The Huawei B593 LTE discussion thread

[Awesum]

I'm also having a challenge getting port forwarding working on this router.
My old adsl Buffalo router had port forwarding set up and working perfectly. I have set the B593 to DMZ and let the old router manage all the networking, but i cannot access the forwarded port from outside my network. I haven't changed any settings on the adsl router.

What am i doing wrong?

 

[sajunky]

I am glad it helped little bit.

I'm also having a challenge getting port forwarding working on this router.
My old adsl Buffalo router had port forwarding set up and working perfectly. I have set the B593 to DMZ and let the old router manage all the networking, but i cannot access the forwarded port from outside my network. I haven't changed any settings on the adsl router.

What am i doing wrong?

If you can access Internet from LAN, read message from kianm on the previous page.

 

[Awesum]

I am glad it helped little bit.

If you can access Internet from LAN, read message from kianm on the previous page.

I can access from my LAN but I cant find Kianm's settings in my router.

 

[kianm]

I can access from my LAN but I cant find Kianm's settings in my router.

In the other case the firewall on the ADSL router was interfering with incoming connections. I haven't used your router before but you should be able to check under your firewall settings and ensure you are allowing incoming connections and that there is no universal firewall setting somewhere that overides your permit rules. If possible you could post a screeenshot of your FWall settings, or model # of the ADSL router

 

[Awesum]

The router is a Buffalo Airstation WZR-HP-G300NH

 

[kianm]

The Firewall settings look fine as far as i can see, can you please post your NAT screenshot on the Buffalo and the Firewall & DMZ settings on the B593 so we can see your IP assignments & the ports you are trying to forward

 

[Awesum]

The Firewall settings look fine as far as i can see, can you please post your NAT screenshot on the Buffalo and the Firewall & DMZ settings on the B593 so we can see your IP assignments & the ports you are trying to forward

 

[Awesum]

 

[kianm]

Looks like the Buffalo router has a few extra options that normally aren't there on other consumer routers so we will work through and get it right. Ok so the below quick sketch is how i understand you have things setup. I'm going to give a number of things to try, though it would have been easier to check whilst sitting on the router itself as one might find it's just a small hidden setting somewhere. So here is goes



Before we try change a lot other settings it would help if we can see your access restrictions settings. One other important setting to check is on the Buffalo is there any device configured in the DMZ? If so that could potentially affect the specific port forwards. ( see page 15 http://cdn.cloudfiles.mosso.com/c85091/WZR-HP-G300NH_dd-wrt_User_Manual.pdf)

As someone who hasn't used the Buffalo before i stand to be corrected as i will guide you using my knowledge and reference to your model's manual, so let's go ahead and tweak a few settings and check our routing as routing could potentially affect both outbound and inbound traffic, inbound being where we are having issues. We will then check & test the port forwards from there....So you can also try the below steps & checks:

- I saw the Buffalo router has a switch at the back which determines the router mode, if it's on auto i'd advise you to move it to "ON" to ensure it stays in ROUTER mode.

- From your screenshots above i saw you have the WAN port of the Buffalo set to DHCP, I'd also advise you to set it to static 192.168.1.3 25.255.255.0 and gateway 192.168.1.1, and also change the DHCP range in the B593 (seeing it is enabled) to start at say 192.168.1.10 to ensure 192.168.1.3 never gets allocated to any other device as this would break our port forward rules. Another option is to disable DHCP on the B593 if you are 100% sure you won't need to connect any devices to it directly bypassing the Buffalo.

- Under WAN setup -> Advanced Routing can you change operation mode to ROUTER and let us know if there are further settings that appear with that option.

- Do you have any entries under WAN setup -> Static Routing. Can you post a screenshot of your routing table.

- On the Buffalo's LAN settings, can you put in gateway address of 192.168.11.1 (though normally on a router you wouldn't need to put in gateway addresses as routers use routing tables to find the entry for route to 0.0.0.0 0.0.0.0 then route the packets accordingly.

Once we have the above adjustments, we will cross check the port forward/Firewall rules and ensure all is in place.

