We may want to get into our router or ATA remotely so it is a good idea to port forward necessary ports to our VPN network.

Setting an IP Reservation

Navigate to the web interface at and go to Network –> DHCP and DNS. At the bottom of the page, view the current DHCP leases and find the one for the ATA, noting the MAC address. Click on the Add button and select the corresponding MAC address from the MAC-Address dropdown. In the IPV4-Address dropdown, enter the IP address for the ATA (likely in the format 191.168.1.x). In the Hostname field enter in ATA and in the Lease time field enter infinite. Next, press the “Save” button.

Then on the bottom of the DHCP and DNS page press the button for Save & Apply.

Set up Port Forwarding

Go to Network –> Firewall and the navigate to the Port Forwards tab. Press the button for Add. On the General Settings tab of the dialog, enter ata_webui into the Name field, TCP into the Protocol field, philtel_fw in the Source Zone field, 8080 in the External port field, lan in the Destination zone field, the IP address of the ATA (the same 192.168.1.x address from earlier) in the Internal IP address field, and 80 in the Internal port field. Then press the Save button.

Finally on the bottom of the Port Forwards page press the button for Save & Apply.

Now, from the VPN server you should be able to remotely access the ATA’s web interface through port 8080 on the internal WireGuard 10.11.12.x IP address if needed.