Can't connect using SSH to my local server from external host and vice versa

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
12

Can't connect using SSH to my local server from external host and vice versa

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Can't connect using SSH to my local server from external host and vice versa
Can't connect using SSH to my local server from external host and vice versa
2021-07-09 22:44:32 - last edited 2021-08-07 09:12:57
Model: ER605 (TL-R605)  
Hardware Version: V1
Firmware Version: 1.0.1 Build 20210113 Rel.35074

When I tried to connect from some local host with my server everything works fine but when i try to do the same but with an external host it's impossible.

In this point, I can say that the server firewall and server pot is working good because I open the ports in the server an also I disconnet de server firewall.

Next, when I try to connect to my server with external host the ssh client tell me that the password authentication works but the conexion close fot timeout reasons or failed waiting for channel success

In the other way, when I try to connect to my external server (AWS instance) via SSH from my home, the SSH client cant connect and telling me "client_loop: send disconnect: Broken pipe"

But when I to connect to my external server (AWS instance) using my phone like a router, I can do it

 

I try disconnecting every protection in the router but it doesn't works 

I also open the ports in the port forwarding and works for http (port 80) but not for ssh, I try changing de default port (port 22) for other and it doesn't works, I try with DMZ and also doesn't works

 

I have the same problem when I use Cisco Webex videocall, it can't establish the connection and I have to use my phone like a router when i need to use Cisco Webex videocalls

 

I also try restarting all the default settings and updating the router with the last version but it still doesn't work

 

Someone have some idea why is this happen?

 

I really appreciate any answer.

 

Thank you very much for your time and have a nice day

 

  0      
  0      
#1
Options
1 Accepted Solution
Re:Can't connect using SSH to my local server from external host and vice versa-Solution
2021-08-03 20:57:51 - last edited 2021-08-07 09:12:57

@shberge Hi,

Yes, finally we can find the issue, I will explain the datails, I'm sorry for the delay in reply

It seems that the problem was caused for my ISP

I explain myself better, the packets coming out from my local network are marked by a code called DSCP that is kind of priority code in the packet management of QoS (Quality of service).

The thing is that my ISP are not allowing marked packet with DSCP > 0 and for that reason I had those problems

 

SOLUTION:

 

I installed the Omada controller in a virtual machine running Ubuntu (I found some tutorials on youtube on how to do this but in these days I will buy the Omada controller hardware instead) and then I went to: settings -> wired networks -> LAN and I adopted my router with the Omada controller, I had some problems adopting my router but after to do a factory reset to my router and configure my ip's in the same subnet, all went well.

 

Once his is done, I went to: settings -> wired networks -> Internet, and in the Advanced Settings I set "QoS Tag" as None. And since then, everything works fine.

 

I want to thank technical support for helping me find the problem and give me a solution.

 

You are the best!

 

I hope all of this can be help to anyone who has a similar problem.

 

Thank you very much again and have a nice day.

 

Best regards.

Recommended Solution
  0  
  0  
#14
Options
14 Reply
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-11 14:51:44

@LarryMerino 

 

It does not sound like a router problem, have you checked if you can use SSH from another network? see if you have an option for Layer 3 Accessibility, if L3 is not enabled on SSH device you can only connect to device on the same network as the device is connected.

  0  
  0  
#2
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-11 16:12:58

@shberge Thank you very much for your answer and let me show you more details

In this first picture you will see how I was trying to connect to server using the cable connection from the router and it was impossible

 

 

In this second picture you will see how I can connect to the server using the same command but in this case I'm using my phone internet connection instead my router connection 

 

 

And in this last photo, you will see how I was connected to my router again and again I cant connect to the using SSH

 

 

And this issue is happening with my others computers also so I assume that the problem it hs to do with the network generated from my router

 

Please tell me what I'm doing wrong or what can I do to solve this issue and thank you again for your answer

  0  
  0  
#3
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-11 17:03:38 - last edited 2021-07-11 17:10:27

@LarryMerino 

 

Do you have ER605 local or on remote site? 

If it on remote site where your SSH device is you have to create a NAT rule like this (remember to enable) if you don't use any type of VPN connections.

 

 

 

Im not sure how you connect. but it look like you connect with port nat to your device.