- I see you have chosen to use port range forwarding instead of just port forward so you could try use one entry for the rule with start port 10000 and end port 10001.
- Ensure your internal device's IP 192.168.11.65 is either reserved in the Buffalo's DHCP or make it static. ( Can you reach that device from the internal network on those ports, and can the device reach the internet? )

Edit: Added ref to manual

 

[Awesum]

Looks like the Buffalo router has a few extra options that normally aren't there on other consumer routers so we will work through and get it right. Ok so the below quick sketch is how i understand you have things setup. I'm going to give a number of things to try, though it would have been easier to check whilst sitting on the router itself as one might find it's just a small hidden setting somewhere. So here is goes

Before we try change a lot other settings it would help if we can see your access restrictions settings. One other important setting to check is on the Buffalo is there any device configured in the DMZ? If so that could potentially affect the specific port forwards. ( see page 15 http://cdn.cloudfiles.mosso.com/c85091/WZR-HP-G300NH_dd-wrt_User_Manual.pdf)

As someone who hasn't used the Buffalo before i stand to be corrected as i will guide you using my knowledge and reference to your model's manual, so let's go ahead and tweak a few settings and check our routing as routing could potentially affect both outbound and inbound traffic, inbound being where we are having issues. We will then check & test the port forwards from there....So you can also try the below steps & checks:

- I saw the Buffalo router has a switch at the back which determines the router mode, if it's on auto i'd advise you to move it to "ON" to ensure it stays in ROUTER mode.

- From your screenshots above i saw you have the WAN port of the Buffalo set to DHCP, I'd also advise you to set it to static 192.168.1.3 25.255.255.0 and gateway 192.168.1.1, and also change the DHCP range in the B593 (seeing it is enabled) to start at say 192.168.1.10 to ensure 192.168.1.3 never gets allocated to any other device as this would break our port forward rules. Another option is to disable DHCP on the B593 if you are 100% sure you won't need to connect any devices to it directly bypassing the Buffalo.

- Under WAN setup -> Advanced Routing can you change operation mode to ROUTER and let us know if there are further settings that appear with that option.

- Do you have any entries under WAN setup -> Static Routing. Can you post a screenshot of your routing table.

- On the Buffalo's LAN settings, can you put in gateway address of 192.168.11.1 (though normally on a router you wouldn't need to put in gateway addresses as routers use routing tables to find the entry for route to 0.0.0.0 0.0.0.0 then route the packets accordingly.

Once we have the above adjustments, we will cross check the port forward/Firewall rules and ensure all is in place.

- I see you have chosen to use port range forwarding instead of just port forward so you could try use one entry for the rule with start port 10000 and end port 10001.
- Ensure your internal device's IP 192.168.11.65 is either reserved in the Buffalo's DHCP or make it static. ( Can you reach that device from the internal network on those ports, and can the device reach the internet? )

Edit: Added ref to manual

Wow.
You are Awesome!

I really appreciate the help. Do you have an adsl line?

 

[kianm]

Wow.
You are Awesome!

I really appreciate the help. Do you have an adsl line?

And you are Awesum

Yes i have an ADSL line but my LTE conncection outperforms it by miles, but i need it for bulk downloads. Still waiting for my uncapped LTE application hopefully it goes through.....sigh

 

[Awesum]

DMZ on the Buffalo is disabled. This is the access restrictions page.


Advanced routing screen



I can access the devices IP is static, I can reach it from my internal network and it can access the internet.

 

[Awesum]

And you are Awesum

Yes i have an ADSL line but my LTE conncection outperforms it by miles, but i need it for bulk downloads. Still waiting for my uncapped LTE application hopefully it goes through.....sigh

I have 475GB of Vox Fatpipe data and uncapped bolt on (6pm to 6am) that expires on 01/12.
Its yours if your want it.

