Question

Hello,

i have a RUT240 with a "1nce" SIM Card inserted. I can reach the device through the 1nce-OpenVPN connection.

How can I reach a device with a static IP in the Routers LAN over OpenVPN? Do I need to set a Port Forward rule?

Thank you!

Answer 1

Hello,

  

There are a few options for reaching the LAN devices via the OpenVPN connection:

• Configure the TLS client on the OpenVPN server:
  • If your OpenVPN client is configured as a TLS client on the server, you can push the routes to the client, and the server will be able to reach the LAN network of the device.
  • This way there won't be a need to set up port forwarding, and you can interact with the devices directly;
  • More information on how this can be achieved can be found here;
• Setup the port forwarding:
  • This will be an easier option. To achieve this, simply navigate to Network → Firewall → Port Forwarding and create a new rule, where the source zone is OpenVPN, and the destination zone is the LAN. Destination IP is the IP of the device that you'd like to reach. This way, to reach the device you'll need to use the virtual tunnel IP of your RUT240.

Hope this helped! Let me know if any additional information is needed!

  

Best regards,
DaumantasG 

Comments

Hello,

  

This means that you are either using UDP to reach your device or the wrong port number.

"Any" protocol passes all of the incoming traffic to the specified device, as "Any" includes protocols like ICMP, which do not use port numbers.

Try changing the rule to TCP+UDP, if this does not work, then the wrong port is used. I would recommend trying 443, which is a standard port for HTTPS.

  

Best regards,
DaumantasG

---

As external or internal address?

---

The internal IP address is the address of the LAN device, external IP should be left empty.

Create two rules, one with external port 8080, and internal 80.

Another with external port 8443, and internal 443.

Leave protocol as TCP+UDP;

Source zone: WAN;

External IP address: Any;

Then try connecting using the WAN IP and port number. An example could look like this:

10.250.20.52:8080 or 10.250.20.52:8443.

Make sure you are connecting from a PC that is not physically connected to the RUT240, but it is connected to the carrier VPN.

---

Now it's working! Thank you very much!

---

Glad I could help!

Answer 2

Hello,
If you want to access a certain service of a computer in the RUT240 LAN network via OpenVPN, a port forwarding must be set up.

Network → Firewall → Port Forwarding

Here is an example for HTTP on computer 192.168.1.101.

Then set the source zone to OpenVPN.

Now you can reach the service via http/VPN-IP:81.

Comments

I did it like that, but i'm always redirected to the Routers WebUI

Answer 3

Have you adjusted the Internal IP address, External port and Internal port to your network?
And then called up e.g. via http://192.168.1.101:81?

Answer 4

Can you set VPN as the source zone?