AR150 and Huawei E3372

alzhao · 2019-05-19T04:54:22.288Z

The router does not work as bridge for modems and that is what the UI have showed.

andyh747 · 2019-05-19T21:01:19.987Z

@alzhao thanks for the reply. All understood but disappointing.

Is my only option then to use DMZ to the main gateway and have double NAT?

andyh747 · 2019-05-22T09:08:01.946Z

@alzhao @kyson-lok

OK have tried to setup DMZ but am still unable to access the VPN server on my USG. Currently the AR150 is setup with a static IP of 192.168.3.1 and it is currently providing a reserved IP to the USG of 192.168.3.242. I have enabled DMZ on the AR150 pointing to 192.168.3.242 but am still unable to connect through the the VPN on the USG.

How do I setup the AR150 to allow me to connect to the VPN on the USG?

alzhao · 2019-05-22T11:50:41.258Z

So you have vpn server in USG? You want to access it from Internet? If this is the case you need to make sure your carrier give you a public IP. But this is generally not the case.

andyh747 · 2019-05-22T14:49:09.957Z

That’s correct.

How do I know if the carrier has provided a public IP??? What other type of IP is usually provided?

alzhao · 2019-05-23T03:02:56.389Z

If you don’t know, then I think you can just forget about this. Carrier will not provide public IP if you don’t have a business agreement with them.

You’d better use some cloud platform to access your devices behind firewall. Sorry I don’t have ready solution for you now. But one is FRP. GitHub - fatedier/frp: A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

andyh747 · 2019-05-23T07:08:57.157Z

Ok thanks for that. Will look at other options.

andyh747 · 2019-05-24T06:54:34.005Z

OK I’ve now checked and I have a Public IP from my mobile provider.

So my inability to reach my USG is a problem with my config on the AR150 not due to CGNAT.

@alzhao can you advise what settings I need to ensure I can access the VPN on the USG connected to the AR150?

sfx2000 · 2019-05-25T04:09:47.422Z

Have you considered IPv6?

Just saying…

andyh747 · 2019-05-25T07:11:12.569Z

Sorry I’ve never used it and wouldn’t know where to even start.

All I need to know is how to connect through the USB modem and AR150 to the VPN I have running on the USG.

andyh747 · 2019-05-25T09:20:32.742Z

Here’s my setup at present:

Huawei E3372 (Public IP) to AR-150 (LAN IP 192.168.3.1) to Ubiquiti USG (LAN IP 192.168.1.1)

So I’m getting confused with the three devices and their respective IP address settings. Can anyone help with the correct settings so I can access the VPN on the USG from the WAN side?

Tether1011×345 30.8 KB

alzhao · 2019-05-27T15:17:57.267Z

Sorry I don’t still don’t think your carrier allows you to access back to the modem’s local network,

andyh747 · 2019-05-27T15:35:02.577Z

@alzhao

I can guarantee they do! Three in the UK do not use CGNAT and many people are using this service to connect back into their home routers using the public IP or DDNS. The public IP will allow direct access back into the home router. I’ve already proved this with a borrowed LTE router in Bridge mode.

All I need to know is what settings I need to set on the AR150 to allow connection back inside the LAN using the public IP I have.

The problem at the minute, as shown above, is that the USB modem isn’t passing the WAN IP address to the AR150. It’s getting the LAN IP address. When I tether the iPhone, the AR150 gets the WAN IP.

andyh747 · 2019-05-30T15:31:36.341Z

OK as nobody seemed able to solve this I ended up purchasing another LTE router which allowed bridge mode. As expected it worked perfectly and I have now access to my VPN running on the USG from outside the LAN i.e. the WAN side.

Contrary to what @alzhao posted above this does work as Three mobile network in the UK does NOT use CGNAT so provides a public IP address when you connect via their APN 3internet.

The GLiNet AR150 is, unfortunately, now redundant which is disappointing as apart from the problem of outside access it worked great.

alzhao · 2019-05-31T01:10:47.393Z

Glad to hear that. Can you post some screenshot etc so that I know your final settings?

andyh747 · 2019-05-31T08:24:57.956Z

What screenshots do you want when this is not running on the AR150? As I said above I had to buy another LTE router and am now not using the AR150 as you were unable to advise the correct settings to make external access work.

alzhao · 2019-05-31T10:07:54.208Z

I mean the screenshot of you “another LTE router”

andyh747 · 2019-05-31T12:42:40.909Z

OK here’s the screenshot from the connected LTE Modem/Router:

LTE%20Router1260×481 232 KB

alzhao · 2019-05-31T16:14:26.005Z

Can I know where did you set up bridge?

While you used a LTE router other than using E3372, set up is different.

andyh747 · 2019-05-31T16:36:21.560Z

The new LTE Router IS the bridge. It’s an Zyxel LTE7460 which takes the SIM card and the router is then placed in Bridge mode allowing the USG to take care of NAT, DHCP etc.

The E3372 is no longer needed as the Zyxel does everything.

The problem with the AR150 was it wasn’t taking the public IP address from the E3372 which it should do. It wasn’t bridging the connection between the E3372 and itself otherwise it would have obtained the public IP.