Enter the static local IP of the provider as the LAN IP address. For the ports, providers need to use three for their essential function, which default to 4282, 4283, and 4285 on TCP . To simplify setup, you can just forward the range 4282-4285 (meaning start port 4282 and end port 4285). Creating a separate rule for each port on its own will also work. No matter what, make sure the External and Internal ports match each other (i.e. the start port and end ports are the same for internal and external). If prompted to name the service, make a descriptive one such as “SCP Provider” if you can.