Verizon LTE as ISP + Mikrotik.. can't ping WAN IP?

So right now until the WISP I work for extends coverage to my area, my only rural option is my astounding Verizon phone (35/15 w/ 50ms latency) tethered to a computer onto my network. At home I have the powerbox, 2 RB 450G’s (one as my backbone) a mAP, and some ubnt radio’s. Anyway, I want my buddy to help me with some progress on my Minecraft server this weekend but my WAN IP isn’t pingable from the outside. Does anyone know how to circumnavigate this?? I want him to be able to vpn to me and such but as of right now i cant be pinged.

Have look into default firewall filter rule, may some rule is dropping connection from outside.
Export your filter rule and pase here.
/Ip firewall filter export

Sent from my MI MAX using Tapatalk

Its an issue with verizon. I dropped all my firewall rules for the time being. Nobody on the outside cant ping my IP. I just need someone with some experience whos tethered their whole network to the internet off cellular data to figure out how I can have access to ports on my lan out to the internet around Verizon Wireless’s BS. (I’ve tried softether but can’t get it to work.)

I’ve used Verizon LTE for Internet access for several years. By design, Verizon’s LTE network is double-NAT’d. Your router will be assigned a non-routable IP address in the 70., 75., 100., etc. range. There is no way for you to ping your router from the WAN, and there is no way for you to open ports on your router and allow access to your LAN, because you have no access to Verizon’s equipment.

What you can do is establish a VPN from your LTE router to another server that is publicly accessible, then access your LAN through the public server. The VPN connection must be initiated from the LTE side. This works with OpenVPN, IPSEC, etc. So, you could establish a VPN connection to your buddy’s LAN and he could ping your machines.

You can supposedly pay Verizon a one-time $500 fee to assign you with a routable IP address, but this reportedly requires a business account. I never tried that, but I have used the VPN approach and it works fine.

I have everything tethered through a phone dedicated to internet.. lol but the rest of that makes sense.

It’s not clear whether you have your phone integrated with your network/router. You can buy an LTE router and add it to your Verizon phone plan. Some LTE routers can also connect to your phone’s WIFI and use that to provide WAN access to your entire network. (Cradlepoint routers do this.) In any case, with your phone tethered to a laptop you should be able to establish a VPN connection to a server on your buddy’s network. Everything I said about double-NAT still applies. It would seem you should be able to directly access your phone via IPV6, but I don’t believe Verizon allows that on their LTE network.

I need it tethered through the phone. With verizon’s unlimited plan, tablets, hotspots, etc are throttled after 10 GB of usage. With phones though, that rule doesn’t apply. So being so rural, I activated another phone onto my plan, and now i’ve done 70 GB off the 35/15 connection of my phones 4g with about 50 ms of latency. Its not bad considering I have no other options. But i will do as you said, thanks!! Once I initiate the vpn to the external vpn server, it’ll be able to see my whole network behind the double NAT, correct??

Your comment on the phone not being subject to the 10 GB usage limit is interesting. I thought tethering was subject to that limit also.

Whether devices can access the whole network over the VPN depends upon the type of VPN you use and the settings. I have setup an OpenVPN client behind double NAT to allow full access to both LANs from both sides of the tunnel, so it can be done. It can take some effort to setup and get the configuration right though. The default settings do not usually allow it.

I thought so too, but I called verizon up and got it clarified, and the 70 GB of unthrottled data is proof that it works! I have 3 roomates, and lots of pc’s and they all run flawless with only the aid of a couple simple queues. Thanks for the advice man!