Zyxel USG20W-VPN – Opening ports for “For Honor”

Although I thought of knowing how to open ports on a firewall I was proven wrong when I had to open the ports for the videogame For Honor. Therefore I have asked help to Zyxel which has been very kind and their answer successfully solved the issue. Downbelow how they suggested to proceed.

Network configuration

The network I was working on is configured as follows:

Modem –> Firewall Zyxel USG20W-VPN ~~~ Wireless Network ~~~ Gaming PC

Checking WLAN settings

As the gaming computer is connected through a wireless connection first of all it is necessary to check if the WLAN is sending the data on the right network, which in our case was LAN1. In order to do that proceed as follows.

Add the WLAN to the right zone:
Configuration> Object> AP Profile> SSID
Select the desired SSID and click on “Edit”.
Under “Local VAP Settings”, select “Off” for VLAN Support.
As an “Outgoing Interface”, select the zone to which the WLAN should connect to the Internet, eg: lan1.

ChoosingRightNetwork
VLAN support is turned off and the outgoing interface is LAN1

Assign a static IP address to the gaming PC

Next, you assign a static DHCP address to your game PC on the interface using the WLAN as an “outgoing interface”.
(Network> Interface> Ethernet)

StaticIpAddress1

Double click on “lan1”, activate the “Advanced settings” and scroll down until you find “Enable IP/MAC binding”. Activate the checkbox and in the “Static DHCP table” click on “Add”. Assign an IP address to the MAC address of the wireless or ethernet card of the Gaming PC.

StaticIpAddress2.png

Create an address object under Object> Address / Geo IP for your game PC with the Static DHCP address.

StaticIpAddress3.png
Adding 192.168.0.52 as an IP address to the Gaming PC

Creating ports and assigning to a service group

Under Object> Services> Services, create all ports that you do not already have.

CreatingPorts.png
In order to recongnize the port I have decided to name it ForHonor_13000: that way I understand that the port is dedicated to the game ForHonor and that the port is number 13000.

With the same procedure create the objects for the following ports:

TCP: 80, 443, 13000, 13005, 13200, 14000, 14001, 14008, 14020, 14021-14024
UDP: 3074, 3075

A list of the ports that should be opened for PC, PS4 and XBOX is found at this link.

Please note, however, that opening these ports will result in a significant security risk.

For later use it is very convenient to create a “Service Group” with the ports created before. In Object –> Service Group tab add

ServiceGroup.png
Give a name to the group and then select from the list on the left all the ports that we have created before. Once selected make them member of the new group you created by moving them to the right. The picture shows the already completed transfer, I’m now ready to press “OK” in order to proceed with the group creation.

Creating a new Virtual Server object

Under Network> NAT, create a new Virtual Server object
Original IP: Any
Mapped IP: Game PC
Port Mapping Type: Service Group
Original Service Group: Game Service Group

NAT.png
Adding a NAT Rule called “ForHonor”

Once added the table should look like this:

NAT_Table.png
In the table the rule FH which stands for “For Honor”. Because of privay concerns I was asked to grey out the other data.

Creating a security policy

Go to Security Policy> Policy Control and create a rule
From WAN To LAN1
Source: Any
IPv4 Destination: Game PC
Service: Game service group
Action: Allow

SecurityPolicy.png
Adding a security policy. Please note that when selecting the service you’ll have to look for the group we have created before: in order to do that you’ll have to scroll down almost the whole list, as the single objects (ports) are listed before of the groups.

Finally “For Honor” is displaying a green NAT Open.

ForHonor_NATOpen

I didn’t undestand why, but even if the game works and shows NAT Type open if the ports are tested with the site: www.canyouseeme.org the results are negative for each of the ports.

2 thoughts on “Zyxel USG20W-VPN – Opening ports for “For Honor”

  1. Hi admin, i must say you have hi quality posts here. Your blog should go viral.
    You need initial traffic boost only. How to get it? Search for;
    Mertiso’s tips go viral

    Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s