 

[kianm]

Hi Awesum,

I usually keep my primary connection as ADSL but i temporarily changed to my B593 to do a quick port forward to test your scenario. My method involves the B593 & a TP LINK MR3420 and i'm port forwarding my Plex server 32400 so i can access it from outside. The same principles apply to your router as well and this works just fine for me. So in place of my TP-LINK try the same on your Buffalo

My subnets are: B593 LAN 192.168.1.0/24 , B593's LAN IP 192.168.1.5
: TP-LINK LAN 192.168.0.0/24 , TP-LINK's LAN IP 192.168.01 , TP-LINK's WAN IP 192.168.1.50 (connected to B593's LAN port)
: Plex server LAN IP 192.168.0.30

--I reserved the TP-LINK's WAN IP in the B593's DHCP so it remains 192.168.1.50
--So instead of using the DMZ trick on the B593, i did standard/normal port forward in the B598 to forward 32400 to TPLINK WAN IP 192.168.1.50 ~~~~ 32400-->192.168.1.50
--In the TP Link i did a port forward 32400 to Plex server LAN IP 192.168.0.30~~~~~~~~~32400-->192.168.0.30


Result: My Plex server is fully accessible from the internet. See snapshots below

 

[kianm]

My TP LINK's firewall settings:



TP LINK's WAN status

 

[kianm]

Just to note this setup which doesn't involve using the B593's DMZ still allows the old ADSL router to handle the rest of the network management and one would still be able to use custom DNS like unotelly and the likes, local clients speak to the old router for addressing etc & the old router just forwards all internet traffic to whatever is on the WAN port. Only thing is one would have to configure the port forwards at 2 places, but once you know how it doesn't take much effort. It's just another method one can try if the other one fails. Hopefully the B315 solves all these little problems.

 

[kianm]

I have 475GB of Vox Fatpipe data and uncapped bolt on (6pm to 6am) that expires on 01/12.
Its yours if your want it.

PM sent

 

[sajunky]

Just to note this setup which doesn't involve using the B593's DMZ still allows the old ADSL router to handle the rest of the network management and one would still be able to use custom DNS like unotelly and the likes, local clients speak to the old router for addressing etc & the old router just forwards all internet traffic to whatever is on the WAN port. Only thing is one would have to configure the port forwards at 2 places, but once you know how it doesn't take much effort. It's just another method one can try if the other one fails. Hopefully the B315 solves all these little problems.

Probably the main difference between DMZ and traditional port forwarding is that DMZ provide separation from the other users on the Huawei LAN segment. With port forwarding you might be able to add more functionality with added risk, I don't know it is worth.

B315s is not much different. Port forwarding is placed under Settings -> Security -> Virtual Server like in B683, I think. There are two modes of firewall: Cone and Symmetric. I didn't see any difference in available options when switching modes. There is one missing option which affects above instruction: you can't reserve IP address for specific device, you must configure such device with a static IP outside of Huawei DHCP range.

On the other note I would avoid configuring on Huawei port forwarding simultaneously with DMZ to the same IP address. It could trigger bugs in firmware. One could override the other.

I'd like to get clarification for:

I'm also having a challenge getting port forwarding working on this router.
My old adsl Buffalo router had port forwarding set up and working perfectly. I have set the B593 to DMZ and let the old router manage all the networking, but i cannot access the forwarded port from outside my network. I haven't changed any settings on the adsl router.

What am i doing wrong?

What do you mean "from outside my network"? From Internet or devices on the Huawei LAN segment?

 

[Awesum]

Just to note this setup which doesn't involve using the B593's DMZ still allows the old ADSL router to handle the rest of the network management and one would still be able to use custom DNS like unotelly and the likes, local clients speak to the old router for addressing etc & the old router just forwards all internet traffic to whatever is on the WAN port. Only thing is one would have to configure the port forwards at 2 places, but once you know how it doesn't take much effort. It's just another method one can try if the other one fails. Hopefully the B315 solves all these little problems.

Thanks again Kianm. I haven't had time to test this out yet.
Will try tomorrow.

 

[Awesum]

I'd like to get clarification for:

What do you mean "from outside my network"? From Internet or devices on the Huawei LAN segment?

From the Internet.
It's for my Paradox alarm system.