Do Site to site works to anyone?

sapeur3873 · 2020-11-20T17:56:25.647Z

for can work you need one fixe ip, for the server.
for all the other they can be via 4G or whatever.

i have the same thing.
and i buy one device for the server, and the other are client, and they can be with all ip address.
each client don 't need to open the port.

but if you don 't have a real ip fixe on the server, it can’t work.

for can do a site to site with 2 sim card ip, you need 3 device.

digimap · 2020-11-20T18:27:31.940Z

sapeur3873:

for can do a site to site with 2 sim card ip, you need 3 device

This is not exactly clear to me, but my configuration is:
a) 1 gl.inet Mango as server in a remote site/2nd house with a LTE/4G USB Key, where I need to check devices like bullets, video intercom, switches (IOT), energy consumption and so on.
b) 1 gl.inet Mango at home under a ADSL/FTTC modem_router.
This configuration could be reversed when I stay in my 2nd house.
Unfortunately the IP of the SIM card provider seems to be shared so I can’t create a site to site network between the two devices.

edit: I read something about OpenVPN that probably helps me to solve the problem. But I can’t understand what does it mean when they say that 2 connections are free. Two connection per day ? One connection betwen two devices per time ?

sapeur3873 · 2020-11-21T06:18:40.966Z

in your configuration, if your ADSL provider give you a fixe adress, you need to use this one for the server, not the one with 4G/LTE.

if your adls don’t give you a fix ip, you need tu a reverse dns for can know your ip (or name) as soon as your are connected.

on your adsl modem, you need to open/route the port 51830 (if i remember) for the site to site .
the second one with the LTE 4G will be the client.

when you are using share ip (like for 4G, you can only be a client.

digimap · 2020-11-21T07:41:25.540Z

If the data I need to see (video intercom, bullets an so on) or to have access are in the client, could I have access from the server one? When site to site network is established, the server and the client have the same value or privilege?
If so, I have to ask the adsl/fttc ISP for go out of the NAT and have a direct IP address. Actually Ivm behind a NAT but I have a chance to obtain a public IP.
This, only if the answer to the two first questions is yes.

sapeur3873 · 2020-11-21T10:53:46.782Z

yes, as soon as the site to site configuration is done, you can acces on both side.

from client, you can access to the server lan
from server lan you can access to the client lan.

if the nat, provide all the time the public ip, normally you need only to route the port to your router!

digimap · 2020-11-21T14:00:58.299Z

I’ll try to do it!

digimap · 2020-11-25T20:36:26.617Z

Now my ISP assigned me a public stati IP, but unfortunately now I’m in the middle of the ford. On one side the static public IP is much more exposed to intrusions and, on the other side, the site to site network between the two Mangos does’nt work. I opened ports everywhere was possible, the main router, the Mango under the main router, the Mango with 4G modem on remote site.

sapeur3873 · 2020-11-27T11:10:31.996Z

you need only to open one port on your main router that’s all
open or redirect is better

could you do a schematic about your connection?

digimap · 2020-11-27T16:52:31.660Z

Sure:
a) Fastgate Technicolor as main modem-router at home, 51830 port forwarded to the IP assigned to the Mango ( IE 192.168.1.xxx). It now has a public static IP.
b) Mango at home with a cable ( ethernet fom main router) in the Wan port ( it generates a network 192.168.8.X) . Port 51830 opened here too. The Wan port is setted as Wan not Lan.If I set as Lan, this Mango can’t be seen on Cloud nor has access to internet.
c) Mango remote with a LTE/4G functioning with an internet access, port 51830 opened…
On the Gl.inet Goodcloud I see both Mangos, but when I try to create the site to site network, it appears that none of the devices can function as a server.

Leo · 2020-11-30T01:20:48.353Z

How do you make sure the Fastgate Technicolor has a static public IP?

digimap · 2020-11-30T09:34:47.215Z

The IP seen by “outside” matches the IP of the devices
The IP starts with number 2. that’s commonly known as public with this ISP
The IPs decribed on point 1 are always the same (statics)
The check of the netname has changed and now is like decribed for all customers own a public static IP.

On the other hand I’m working to be absolutely sure that there isn’t a bug in the device and the portmapping is really working as it should.

digimap · 2020-11-30T12:39:23.676Z

Wow, now the site to site network started.
But how can I see the devices connected to the remote Gl.inet ? The LAN Ip of the remote Mango (is now 192.168.176.X ) has been changed automatically, probably to not create conflicts with the Mango near to me (usual IP). The problem is that all the devices connected to the remote mango are setted on the LAN 192.168.8.XX.

Leo · 2020-11-30T13:02:36.430Z

Just access 192.168.8.1 on your browser when your computer connected to Mango(192.168.176.1).

digimap · 2020-11-30T14:03:27.075Z

How can I connect my PC to the remote Node1 Mango (192.168.176.1), since I’m under the Main Node LAN at home ?

digimap · 2020-11-30T14:30:50.585Z

One step over. Now I’m on the menu page of the remote Mango, but how can reach the devices there connected, IE CAM, videointercom etc. ? I see it remotely (Mango admin router pages) but how can I browse in that LAN? How finally can I connect a device, PC or smartphone, to that LAN ? I read many times the docs but sorry they seem written for people that already know what to do.

sapeur3873 · 2020-11-30T21:59:20.438Z

i don’t know how to help you.

site to site with goodcloud works pretty well.
more difficult is site to site without goodcloud.

i don’t know how i can help you.
it should work

digimap · 2020-11-30T23:05:47.357Z

Absolutely I’m grateful for your help. But I have in mind that this site to site network is not really nice like someone thinks. Probably in the future, not now. No docs, no complete instructions, no pics that show if it really works and how. I’m still skeptic about.

Johnex · 2020-11-30T23:14:43.055Z

Leo already sent you a link to the documentation. There are multiple examples, images showing how to do everything. Did you read it?

docs.gl-inet.com

Cloud - GL.iNet Docs

Documentation for GL.iNet Productions

You can also see this:

gl-inet.com – 24 Jun 19

Site-to-Site Network

A secure remote access to your local busniess network.

In the background it uses wireguard, doing it’s magic to link everything up for you. You can replicate it using wireguard, but if you have issues following the step by step guides, manual installation will take a lot of time and trial and error for you.

Leo · 2020-12-01T02:00:03.324Z

How do you normally access the camera?
And could you please draw a diagram of network topology?
You can use this tool Network Diagram Maker | Draw Network Diagram Online | Creately

digimap · 2020-12-01T04:54:35.421Z

Meantime I study the tool you suggested me and hopening there is a board there that eventually help me to use it, I try to answer to your first question about my very simply (or stupid) question.
I am seated in the MAIN NODE and the address of this node is 192.168.8.1.
The NODE 1 that’s remote has the same address by default ( 192.168.8.1) and in that LAN (repeat, remote) there are obviously devices like Cam (I. E. 192.168.8.100).
I successfully created a site to site network between the Main Node (where I am) and the remote Node 1. I see solid lines between the two nodes.
Unfortunately, or inexpectedly, the Node 1 I see has not the original IP assigned by me (192.168.8.1) but another IP assigned automatically during the process that create S2S network (192.168.176 not sure exactly now).
Until here is OK, perhaps.
I’m still seated in Main Node and connected to it I can type the remote address (192.168.176. X) and enter to the admin pages of the remote Node 1. Great but useless.
When I stay (phisically) in the remote node I can of course browse freely in that Lan, typing original addresses assigned by me in that Lan (192.168.8.100 for example) and see Webcam or video intercom. I see the images, not only the Lan address.