Remote admin over satellite?

[imacleod]

I set a router up for my mother who has a satellite link, my issue is that any admin currently involves a Teamviewer session as the satellite traffic is natted. Is there anything I can do to enable SSH access to the router from outside by making the router try to establish a tunnel to my PC and allow me back across via that tunnel?

[Lantis]

Is DDNS not an option?
Have the router dynamically tell you what IP address it has so that you can always find it at a convenient address e.g. muminternetsupport.ddns.net.

DDNS is built into gargoyle.

[imacleod]

Is DDNS not an option?
Have the router dynamically tell you what IP address it has so that you can always find it at a convenient address e.g. muminternetsupport.ddns.net.

DDNS is built into gargoyle.

Thanks, but I don't believe so. I'll check the next time I'm on it, but I think the router has a 10.0.0.0 RFC1918 address and not publicly routeable. It gets out by being natted by the ISP so you'd need to know the port it was allocated - and that's done dynamically - not just the IP address it was on.

[ispyisail]

from your mom's house that does https://www.whatismyip.com/ give you?

Don't post this address, just give us an idea

[imacleod]

I'll get the details tonight, but I'm pretty sure the router has 10.0.0.0 address and what's my IP will report an address belonging to Tooway, the ISP.

I've done some more digging and found this site that look very relevant http://xmodulo.com/access-linux-server- ... unnel.html and I see Gargoyle is a fork of OpenWRT, and a I know a little about Linux so I have an idea of where I need to go. If anyone has already done this and has words of wisdom to offer they would be gratefully appreciated.

[Lantis]

Thanks for sharing that link. It was fascinating.
Certainly looks like it will solve your problem. A shame you need a server in the middle.

Should be straightforward to get working.

[imacleod]

As it happens, I have a virtual linux server that I use to host her website, so I should be able to use that. I think it may also be possible to do some port forwarding on my cable modem to bring the tunnel direct to my linux box at home.

If I get it going I'll post an update...

[ispyisail]

Ahh, I think I have the same problem


My ISP supplies a router but they control all access to it.

To open any ports I have to ring them.

That is OK except when I change my gargoyle router the ports are now all wrong.

When Eric first installed OpenVPN you could do a "router" to "router" reverse connection and that solved the problem.

Access would go in both directions

Code: Select all

Gargoyle client -- Firewall -- Internet -- Firewall -- Gargoyle server

But this was broken in latter builds, now access can only be made in the direction of "client" to "server".

Another user suggested that it was a firewall problem?

My guess is the client firewall rules are not quite right?

[imacleod]

[quote="imacleod"]I'll get the details tonight, but I'm pretty sure the router has 10.0.0.0 address and what's my IP will report an address belonging to Tooway, the ISP./quote]

As suspected, router has an WAN IP from the 10.100.0.0/14(!) range.
Public IP is 176.227.134.13

[imacleod]

I bought a TP-Link TL-WR741ND v2 off eBay to configure before going home next month. I've installed 1.8 firmware and had a quick look at OpenVPN; that stuff's a bit complex (!) but hopefully there is enough guidance out there to get the router configured as a client and my linux box as the server, with ports forwarded to it through my cable modem.

Is gargoyle>server the direction that it currently works in?
What will that tunnel give me; cli or GUI access?