Help Needed: Accessing TP-Link VR400 GUI Remotely in Bridge Mode

Hi everyone,

I’m having trouble accessing the GUI of my TP-Link VR400 router remotely. Here’s my setup:

  • MikroTik Router
  • Two Modem Routers in Bridge Mode:
    • TP-Link VR400
    • ZTE H188A

I’ve configured both modems in bridge mode and connected them to the MikroTik router, which hosts the PPPoE connection. My goal is to access the GUI of these modem routers remotely.

What I’ve Done:

I’ve set up the following NAT rules on the MikroTik router:

/ip firewall nat
add action=dst-nat chain=dstnat disabled=yes dst-address=<Public_IP_TP-Link> dst-port=8081 protocol=tcp to-addresses=192.168.0.1 to-ports=80
add action=dst-nat chain=dstnat dst-address=<Public_IP_ZTE> dst-port=6713 protocol=tcp to-addresses=192.168.1.1 to-ports=80

/ip firewall filter
add action=accept chain=forward disabled=yes dst-address=192.168.0.1 dst-port=8081 protocol=tcp
add action=accept chain=forward dst-address=192.168.1.1 dst-port=6713 protocol=tcp

Results:

  • ZTE Router: I can access the GUI remotely via Public_IP:6713.
  • TP-Link Router: When I try to access it via Public_IP:8081, I get a partially loaded page. If I try using HTTPS port 443, I get a “403 Forbidden” error.

Screenshots:

Troubleshooting Attempts:

  • Tried different methods and ports.
  • Searched online, which suggested enabling “Remote Management” on the TP-Link router, but this option isn’t available in bridge mode.
  • Set firewall rules to low on the TP-Link router to ensure it’s not blocking the connection.

Despite all this, I still can’t access the TP-Link router’s GUI remotely. Has anyone faced a similar issue with TP-Link routers and found a solution? Is there a way to achieve remote access to the GUI in bridge mode?

Any help or suggestions would be greatly appreciated. Thank you in advance!

/ip firewall mangle
add action=accept chain=prerouting comment="allow usage of default routing tab\
    le for traffic to ISP1 connected networks" dst-address=192.168.178.0/24 \
    in-interface=bridge
add action=accept chain=prerouting comment="allow usage of default routing tab\
    le for traffic to ISP2 connected networks" dst-address=192.168.0.0/24 \
    in-interface=bridge

so i add this rules to the mangle but still i can’t access GUI of tp-link Router:

add action=accept chain=prerouting comment="allow usage of default routing tab\
    le for traffic to ISP1 connected networks" dst-address=192.168.1.0/24 in-interface=\
    bridge1
add action=accept chain=prerouting comment="allow usage of default routing tab\
    le for traffic to ISP2 connected networks" dst-address=192.168.0.0/24 in-interface=\
    bridge1

https://help.mikrotik.com/docs/display/RKB/Port+forwarding

https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT

https://youtu.be/a_8AV6vIDYQ?si=RO59brORByN3fDmJ

Thanks alot for your help <3… i know already about Port Forwarding and the NAT and all of that and i tried so many things doesn’t work… it seems there something in Tp-Link router block the connection because the another router (ZTE) is working fine and i could connect to it remotely without any problem so i think it’s all about Tp-Link router… but anyway thanks for your help.

Maybe you can check/change settings on the TP-LINK, there should be some settings you can try fiddling with:
https://community.tp-link.com/en/home/forum/topic/277548

I.e. change the ports directly on the TP-LINK, instead of dstnatting, it is possible that there is an issue with port 80 on the VR400, even if it is a different case, see:
https://community.tp-link.com/en/home/forum/topic/111693

Thank you so much for your reply. Actually, I tried all of that, but unfortunately, nothing is working. I changed the ports and adjusted the firewall settings on the TP-Link router, but still nothing happened. It only works if I enable remote management, but this is not available in Bridge mode. I don’t know what else to do, so I will make a post on the TP-Link community. Maybe someone there can help me out… Thanks again bro for your help <3.

HTTP 403 Forbidden. it is the response of your TP-Link device. It just doesn’t allow access. Maybe because it is from remote.

Yeah it’s all from the TP-Link router and i’m trying to reach for a solution i did a post on Tp-Link Community so i hope to find a solution.

Still, while the 403 error is understandable (no or refused connection) the “partial” loading is “strange”, it would seem like the TP-LINK would send some data through a given port (that is correctly dstnatted and works) and some other data through another (unknown) port. :confused:

You’re totally right; it’s strange that the page partially loads. It does seem like the TP-Link router might be using multiple ports for the GUI, and some of these might not be properly forwarded or are being blocked.

I’m not entirely sure what TP-Link has done with their router’s configuration, but I’m looking into it to try and resolve this issue. I’m confident that my MikroTik router setup is correct because my other router (ZTE) works fine for remote access. So, it seems like the issue is with the TP-Link router specifically.

Thank you for pointing this out and for your reply!