My router dial PPPoE with ethernet1 to ISP fiber converter.
Once pppoe established, interface has local address: 100.91.214.57 and remote address: 100.123.1.62.
The dynamic public ip: 183.80.67.230
My Lan ip: 192.168.100.0/24
Would need help for any setting so that I can see my router webconfig login when I use the public ip via internet.
The real reason is that I would need to configure VPN but the router is not “visible” when access from internet by public ip.
Once pppoe established, interface has local address: 100.91.214.57 and remote address: 100.123.1.62.
The dynamic public ip: 183.80.67.230
looks like you don’t have a public IP, the one you are using, is shared between a number of users on your ISP’s network. so when a VPN connection from the Internet reaches 183.80.67.230, it reaches your ISP’s router, which will not forward the traffic to your router and will reject the request or just drop it.
of course you can request ( and most likely to have to pay for) an public IP from your ISP, then it will be assigned to your pppoe connection.
RFC6598 defines 100.64.0.0/10 as prefix for Shared Address Space. If you get an address from this prefix you are very likely behind a provider based NAT. Same is true for addresses from RFC1918 prefixes (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16). Providers may also use public address for shared addressing.
You can test if you are behind a NAT by using websites like this http://ip.bieringer.de/cgn-test.html > (click the button “Test supported protocols” and then see what’s in the Status field) https://tools.ietf.org/html/rfc6598 https://tools.ietf.org/html/rfc1918
thank you for letting us know it’s working. Many poster won’t feedback on our suggestions which is a shame.
not important to vote a solution, it’s not like we would get paid for it
Is your device already operational? Do you have access to WAN/Internet?
Do you mean admin access to your device from WAN? (a very bad idea in respect to security)
Or do you rather mean port forwarding?
No my device is not optional yet. I have access to WAN/Internet definitely:)).
What I’VE done I set up firewall rule: Tcp, dst port…
As well as DDNS was enabled.
My task is to reach a device by remote in secure way.
I will share a picture with you in order to make it more clear. Take a look please.
My plan is to use a router as primary connectivity for Base Station (IoT solution ). Router will retrieve internet from SIM card which one is inserted in the device.
If you have any further question ask I will try to explain you.
Looking forward a response from you
Via the DDNS address you can connect to your WAN router.
Do you already know how you will connect? Using which application, protocol and port?
Normally, one should use VPN to access the LAN from WAN.
As said, you can also use port-forwarding if you want connect to a single service running in your LAN, like a ssh server etc.:
dst port 22 → forward to LAN-IP port 22
(of course you can also use some different port numbers)
I have no idea mutluit. Please, could you be so kind and do me a favour in choosing a secure method?
I have no idea where I should apply port forwarding and which one port I shall use.
It is still unclear what exactly you want: do you want to access your whole LAN from Internet?
Or do you want to access from Internet just a single service like a web-server, ftp-server, ssh-server etc. that is running inside your LAN?
Shall this access be for you only, or for your friends, or for anybody?
As first you should make a simple drawing of your LAN/WAN, and specify what services are running in your LAN, and what you want to achieve.
But, maybe there is some misconception, maybe you mean something very different than WAN-to-LAN access.
Please read my previous suggestion, in this very post!
before we get into the practical method of accessing the router, either by VPN or port-forwarding, do you have a public accessible IP address? It does not seems to be the case by the look of it.
from your post: 84.15.182.234, belongs to ISP:Bite Lietuva which is an wireless ISP.
please first speak to your ISP and establish this IP address is assigned to you, before continue.
indeed, the screen capture shows he is behind NAT and the last line gives the answer: “remote connection may not work”
looks like he’s got an private IP from the ISP, normal for mobile network.
No, “use-local-address” means to assign the local IP instead of the public IP to the DDNS record, ie. in DNS.
In that case the dns name can of course be used only in LAN, ie. behind the NAT border.
good to know. but in this case, even he assign local IP to DDNS record, he still won’t be able to access his wAP LTE remotely (from the internet)
the simple way to get this to work, is that you need to buy a public IP from the ISP
