problems with port forwarding port 443
I have at home a DECO BE65-5G and a WatchGuard T25W.
In the meantime, via the Deco app on my phone, I have set up under 'More -> Advanced -> NAT Forwarding -> Port Forwarding' with the following settings:
Service Type: CUSTOM
Service Name: Portforwarding443
Internal IP: 192.168.68.50
Internal Port: 443
External Port: 443
Protocol: TCP
Normally, I should now be able to connect with my WatchGuard SSL VPN Client via port 443, but this does not work. According to the WatchGuard support desk, this problem is caused by the DECO, which is still blocking something somewhere. How can I fix this?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi, have you ever checked if the IPV4 address on the Deco BE65-5G is the same as your current public IP address on https://whatismyipaddress.com/?
Many mobile ISPs use CG-NAT service and do not assign a public IP address via the SIM card:
CG-NAT Blocks my OpenVPN and restricks the NAT type
Thank you very much.
Best regards.
- Copy Link
- Report Inappropriate Content
@raven-au
the issue was resolved by installing (Tailscale with subnet routers) on the PC and setting up the NAS as an exit node via Tailscale.
this is a good solution.
- Copy Link
- Report Inappropriate Content
Hi, have you ever checked if the IPV4 address on the Deco BE65-5G is the same as your current public IP address on https://whatismyipaddress.com/?
Many mobile ISPs use CG-NAT service and do not assign a public IP address via the SIM card:
CG-NAT Blocks my OpenVPN and restricks the NAT type
Thank you very much.
Best regards.
- Copy Link
- Report Inappropriate Content
The 2 IP Adresses are not the same, so it's CG-NAT.
Is there a workaround for this?
Can I change the DECO Operation Mode to a different one than 4G/5G Router to solve this issue if I use a SIM Card in the DECO?
- Copy Link
- Report Inappropriate Content
debackerpeter wrote
The 2 IP Adresses are not the same, so it's CG-NAT.
Is there a workaround for this?
Can I change the DECO Operation Mode to a different one than 4G/5G Router to solve this issue if I use a SIM Card in the DECO?
@debackerpeter no.
Probably the simplest and quickest way to resolve it is to do what I did and that's pay your ISP a monthly fee for a fixed IP address so you can have a public WAN IP address.
If your ISP doesn't provide this option then a VPN provider that provides port forwarding can be used but I found the couple I tried less than reliable. There's also problem that you can't use the VPN for the entire network or your streaming apps with ultimately fail (even though many have improved somewhat nowadays) and the performance, even with Wireguard, will be significantly less than without a VPN.
- Copy Link
- Report Inappropriate Content
@raven-au
the issue was resolved by installing (Tailscale with subnet routers) on the PC and setting up the NAS as an exit node via Tailscale.
this is a good solution.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 1
Views: 62
Replies: 4
Voters 1