Need help configuring inbound access from the internet into my local LAN

S

shawndewet

Member
Joined
Apr 1, 2015
Messages
13
Reaction score
0
I have a Telkom LTE connection to the internet through a Huawei B315s-936 router.
It's internal IP Address is 10.0.0.1, with DHCP configured to start allocating addresses from 10.0.0.3
I can also ping this router's public IP Address from an external computer fine.

This router only has one device connected to it, a NETGEAR R6400 WiFi Router.

The Netgear's internet setup is configured as a static IP address 10.0.0.2, with it's gateway configured as 10.0.0.1
The Netgear's LAN setup is configured with internal IP Address 192.168.1.1 and has DHCP configured to start allocating addresses from 192.168.1.4

ALL other network devices in my home connect to this NETGEAR router, and have addresses in the 192.168.1 range.

Outgoing internet access work fine from all devices.

Now I have a service running on a server that I would like to access when I am away from home. This service is accessed locally via a web browser on local address 192.168.1.15:799

So what I have done is to configure the Virtual Server settings on the Huawei Router as follows:
[table="width: 500, class: grid"]
[tr]
[td]Name[/td]
[td]WAN Port[/td]
[td]LAN IP Address[/td]
[td]LAN Port[/td]
[td]Protocol[/td]
[td]Status[/td]
[/tr]
[tr]
[td]FreeNAS[/td]
[td]799[/td]
[td]10.0.0.2[/td]
[td]799[/td]
[td]TCP[/td]
[td]On[/td]
[/tr]
[/table]

On my Netgear Router I have configured Port Forwarding as follows:
[table="width: 500, class: grid"]
[tr]
[td]Service Name[/td]
[td]External Start Port[/td]
[td]Internal Start Port[/td]
[td]Internal IP Address[/td]
[/tr]
[tr]
[td]FreeNAS[/td]
[td]799[/td]
[td]799[/td]
[td]192.168.1.15[/td]
[/tr]
[/table]

Yet, when I point a web browser at http://[huawei router public ip addess]:799, the browser returns an Unable to Connect message (it's not a 404 not found response...it's just a no-response at all)

What I find interesting is that if I configure the Netgear Router's logging to log Port-Forwarding events, I can see the following entries that indicate that the router is receiving the requests:
[LAN access from remote] from [ip address of remote computer]:37238 to 192.168.1.15:799, Thursday, Sep 14,2017 08:08:06
[LAN access from remote] from [ip address of remote computer]:37237 to 192.168.1.15:799, Thursday, Sep 14,2017 08:08:06
[LAN access from remote] from [ip address of remote computer]:37433 to 192.168.1.15:799, Thursday, Sep 14,2017 08:05:40
[LAN access from remote] from [ip address of remote computer]:37432 to 192.168.1.15:799, Thursday, Sep 14,2017 08:05:40

Note the port of the FROM address is incrementing for some reason, but it does show that the destination of the request is the expected internal ip address and port.

Please help me understand what I am missing here to get this working?

Thanks,
--Shawn.
 
Does the 315 have a DMZ option? If yes, enter the "WAN" IP of the Netgear (10.0.0.2) in there and remove any port forwarding config on the Huawei as everything will then get forwarded to the Netgear in the DMZ.

Leave the port forwarding config on the Netgear as is and test.
 
Mal1ce said:
Does the 315 have a DMZ option? If yes, enter the "WAN" IP of the Netgear (10.0.0.2) in there and remove any port forwarding config on the Huawei as everything will then get forwarded to the Netgear in the DMZ.

Leave the port forwarding config on the Netgear as is and test.
Click to expand...

Thanks for the insight Mal1ce.
I have just tried that and the result is the same. The Netgear Router's log shows the incoming request as indicated in my original posting, but the requesting browser just receives no response at all.
 
Venomous said:
Dynamic dns could probably make it easier for you...
Click to expand...

Thanks Venomous...actually I do have dynamic dns configured on the Huawei router...I just figured that fact to be irrelevant to the problem, because the problem is being experienced even if I use the public IP address (instead of the no-ip host name for my router).
 
You did very well, everything should work. Your Web server do not respond to a random ports, it is also correct.

