Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to setup a Linux server behind a Windows Hyper-V host that will help supply some of the services (SSH, HTTPS, etc). However getting RRAS configured for reverse NAT (port forwarding) turned out to be a non trivial task.

As a staring point, I tried forwarding port 22 (SSH) to the virtual machine. The virtual machine is on a public interface (i.e.: it also has a visible IP on the same network as the host). On RRAS management console I tried to add a rule, by adding "Local Area Connection" to NAT pool (Public Interface -> Enable Nat), and an incoming rule for port 22 -> :22. I also tried with the same port enabled on Windows Firewall (and not).

The NAT management page tells there are "1 mappings" and "30+ Outbound packets transleted". However all other counters (Inbound packets translated, and respective rejected ones) are always zero.

(I'm trying to access the server from an external machine). I can directly access the service if I give the VM's public IP, but not the host's one.

Is there a way to enable this on RRAS?

share|improve this question

I think the Linux reply directly with the public interface, not through the hyper-v.

You need to be sure that the Linux default gateway is the hyper-v hosts.

I publish resource among 10 RRAS servers without issue, even on linux machine.

You need however symmetric routing.

If the linux must keep his direct wan connection, then you must play with IP address based routing, as RRAS doesn't hide the real remote IP.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.