Spitz GL-X3000 SSH via 5G

I have a GL-X3000 with a T-Mobile Business Basic Mobile Internet contract, with the fixed IP option activated. I thought that that should give me a public IPv4 address on the router, but I only see 192.0.0.2/27. When I nmap the public address, I don’t see any open ports, even though I’ve opened SSH on the WAN interface (verified with iptables -L). However, running nmap from the outside to the apparent public IP does not show the SSH port open.

T-Mobile says that using our fixed IP we should be able to connect to the router. How can I proceed here?

Which IP do you get when you surf to a website like ifconfig.co?
This one should be the one you need.

That’s what I tried, and I’m not getting through. The IP on the status screen shows 192.0.0.2/255.255.255.224, which is not the right one, that’s why I am confused.

I just realized that the IP is changing every couple of hours, so T-Mobile is not giving us a fixed IP. I will check with them and report back.

1 Like

They might give you a static WAN address behind CGNAT. Which is great for security (like „login only from xy“) but useless for port forwarding.

T-Mobile uses IPv6 only, however they use 464xlat to translate between IPv4 and IPv6, which allows IPv4 devices/services to still work. So, you won’t have a public facing IPV4 address.

That is true for their regular consumer offering, but on a Business contract, you can get a public IPv4 address (for an additional $3/month), and that will allow you to talk to your router from the outside. We’re still waiting for T-Mobile to configure that feature correctly, right now we don’t have service at all.

T-Mobile is still trying to get us set up with a fixed IP.

1 Like

Spent over an hour on the phone with T-Mobile without a resolution.

The router only ever shows “SIM card not registered”. Are there any more specific diagnostics like a log file? And I’ve seen references to different modem device modes, is that documented somewhere, and would that make any difference? I.e. DUN vs. QMI0?

Can you enter the following AT command to get relevant information?
AT+QENG=“servingcell”
AT+QENG=“neighbourcell”
AT+CGDCONT?

AT+QENG=“servingcell”
ERROR
AT+QENG=“neighbourcell”
ERROR
AT+CGDCONT?
+CGDCONT: 1,"IPV4V6","b2b.static","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,0
+CGDCONT: 2,"IPV4V6","ims","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,1
+CGDCONT: 3,"IPV4V6","sos","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,1,,,,,,,,,"",,,,1
+CGDCONT: 4,"IPV4V6","tmus","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,0
+CGDCONT: 5,"IPV4V6","h2g2","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,0
+CGDCONT: 6,"IPV4V6","pcweb.tmobile.com","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,0

OK

AT+QENG=“servingcell”
AT+QENG=“neighbourcell”
AT+CGDCONT?
AT+CGPADDR?
Double quotation marks are used in English mode
Don’t copy and paste double quotes

If I can, I will look at the problem through the goodcloud remote help, but you have to have other Internet access besides the modem
Technical Support via GoodCloud.tar (192 KB)

I have this working on a few routers. Once t-mobile enables the static ip you need to change the apn to b2b.static. all other cell settings can be left on defaults.
And yes, this does allow two way traffic, both inbound and outbound.

2 Likes
AT+QENG="servingcell"
+QENG: "servingcell","LIMSRV","LTE","FDD",310,410,C45A509,107,1025,2,4,4,D19,-107,-10,-78,14,0,-,18

OK
AT+QENG="neighbourcell"
OK

AT+CGDCONT?
+CGDCONT: 1,"IPV4V6","b2b.static","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,0
+CGDCONT: 2,"IPV4V6","ims","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,1
+CGDCONT: 3,"IPV4V6","sos","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,1,,,,,,,,,"",,,,1
+CGDCONT: 4,"IPV4V6","tmus","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,0
+CGDCONT: 5,"IPV4V6","h2g2","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,0
+CGDCONT: 6,"IPV4V6","pcweb.tmobile.com","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0,,,,,,,,,"",,,,0

OK
AT+CGPADDR?
ERROR

We were able to engage with T-Mobile on this, and from the engineers analysis, it looks like the modem/router is terminating the connection before it is ever established. I’ve attached the screenshots as we received them from him.





I’m also confused about the different modem firmware versions that are mentioned in various threads here. Is there a page with the GL.inet recommended version? The version numbers themselves are very confusing, as well…

RIght now, we’re running

# gl_modem AT AT+QGMR


RM520NGLAAR01A07M4G_01.201.01.201

OK

I’m a colleague of stb, helping work this issue. If you would like to access our router/modem via your Goodcloud remote help, I can facilitate that. I’ve downloaded the tar, what would you like me to do next?

Send me the mac address and password of the device
I will view this issue remotely
thank you

I'm so sorry for the delay, I didn't get a notification and am only seeing this now as I checked.

I will send the mac address and password, how do I send the mac address and password to you privately?

Meanwhile, I will set up the goodcloud as described in Cloud - GL.iNet Router Docs 3

I have sent you a private message, please check it