Port forwarding with a complicated home setup

[Diwedd]

Hi there,

I need advice/help with port forwarding, but I have a complicated setup. I have no knowledge/experience about ports, opening ports, forwarding ports, and/or changing firewalls, so I would appreciate very clear instructions/suggestions.

It is worth noting that the setup was done by an IT guy about four years ago, but he no longer lives in SA and I am unable to get hold of him.

My Setup
I live in a rural community. Internet here is provided via wireless internet i.e. internet beamed from a tower directly through the air into my home, which connects to my Wi-Fi network through a small Mikrotik radio antenna [Groove 52 (International)] that is attached to your roof.

In addition to the Mikrotik radio antenna, I have a Mikrotik router connected to the radio antenna with a cable (I think). I also have two Tenda routers acting as extenders/repeaters in other parts of the property.

My primary connection to the internet is via Wi-Fi from the first Tenda extender/repeater (by my workspace).

This image shows the various bits of hardware:

This is a crude illustration of the setup:



The second Tenda router/extender doesn't come into play since I never connect to it and is in a completely different part of the property.

So with all this, where do I begin?
I have done some searching and as far as I can tell there are 6 IP addresses linked to my network:

1) 192.168.X.X = I believe this is my Default Gateway, and frustratingly I am unable to login into this router. Also, I don't actually know where this router can be found (physically). Could this be the antenna? Because I don't know what this is, or where it is, I can't look at it to see if their is a password on it in order for me to login to the web interface.

2) 192.168.X.XXX = This is the Mikrotik router in the image above. It is in bridge mode (though I may be wrong). I am able to login to it, but I don't know if I can use it for port forwarding. This is the one linked to the antenna.

3) 192.168.X.XXX = This is the Tenda router [extender 1]. It is also in bridge mode.

4) 192.168.X.XXX = This is the second Tenda router (also in bridge more).

5) 192.168.X.XXX = This IP address is listed, but when I enter it into my browser, I get a message stating "unable to connect"

6) 192.168.X.XXX = The last one is for my printer.


So, if I want to open ports or forward ports, which IP should I be looking at is it the Default Gateway, and if so, which device is it?

Once I know which device/IP to use, I will need instructions on how to actually forward ports/open ports.

Any advice/help will be appreciated.

Many thanks.

 

[dadecoza]

Do you know if your WISP supplied you with a public IP? Many don’t.

Do you have admin access to the two Mikrotik routers?

Why do you want to portforward?

 

[neoprema]

I have a feeling you’re on a flat network provided by the WIFI provider - so your Mikrotik is not actually a gateway to the internet, it’s just putting you on flat network everything is on and providing the WiFi link - basically acting as a switch connecting you and the tower. That is probably the reason you can’t login to the gateway IP, it’s actually further down the network on the “tower” infrastructure?

 

[swakop_toe]

Get hold of the wifi internet provider.
They should have techs that can analyse the setup and do whatever it is you want to achieve.

Your setup smacks of a typical Herotel configuration to provide wifi access to different points on a property.
The various routers in bridged mode is the high points to create the links for the other AP's to your home, which act as the main link to the tower.

 

[thehuman]

A traceroute could give some info of network
Try tracert 8.8.8.8
In command prompt

 

[Chris-vdWest]

Like swakop_toe said, your provider should be able to provide you the information. The question is, is the Mikrotic router supposed to be managed by you? If so, if they don't know the password you can factory reset it and at least they should provide you the WAN settings you need to connect back to the internet again. Be prepared for a disruption of your internet!

Alternatively, are you still in contact with your friend? Does he have the passwords? You can run TeamViewer or AnyDesk on your PC/Laptop to allow him to remotely work or show you.

 

[Diwedd]

Thank you all for the replies. As I thought, this is not going to be easy or straightforward. At the moment I am not any clearer on what to do or how to do it.

dadecoza: I don't know if I have a public IP. I have login details for the one Mikrotik router. As mentioned, I don't know the login details for the Default Gateway login, which I assume is linked to a Mikrotik router (RouterOS v6.36.2)that I am unable to find. It might be that it is connected to the antenna, os as neoprea stated, it is actually not a gateway.

neoprema: I don't know what is meant by 'flat network', but I have a feeling too that the Default Gateway is something I cn't login because it isn't on my property, unless it has something to do with the antenna.

swakop_toe: I will try to see if they can help, but I am not holding my breath.

thehuman: Could you give me some instuctions on how to do this in CMD? I did a search and what I found did help me?

Chris-vdWest: I suspect the unknown Mikrotik router (Default Gateway) is probably not something I can manage. If that is the case, and if forwarding ports is only possible through the default gateway, then I don't think there is any way I can do it. I am unable to get hold of the guy that did the installtion because we are no longer in touch.

 

[irBosOtter]

Why are you typing X's where your IP's should be??

Place all those IP's on here, and do a traceroute to the internet and paste that here as well.

 

[Diwedd]

irBosOtter: Thanks for your replay. I did two traceroutes:

Tracing route to howtogeek.com [151.101.130.217]
over a maximum of 30 hops:

1 3 ms 3 ms 3 ms 192.168.0.1
2 159 ms 76 ms 164 ms 10.12.113.129
3 45 ms 23 ms 7 ms 10.5.10.108
4 47 ms 17 ms 153 ms 10.12.128.50
5 46 ms 76 ms 28 ms 10.60.0.9
6 182 ms 60 ms 30 ms 213.172.129.22
7 * 80 ms * 213.172.129.49
8 12 ms 142 ms 29 ms 10.13.105.5
9 20 ms 59 ms 12 ms 10.102.244.105
10 150 ms 33 ms 11 ms TCPT-PE-02.AS328471.net [102.66.248.60]
11 233 ms 63 ms 44 ms 196-10-140-103.ixp.capetown [196.60.70.103]
12 126 ms 44 ms 129 ms 151.101.130.217

Trace complete.


Tracing route to thelabia.co.za [197.221.10.220]
over a maximum of 30 hops:

1 3 ms 3 ms 2 ms 192.168.0.1
2 117 ms 8 ms 23 ms 10.12.113.129
3 8 ms 27 ms 14 ms 10.5.10.108
4 24 ms 135 ms 29 ms 10.12.128.50
5 15 ms 8 ms 18 ms 10.60.0.9
6 27 ms 125 ms 55 ms 213.172.129.22
7 11 ms 43 ms * 213.172.129.49
8 59 ms 11 ms 15 ms 196.10.140.21
9 58 ms 194 ms 100 ms core-access-switch1-vlan1001.cpt.host-h.net [196.40.102.70]
10 13 ms 134 ms 67 ms dedi94.cpt4.host-h.net [197.221.10.220]

Trace complete.


I think the problem is with 192.168.0.1. It must be something further down the line that I can't access. It is my Defauflt Gateway, but I don't know where it is (physically) and do not have login details for it.