In order of significance:
Q1. Are you on Telkom Unlimited contract?
Q2. Do you connect WAN port on Netgear to the LAN #1-3 port on Huawei or LAN/WAN Port #4? Related: Did you configure LAN interface IP address on the Huawei manually or it had been auto assigned for some reason? If manually, did you configure 10.x.x.x LAN port on the management Web page? My version of firmware do not allow for defining Class A network on the DHCP settings page. Read my comments regarding Class A network with B315s in this thread (bottom of the first page): https://mybroadband.co.za/vb/showth...x-for-new-Huawei-HiLink-devices-(E5186-B315s)

To avoid bugs in firmware use 192.168.2.x subnet on the Huawei (default 192.168.8.x should work as well) and disable UPnP.
 
Last edited:
Answer to @sajunky's questions:
Q1. Are you on Telkom Unlimited contract? No not Unlimited...it's the SmartBroadband 100GB per month contract.

Q2. Do you use LAN #1-3 port on Huawei or LAN/WAN Port #4?
The cable runs from Huawei Port 1 to Netgear WAN port.

Related: Did you configure LAN interface IP address on the Huawei manually or it had been auto assigned for some reason?
The LAN IP address on Huawei was factory default 10.0.0.1 ( I manually edited the Netgear router to 10.0.0.2 to match)

To avoid bugs in firmware use 192.168.2.x subnet on the Huawei and disable UPnP:
UPnP was already disabled, but I changed the internet IP subnet between the Huawei and the Netgear from 10.0.0 to 192.168.2

Sadly the exact same problem remains...
The Netgear log shows the new incoming request:
[LAN access from remote] from [remote machine's public ip address]:37345 to 192.168.1.15:799, Thursday, Sep 14,2017 10:32:13
[LAN access from remote] from [remote machine's public ip address]:37344 to 192.168.1.15:799, Thursday, Sep 14,2017 10:32:13

but yet there is no response.

I'm starting to think the problem may be in this odd incrementing Port number that is different with every request in the log?
Any ideas why that is there and where it comes from?
 
Last edited:
My worries didn't confirm. Reset B315s to the factory defaults (10.0.0.1 is not a factory default) and start over, also resetting Netgear if possible. Assuming I am right, B315s will default to 192.168.8.1. Then set Netgear WAN interface to 192.168.8.2, netmask 255.255.255.0. Port forwarding (or DMZ) and default gateway as you did before with adustments to the IP changes.

You should correct one (possible) problem I missed before. Your Web server was on the IP 192.168.1.15 which is inside DHCP range. Did you make IP reservation on Netgear for this device? If you did, disregard.

[EDIT] On B315s LAN interface IP settings is in "WiFi Settings" -> "DHCP" section, not "Ethernet" section, it may be confusing.
 
Last edited:
sadness abounds.

A factory reset of Huawei did indeed result in IP subnet of 192.168.8 (not sure where I got the 10.0.0 from in my OP)
I changed the config of the Netgear router to 192.168.2.2, and configured the Huawei router DMZ to same address.

But alas, the same problem persists...

The Netgear log still shows the same incoming requests:
[LAN access from remote] from [public ip of requesting machine]:57562 to 192.168.1.15:799, Thursday, Sep 14,2017 12:33:11
[LAN access from remote] from [public ip of requesting machine]:57561 to 192.168.1.15:799, Thursday, Sep 14,2017 12:33:10

But no response is being returned.

Oh, and yes, 192.168.1.15 is configured as a reserved address on the Netgear router.
 
shawndewet said:
sadness abounds.

A factory reset of Huawei did indeed result in IP subnet of 192.168.8 (not sure where I got the 10.0.0 from in my OP)
I changed the config of the Netgear router to 192.168.2.2, and configured the Huawei router DMZ to same address.

But alas, the same problem persists...

The Netgear log still shows the same incoming requests:
[LAN access from remote] from [public ip of requesting machine]:57562 to 192.168.1.15:799, Thursday, Sep 14,2017 12:33:11
[LAN access from remote] from [public ip of requesting machine]:57561 to 192.168.1.15:799, Thursday, Sep 14,2017 12:33:10

But no response is being returned.

Oh, and yes, 192.168.1.15 is configured as a reserved address on the Netgear router.
Click to expand...
I suppose you meant 192.168.8.2, obviously.

Try prepaid SIM card with a small data bundle. If it works, then problem is on Telkom side. Do you have any limitations in your T&C for Internet serving similar to the unlimited contracts?
 
shawndewet said:
I'm starting to think the problem may be in this odd incrementing Port number that is different with every request in the log?
Any ideas why that is there and where it comes from?
Click to expand...

No that's how it works.

You can run this command to see what ports your windows PC will use to make outbound connections, the "from" port will always be different each time, that is normal.

netsh int ipv4 show dynamicport tcp

Your freenas has a gateway IP specified right?
 
Last edited:
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X