Do Site to site works to anyone?

Technicavolous · 2020-11-19T15:16:32.338Z

I had a LOT of port related problems with Cell connections (your SIM card …)

“Port forwarding” can only work if you OWN the IP… if you are getting a dynamic IP from your LTE provider you are behind multiple layers of NAT and even though you set up your port forwarding correctly, it will most likely fail.

I went round n round with several LTE providers with the same results until I discovered the NAT issue. Even though you go to ‘canyouseeme.org’ or other similar sites and see ‘your’ IP, it’s not ‘really’ your IP … NAT wins.

Purchasing a static IP from your LTE provider is an option, but can be very expensive. Verizon wants a one time $500 fee, Sprint won’t do it at all, ATT has an application process which all my attempts have failed.

I finally found a reseller that has access to static IP’s for a reasonable charge and NOW IT WORKS PERFECTLY. By purchasing the static, it is still behind multiple NAT layers but they’ve done the programming to let you actually own the IP. If you would like one (they’re only authorized to sell accounts in the USA) message me and I’ll let you know how to sign up. (I do get a commission for the referral…)

There are several LTE prviders in the US that will assign a static IP. If you really want site to site on an LTE connection, it’s mandatory.

digimap · 2020-11-19T16:58:30.278Z

Thanks for your help. So until now it seems that:

the public IP I see from whoisip or the gl.inet cloud Is not a really only mine public IP of the SIM
to have access to my router gl.inet ( setted with a 4G/LTE modem ) from remote I need a VPN
Site to site network between two gl.inet devices does’nt work without a real public IP
One of the two gl.inet devices I’ve bought for a site to site network in this situation it’s useless

Leo · 2020-11-20T01:03:36.868Z

Yes, your conclusion is correct.
There is a service that can allow you to remote access the router without a public IP, it is under development.

Technicavolous · 2020-11-20T03:29:35.637Z

Look to TeamViewer for the model - the client makes a connection to a server and registers itself, thus opening the ports from inside. The server then can direct remote control to the open port on the client.

sapeur3873 · 2020-11-20T17:56:25.647Z

for can work you need one fixe ip, for the server.
for all the other they can be via 4G or whatever.

i have the same thing.
and i buy one device for the server, and the other are client, and they can be with all ip address.
each client don 't need to open the port.

but if you don 't have a real ip fixe on the server, it can’t work.

for can do a site to site with 2 sim card ip, you need 3 device.

digimap · 2020-11-20T18:27:31.940Z

sapeur3873:

for can do a site to site with 2 sim card ip, you need 3 device

This is not exactly clear to me, but my configuration is:
a) 1 gl.inet Mango as server in a remote site/2nd house with a LTE/4G USB Key, where I need to check devices like bullets, video intercom, switches (IOT), energy consumption and so on.
b) 1 gl.inet Mango at home under a ADSL/FTTC modem_router.
This configuration could be reversed when I stay in my 2nd house.
Unfortunately the IP of the SIM card provider seems to be shared so I can’t create a site to site network between the two devices.

edit: I read something about OpenVPN that probably helps me to solve the problem. But I can’t understand what does it mean when they say that 2 connections are free. Two connection per day ? One connection betwen two devices per time ?

sapeur3873 · 2020-11-21T06:18:40.966Z

in your configuration, if your ADSL provider give you a fixe adress, you need to use this one for the server, not the one with 4G/LTE.

if your adls don’t give you a fix ip, you need tu a reverse dns for can know your ip (or name) as soon as your are connected.

on your adsl modem, you need to open/route the port 51830 (if i remember) for the site to site .
the second one with the LTE 4G will be the client.

when you are using share ip (like for 4G, you can only be a client.

digimap · 2020-11-21T07:41:25.540Z

If the data I need to see (video intercom, bullets an so on) or to have access are in the client, could I have access from the server one? When site to site network is established, the server and the client have the same value or privilege?
If so, I have to ask the adsl/fttc ISP for go out of the NAT and have a direct IP address. Actually Ivm behind a NAT but I have a chance to obtain a public IP.
This, only if the answer to the two first questions is yes.

sapeur3873 · 2020-11-21T10:53:46.782Z

yes, as soon as the site to site configuration is done, you can acces on both side.

from client, you can access to the server lan
from server lan you can access to the client lan.

if the nat, provide all the time the public ip, normally you need only to route the port to your router!

digimap · 2020-11-21T14:00:58.299Z

I’ll try to do it!

digimap · 2020-11-25T20:36:26.617Z

Now my ISP assigned me a public stati IP, but unfortunately now I’m in the middle of the ford. On one side the static public IP is much more exposed to intrusions and, on the other side, the site to site network between the two Mangos does’nt work. I opened ports everywhere was possible, the main router, the Mango under the main router, the Mango with 4G modem on remote site.

sapeur3873 · 2020-11-27T11:10:31.996Z

you need only to open one port on your main router that’s all
open or redirect is better

could you do a schematic about your connection?

digimap · 2020-11-27T16:52:31.660Z

Sure:
a) Fastgate Technicolor as main modem-router at home, 51830 port forwarded to the IP assigned to the Mango ( IE 192.168.1.xxx). It now has a public static IP.
b) Mango at home with a cable ( ethernet fom main router) in the Wan port ( it generates a network 192.168.8.X) . Port 51830 opened here too. The Wan port is setted as Wan not Lan.If I set as Lan, this Mango can’t be seen on Cloud nor has access to internet.
c) Mango remote with a LTE/4G functioning with an internet access, port 51830 opened…
On the Gl.inet Goodcloud I see both Mangos, but when I try to create the site to site network, it appears that none of the devices can function as a server.

Leo · 2020-11-30T01:20:48.353Z

How do you make sure the Fastgate Technicolor has a static public IP?

digimap · 2020-11-30T09:34:47.215Z

The IP seen by “outside” matches the IP of the devices
The IP starts with number 2. that’s commonly known as public with this ISP
The IPs decribed on point 1 are always the same (statics)
The check of the netname has changed and now is like decribed for all customers own a public static IP.

On the other hand I’m working to be absolutely sure that there isn’t a bug in the device and the portmapping is really working as it should.

digimap · 2020-11-30T12:39:23.676Z

Wow, now the site to site network started.
But how can I see the devices connected to the remote Gl.inet ? The LAN Ip of the remote Mango (is now 192.168.176.X ) has been changed automatically, probably to not create conflicts with the Mango near to me (usual IP). The problem is that all the devices connected to the remote mango are setted on the LAN 192.168.8.XX.

Leo · 2020-11-30T13:02:36.430Z

Just access 192.168.8.1 on your browser when your computer connected to Mango(192.168.176.1).

digimap · 2020-11-30T14:03:27.075Z

How can I connect my PC to the remote Node1 Mango (192.168.176.1), since I’m under the Main Node LAN at home ?

digimap · 2020-11-30T14:30:50.585Z

One step over. Now I’m on the menu page of the remote Mango, but how can reach the devices there connected, IE CAM, videointercom etc. ? I see it remotely (Mango admin router pages) but how can I browse in that LAN? How finally can I connect a device, PC or smartphone, to that LAN ? I read many times the docs but sorry they seem written for people that already know what to do.

sapeur3873 · 2020-11-30T21:59:20.438Z

i don’t know how to help you.

site to site with goodcloud works pretty well.
more difficult is site to site without goodcloud.

i don’t know how i can help you.
it should work