with the External Port you configured in the previous step (step 3) in a web browser. It will look something like this: 

This will look at the rule you've created and the router will see your connection from the Source Address, and the desired External Port. Then, it will route you to the configured Internal IP and port you configured. 

Disabling the Port Forwarding

Once you're done using this rule, you will make sure to disable the rule while it is not in use. 

Simply click the enablement toggle in the added configuration menu for the rule you wish to disable.