Do Site to site works to anyone?

sapeur3873 · 2020-11-21T06:18:40.966Z

in your configuration, if your ADSL provider give you a fixe adress, you need to use this one for the server, not the one with 4G/LTE.

if your adls don’t give you a fix ip, you need tu a reverse dns for can know your ip (or name) as soon as your are connected.

on your adsl modem, you need to open/route the port 51830 (if i remember) for the site to site .
the second one with the LTE 4G will be the client.

when you are using share ip (like for 4G, you can only be a client.

digimap · 2020-11-21T07:41:25.540Z

If the data I need to see (video intercom, bullets an so on) or to have access are in the client, could I have access from the server one? When site to site network is established, the server and the client have the same value or privilege?
If so, I have to ask the adsl/fttc ISP for go out of the NAT and have a direct IP address. Actually Ivm behind a NAT but I have a chance to obtain a public IP.
This, only if the answer to the two first questions is yes.

sapeur3873 · 2020-11-21T10:53:46.782Z

yes, as soon as the site to site configuration is done, you can acces on both side.

from client, you can access to the server lan
from server lan you can access to the client lan.

if the nat, provide all the time the public ip, normally you need only to route the port to your router!

digimap · 2020-11-21T14:00:58.299Z

I’ll try to do it!

digimap · 2020-11-25T20:36:26.617Z

Now my ISP assigned me a public stati IP, but unfortunately now I’m in the middle of the ford. On one side the static public IP is much more exposed to intrusions and, on the other side, the site to site network between the two Mangos does’nt work. I opened ports everywhere was possible, the main router, the Mango under the main router, the Mango with 4G modem on remote site.

sapeur3873 · 2020-11-27T11:10:31.996Z

you need only to open one port on your main router that’s all
open or redirect is better

could you do a schematic about your connection?

digimap · 2020-11-27T16:52:31.660Z

Sure:
a) Fastgate Technicolor as main modem-router at home, 51830 port forwarded to the IP assigned to the Mango ( IE 192.168.1.xxx). It now has a public static IP.
b) Mango at home with a cable ( ethernet fom main router) in the Wan port ( it generates a network 192.168.8.X) . Port 51830 opened here too. The Wan port is setted as Wan not Lan.If I set as Lan, this Mango can’t be seen on Cloud nor has access to internet.
c) Mango remote with a LTE/4G functioning with an internet access, port 51830 opened…
On the Gl.inet Goodcloud I see both Mangos, but when I try to create the site to site network, it appears that none of the devices can function as a server.

Leo · 2020-11-30T01:20:48.353Z

How do you make sure the Fastgate Technicolor has a static public IP?

digimap · 2020-11-30T09:34:47.215Z

The IP seen by “outside” matches the IP of the devices
The IP starts with number 2. that’s commonly known as public with this ISP
The IPs decribed on point 1 are always the same (statics)
The check of the netname has changed and now is like decribed for all customers own a public static IP.

On the other hand I’m working to be absolutely sure that there isn’t a bug in the device and the portmapping is really working as it should.

digimap · 2020-11-30T12:39:23.676Z

Wow, now the site to site network started.
But how can I see the devices connected to the remote Gl.inet ? The LAN Ip of the remote Mango (is now 192.168.176.X ) has been changed automatically, probably to not create conflicts with the Mango near to me (usual IP). The problem is that all the devices connected to the remote mango are setted on the LAN 192.168.8.XX.