 

I have multiple ER605 and ER7206 and this is usually not a problem, 

 

Check ACL rule on router, that is the only thing that can block this if your device support L3 SSH Connection.

 

Have you tested to create a L2TP or PPTP VPN?

 

If nothing of this help you have to contact TP-LINK. there is a lot of bugs on this router but this is new to me, the most of bug is when router is controller managed not in stand alone.

 

 

 

 

  0  
  0  
#4
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-11 17:14:09 - last edited 2021-07-11 17:16:02

@LarryMerino 

 

You can also try to upgrade to a new software. I use software in this link, this is beta but work quiet well.

 

https://community.tp-link.com/en/business/forum/topic/266210

 

https://static.tp-link.com/beta/2021/202106/20210603/ER605v1_un_1.1.0_20210602-rel71776(beta)_up (1).zip

  0  
  0  
#5
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-12 22:32:59

@shberge thank you very much again for be there

I have two differents situations and I think the first is most easy to solve than the second and I also think when I salve the situation number one I could solve the second

Situation number one. In this picture you will see the diagram

 

When I try to connect to my external server using SSH from my local network, the connection fail but when I use other network the connection is possible

I disconect all the router firewall, you can see that in the pictures in my first post

 

SECOND SITUATION:

 

When I try to acces to my home server using http request from my local network or external network, everything is okey

When I try to connect to my server ussing SSH from my local network, everything is okey

but when I try to connect to my server from external network using SSH, the connection fail

Look the diagram

 

 

 

Look my router configuration in the ports in this picture

 

The router's firewall is completely disabled, you can see that in this picture

 

For the last, I have actualized the router to the lasted official version and not works

Do you have any idea why is this happening?

Thank very for your time, I really appreciate

  0  
  0  
#6
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-12 22:37:29

@shberge recently I try ussing ACL but no way

 

see the picture

 

  0  
  0  
#7
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-12 23:28:58

@LarryMerino 

 

to be honest I have no idea, everything looks just right. the only thing I can think of then is that the ISP has blocked port 22 in its network. if you connect your pc directly to the internet does the same thing happen then? there had been a simple test to exclude faulty router configuration.

  0  
  0  
#8
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-12 23:45:46

@LarryMerino 

 

You can also try another port to bypass if isp have blocked port 22

 

try somthing like this 

 

 

And use port 222 when you connecet. like this

 

 

I do a test and it work with no problem.

 

  0  
  0  
#9
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-13 23:47:09

@shberge thanks for your answer

 

I called my ISP and they told me that I have not any restriction in my line, they give me a public IP and the manage of ports is mine and I'm not in CGNAT

 

I have connected my router to the ONT directly, so I suppose that I have clean interface 

 

However, I try your recommendation a I use a different port, look the picture

 

and I restart the ssh service on my local network

 

 

After, I have a performed a performed a scan of my network from my external server to mi IP and this is the result

 

 

In this picture, you can see that my local network has the port 2222 open

 

Then I tried to connect to my my local server from outside with the same result 

 

 

Do you have others ideas that I can try?

 

I really appreciate

 

Thank you very much

 

P.D. : the router doesn't set the time correctly so I decided to do it manually, I don't know if this has anything to do with it

 

Anyway, the time is correct right now because it is synchronized with the time of my computer

 

  0  
  0  
#10
Options
Re:Can't connect using SSH to my local server from external host and vice versa
2021-07-14 05:10:47

@LarryMerino 

 

I have no idea, have you tried to upgrade to the beta I left a link to earlier up in the thread? this is the one I use when I test. try and installed it to see.

 

 

https://static.tp-link.com/beta/2021/202106/20210603/ER605v1_un_1.1.0_20210602-rel71776(beta)_up%20(1).zip
 

 

I would install beta firmware and take a factoury deafult reset. you do not need to change the firewall or things like that to get port NAT to work

set up ip on LAN and WAN
set up Port NAT before making other settings.
this here should not be a hocus pocus to get it to work
clock on the router should have nothing to say.

 

I still do not think it is the problem with the router, but it is difficult to say, you can tell us in the forum when you find out this :-)

but a full reset to deafult and new firmware is done quickly and test to see if there may be a firmware problem,

 

all my test is on this firmware above.

 

Have TP-LINK something to say on this case???

@Fae any suggestion?

  0  
  0  
#11
Options