Question

hi

is it possible to make 2 lte routers communicate without statics public ip?

Answer 1

Hello,

  

There are a few ways how this can be achieved:

• Using RMS VPN Hub. This will also provide you with a way to monitor the devices.
• ZeroTier VPN does not require a public IP address on either end of the communication. Configuration example can be found here.
• OpenVPN clients, where the server is configured on a different device with a public IP.

These are the main options used to circumvent the lack of a public IP address. Let me know if any more information is needed!

  

Best regards,
DaumantasG

Comments

what if you want to pass 1 or 2 tcp video streams 2/4mb without latency and encrypted without breaking the bank?

thank you for your availability

best regards

p.s.

strangely the links don't work

the same thing for the firmware page

it happened after upgrading to w10..

---

Hello,

Here are the full links:

RMS VPN Hub: https://wiki.teltonika-networks.com/view/RMS_VPN_Hubs

ZeroTier: https://wiki.teltonika-networks.com/view/ZeroTier_One_VPN_configuration_RutOS

As for streaming the footage, as long as the LTE connection is fast enough, you should not have any issues. I personally tried streaming two 1440p streams (they did have some compression), and RUTX11 aggregating B20 and B3 did not face any issues and had some headroom left over.

Best regards,
DaumantasG

---

Hello

I have a rut240 which i could access via pptp

then i configured zerotier for a router to router connection

after testing the functionality by passing a video stream

when i try to access via pptp i get this error message:

The device is unreachable. Please check the connection and try again.

if I put a wrong password:

Invalid username and/or password! Please try again.

I can access the other device connected via LAN and it works correctly

I don't want to restart rut240 to avoid losing it completely

what can i do to solve the problem?

is there a command that can be inserted in the cli of the second router connected to the zerotier and interact with the first router or other solutions?

---

Hello,

  

Just to clarify, does the ZeroTier tunnel establish? Have you authenticated both devices via ZeroTier online portal?

If yes, have you added the necessary routes? They can be added to the same portal.

If you have successfully established the connection using ZeroTier, PPTP can be safely disabled.

  

Best regards,
DaumantasG

---

yes, I authenticated the devices and created the routes for the 2 routers to communicate (but pptp always active)

after seeing how it worked and everything worked perfectly I wanted to enter the router and disable zerotier but I can't enter it from pptp or using the router connected via zerotier to the other router

---

If you'd like to disable ZeroTier, you can delete the RUT240 from the ZeroTier portal, and it should cause the device to disconnect.

However, are you sure you'd like to keep using PPTP instead of ZeroTier? ZeroTier is much more secure, while PPTP is completely unencrypted.

  

Best regards,
DaumantasG

---

when I had everything configured in the router installed remotely, I could access it via both pptp and zerotier

after finishing the tests i can't access the remote device

even disabling the devices from the zerotier portal I still don't access the device in pptp

restoring the devices in the zerotier portal I can't even access the device

I can ping in all cases

pptp was used for quick testing but essential at the time

---

is it possible to get lan mac from a message and try to log in via rms?

---

Hello,

 

It sounds like you might have blocked yourself from accessing the device with the IP block feature.

Try sending the SMS 

[admin_password] ipunblock

Brackets [] are not needed.

If that does not help, you can create an SMS rule to gather the needed data. A very similar case was answered here. Instead of IMEI, you will need a MAC address and the Serial number.

For MAC address, replace the command admin01 uci set sms_utils.@rule[-1].message=Routerimei%ie; with

admin01 uci set sms_utils.@rule[-1].message=Routermac%lm;

And to get the serial create another rule with

admin01 uci set sms_utils.@rule[-1].message=Routerser%sn;

  

Best regards,
DaumantasG

---

thank you so much for all this help

unfortunately I realized that I had already used the 30 day period of the rms service and I cannot use it

regarding the ipblock I don't think I'm blocked, because I use one pc to access the device via zerotis and another pc (server) to access via pptp

I think the problem is the routing table present on the device state

in status > routes I noticed that on the local device where I tried to integrate zeroties, this routes table is flat of ip addresses

Is it possible that this table is locked?

Is it possible to reset it via sms without deleting the rest of the configuration including status > routes?

it's also weird that he doesn't reply me to the status message...

---

is it possible to create a rule to disable the zeroties via sms?

---

Hello,

  

Using UCI API, ZeroTier can be disabled using this command:

uci set zerotier.1.enabled='0'

So the full SMS would look like so:

[admin_password] uci set zerotier.1.enabled='0'

Best regards,
DaumantasG

---

Hi Daumantas

the "blocked" router has returned.

in the logs it reported ip block when i tried to login

unfortunately the messages I sent did not process them and therefore the ip_unblock command did not work

what could be the problem that it doesn't process messages?

i use the password and the correct command and in the logs i see my phone number and the command

for office proof, after configuring zerotier, what is the command to enable/disable pptp?

thanks always

---

Hello,

  

It's hard to say what could be the issue without having the logs and the configuration.

The CLI commands to disable PPTP would be 

uci set network.[instance_name].disabled='1'

uci commit network

/etc/init.d/pptpd restart

And if you were to use the SMS UCI interface, the message to send would be:

[admin_password] uci set network.[instance_name].disabled='1'

The rest of the commands should be handled by the router, but in case the instance does not go down, you may need to restart the router.

If you have the router on hand, please replicate the issue (send the commands that did not work), then navigate to System → Administration → Troubleshoot and generate a troubleshoot file. It can be sent to me via a private message.

  

Best regards,
DaumantasG

Answer 2

Hi,

Yes it is possible in 2 ways. By using Zerotier VPN and RMS VPN. Please refer to the links attached below.

Zerotier: https://wiki.teltonika-networks.com/view/ZeroTier_Configuration

RMS VPN: https://wiki.teltonika-networks.com/view/RMS_VPN_Hubs

Hope this helps.

Regards,

Janmiguel