# \[GL-MT300N-V2\] port forwarding and ssh

**URL:** <https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842>\
**Category:** Router\
**Created:** [June 17, 2018, 3:45pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842 "2018-06-17T15:45:16Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![psigli](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/p/77aa72/32.png) [@psigli](https://forum.gl-inet.com/u/psigli)\
**Post date:** [June 17, 2018, 3:45pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/1 "2018-06-17T15:45:16Z")

</div>

Guys, I need some help configuring ssh access to my pcs.  
Here’s the current situation:

```
[internet]
    |
    |
static ip
[GL-MT300N-V2]
192.168.0.1
    | | _______________
    | |
[PC01] [PC02]
ssh server port22 ssh server port 22
192.168.0.2 192.168.0.3

```

I think that I should open as example the port 60021 on the router firewall and configure port forwarding to 192.168.0.2:22, but how exactly can I do that?

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [June 17, 2018, 4:15pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/2 "2018-06-17T16:15:16Z")

</div>

You need to do that again from Luci.  
From the GL-iNet Interface click “Advanced settings \>\>” in the top right.  
Login, then go to:

Network → Firewall  
Port Forwards submenu  
Use external zone wan.  
Do what you need there 😃

You can have port 22 and port 23 for example, you can use any port you like, but i would use some much higher ports, say 2080, 2090 or something like that not taken by usual services and not always scanned for on the external ports, and ofc to port 22 internally.

One port forward for each pc.  
You might also want to reserve the IP those pc’s so they don’t change on you suddenly.

Network → DHCP & DNS  
Static Leases at the bottom.

---

<div class="post-metadata">

**Author:** ![psigli](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/p/77aa72/32.png) [@psigli](https://forum.gl-inet.com/u/psigli)\
**Post date:** [June 17, 2018, 5:24pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/3 "2018-06-17T17:24:34Z")

</div>

> [@Johnex](#):
>
> You need to do that again from Luci.  
> From the GL-iNet Interface click “Advanced settings \>\>” in the top right.  
> Login, then go to:
> 
> Network → Firewall  
> Port Forwards submenu  
> Use external zone wan.  
> Do what you need there 😃  
> **That’s exactly where I get lost 🙂**
> 
> You can have port 22 and port 23 for example, you can use any port you like, but i would use some much higher ports, say 2080, 2090 or something like that not taken by usual services and not always scanned for on the external ports, and ofc to port 22 internally.  
> **That’s right, infact I was planning to use ports 60021, 60022**
> 
> One port forward for each pc.  
> **Got it**
> 
> You might also want to reserve the IP those pc’s so they don’t change on you suddenly.  
> **Already done that**
> 
> Network → DHCP & DNS  
> Static Leases at the bottom.

Replied in the quote.

So that’s my firewall page configuration:

 ![01](https://forum-static.gl-inet.com/original/1X/33c41639f610529dd8ae9d6efd3b8838feed1bd2.jpeg)

And the port forwarding configuration for PC01:

 ![02](https://forum-static.gl-inet.com/original/1X/26315abf526196bb88df201208f636028c6c633a.jpeg)

Is it everything ok?

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [June 17, 2018, 5:25pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/4 "2018-06-17T17:25:40Z")

</div>

Yup looks good. Test it out?

---

<div class="post-metadata">

**Author:** ![psigli](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/p/77aa72/32.png) [@psigli](https://forum.gl-inet.com/u/psigli)\
**Post date:** [June 17, 2018, 7:15pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/5 "2018-06-17T19:15:25Z")

</div>

Need to find a second router to test it because my ISP does not provide a dedicated IP address.

By the way, what does the line:  
Wan-\>Reject  
in the firewall section stands for?

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [June 17, 2018, 8:02pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/6 "2018-06-17T20:02:33Z")

</div>

If your ISP does not provide an IP, you can maybe try and get your customer hostname. Try here see if you get one?

> **[My Hostname.net](https://myhostname.net/)**
>
> Find out what your public hostname and IP-address is.

About the Wan → Reject that is default and i think it just means to reject all forwards by default from wan to another wan (2 routers on the same zone).

---

<div class="post-metadata">

**Author:** ![asholino](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/c57346/32.png) [@asholino](https://forum.gl-inet.com/u/asholino)\
**Post date:** [November 8, 2018, 6:59pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/7 "2018-11-08T18:59:15Z")

</div>

hi All

SAME PROBLEM BUT NEED TO OPEN PORTS ON VPN INTERFACE  
SOMEONE TO HELP?

---

<div class="post-metadata">

**Author:** ![asholino](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/c57346/32.png) [@asholino](https://forum.gl-inet.com/u/asholino)\
**Post date:** [November 8, 2018, 7:39pm UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/8 "2018-11-08T19:39:14Z")

</div>

> [@psigli](#):
>
> Static Leases at the bottom.

can you screenshot me the first enabled rule i tried to do it but no way

---

<div class="post-metadata">

**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\
**Post date:** [November 12, 2018, 6:36am UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/9 "2018-11-12T06:36:24Z")

</div>

Can you try 3.005 firmware [GL.iNet download center](https://dl.gl-inet.com/firmware/mt300n-v2/testing/)?

We have port forward simple UI like below.

 ![image](https://forum-static.gl-inet.com/original/1X/3cd656321f9915797e5110984e6811c88d9c7664.png)

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 29, 2025, 2:57am UTC](https://forum.gl-inet.com/t/gl-mt300n-v2-port-forwarding-and-ssh/3842/10 "2025-10-29T02:57:11Z")

</div>