Leo · 2020-11-30T13:02:36.430Z

Just access 192.168.8.1 on your browser when your computer connected to Mango(192.168.176.1).

digimap · 2020-11-30T14:03:27.075Z

How can I connect my PC to the remote Node1 Mango (192.168.176.1), since I’m under the Main Node LAN at home ?

digimap · 2020-11-30T14:30:50.585Z

One step over. Now I’m on the menu page of the remote Mango, but how can reach the devices there connected, IE CAM, videointercom etc. ? I see it remotely (Mango admin router pages) but how can I browse in that LAN? How finally can I connect a device, PC or smartphone, to that LAN ? I read many times the docs but sorry they seem written for people that already know what to do.

sapeur3873 · 2020-11-30T21:59:20.438Z

i don’t know how to help you.

site to site with goodcloud works pretty well.
more difficult is site to site without goodcloud.

i don’t know how i can help you.
it should work

digimap · 2020-11-30T23:05:47.357Z

Absolutely I’m grateful for your help. But I have in mind that this site to site network is not really nice like someone thinks. Probably in the future, not now. No docs, no complete instructions, no pics that show if it really works and how. I’m still skeptic about.

Johnex · 2020-11-30T23:14:43.055Z

Leo already sent you a link to the documentation. There are multiple examples, images showing how to do everything. Did you read it?

docs.gl-inet.com

Cloud - GL.iNet Docs

Documentation for GL.iNet Productions

You can also see this:

gl-inet.com – 24 Jun 19

Site-to-Site Network

A secure remote access to your local busniess network.

In the background it uses wireguard, doing it’s magic to link everything up for you. You can replicate it using wireguard, but if you have issues following the step by step guides, manual installation will take a lot of time and trial and error for you.

Leo · 2020-12-01T02:00:03.324Z

How do you normally access the camera?
And could you please draw a diagram of network topology?
You can use this tool Network Diagram Maker | Draw Network Diagram Online | Creately

digimap · 2020-12-01T04:54:35.421Z

Meantime I study the tool you suggested me and hopening there is a board there that eventually help me to use it, I try to answer to your first question about my very simply (or stupid) question.
I am seated in the MAIN NODE and the address of this node is 192.168.8.1.
The NODE 1 that’s remote has the same address by default ( 192.168.8.1) and in that LAN (repeat, remote) there are obviously devices like Cam (I. E. 192.168.8.100).
I successfully created a site to site network between the Main Node (where I am) and the remote Node 1. I see solid lines between the two nodes.
Unfortunately, or inexpectedly, the Node 1 I see has not the original IP assigned by me (192.168.8.1) but another IP assigned automatically during the process that create S2S network (192.168.176 not sure exactly now).
Until here is OK, perhaps.
I’m still seated in Main Node and connected to it I can type the remote address (192.168.176. X) and enter to the admin pages of the remote Node 1. Great but useless.
When I stay (phisically) in the remote node I can of course browse freely in that Lan, typing original addresses assigned by me in that Lan (192.168.8.100 for example) and see Webcam or video intercom. I see the images, not only the Lan address.

digimap · 2020-12-01T07:07:25.426Z

Yes, I read all docs available on link Cloud - GL.iNet Docs, also reading what in the link Site-to-Site Network - GL.iNet you suggested, I see a good composition of advertising that appears the sign of more time spent to encourage to buy rather than to understand.
I spent a lot of time try to understand the hidden message that could be in those few words that should explain how to use the S2S once created:

### Testing the Site to Site connection

Now the Site to Site network is created and started, let’s test the connection.

Use your PC or Phone to connect to one of the Node of this Site to Site, and use browser to access another Node’s LAN ip, if you see the login page, the connection between these two nodes is worked.

For example, my PC connect to Node 1 device, and then I use browser to access Main Node’s LAN IP (192.168.48.1), if I see the login page, it means the connection between Node1 and Main Node is worked.

But whoever wrote, it was unable to explain anything

digimap · 2020-12-01T08:56:27.357Z

For example, a possible hidden message could be:
You have to phisically go (or someone for you) to the remote Node and reset all IPs assigned to the LAN devices/servers since if you leave the default IP setting ( 192.168.8.X) it conflicts with another node (main or client) that eventually has the same default range IP.
Don’t know if this is a possibility. Is only a possible consequence of constipated instructions addressed to who don’t need them.