Dynamic IP and Port Fowarding on the Vodafone (3G) Wireless RBI. Is it possible?

Forums › New Zealand Broadband › Dynamic IP and Port Fowarding on the Vodafone (3G) Wireless RBI. Is it possible?

PhilW

5 posts

Wannabe Geek

#164406 8-Feb-2015 18:30

I've recently changed to Vodafone Wireless Broadband. We are in a rural off-grid environment.

When looking into prior to signing this I was told 'NO Fixed IP. However, I noted the NZ Vodafone B3000 router-modem manual showed port-forwarding and had an inbuilt link to DynDNS. I needed this to allow off site access to a security camera. I thought, great, I'll be OK without fixed IP, I'll just use DynDNS ore similar.

Sadly since signing up with vodafone there is a real problem achieving this. I had managed to do this via our previous ISP which allocated a fixed IP. Maybe I should have checked the fine print but even in the Service agreement it does not make a note of this being an issue. In Geek Forums there is mention of vodafone using 'CGNAT' but these threads are over year so so old ? still apply.

Can anyone comment and if possible walk me through how to achieve this? I did note that there were comments about using the right APN, but this is 'auto' in router and therefore not able to be altered.

coffeebaron

6233 posts

Uber Geek

Trusted

Lifetime subscriber

#1233068 8-Feb-2015 18:56

You are out off luck. They use CGNAT for there RBI Wireless service. If you can get out of contract, Ultimate Broadband don't do CGNAT, and they can do static ip :)

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

PhilW

5 posts

Wannabe Geek

#1233227 9-Feb-2015 06:24

Thanks for the info, I had thought that IPv6 was going to stop the need for restricting IP addresses, or are there other commercial / restraint resasons. I think I read somewhere that Vodafone in Europe moved away from such techniques.

chevrolux

4962 posts

Uber Geek
Inactive user

#1233230 9-Feb-2015 07:12

Teamviewer would be a simple way to get remote access. Just requires a PC to be turned on when you are away. Far more secure than port forwarding for an IP camera anyway.

PhilW

5 posts

Wannabe Geek

#1233232 9-Feb-2015 07:21

Thanks to the hint!

I'll look into Teamviewer. I've a synology Network Drive with security software too and may find a way to get it to send just recent captured movement . It is primarily to monitor the front gate for people requesting access. I usually flick into IPCAm viewer to check when there is a call before opeing the gate. I have to balance the use of steaming data.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1233234 9-Feb-2015 07:27

PhilW: Thanks for the info, I had thought that IPv6 was going to stop the need for restricting IP addresses, or are there other commercial / restraint resasons. I think I read somewhere that Vodafone in Europe moved away from such techniques.

CGNAT is the norm for mobile networks everywhere in the world.

Yes IPv6 overcome the problem, but you'd need to be on another IPv6 connection to be able to connect to your home network.

afe66

3181 posts

Uber Geek

Lifetime subscriber

#1233279 9-Feb-2015 09:57

PhilW: Thanks to the hint!

I'll look into Teamviewer. I've a synology Network Drive with security software too and may find a way to get it to send just recent captured movement . It is primarily to monitor the front gate for people requesting access. I usually flick into IPCAm viewer to check when there is a call before opeing the gate. I have to balance the use of steaming data.

I would be interested in whether you can get the synology NAS survellance station to send recent captured movement. Last time I looked (12month+ ago admittedly), it would notify you of movement but not send the file which for me was silly as the burglar will have probably stolen the NAS too.

As a result when I go on holiday I use the FOSCAM ip camera I got as baby monitor as it has inbuilt email client which sends the motion jpgs to you via email.

A.

johnr

19282 posts

Uber Geek
Inactive user

#1233288 9-Feb-2015 10:42

RBI connections is not IPV6 yet

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

PhilW

5 posts

Wannabe Geek

#1233347 9-Feb-2015 12:44

OK I can see the issue, but not a solution to the CGNAT problem. It is in effect denying anything but reception traffic to the Rural zone. It may be useful for most 3-4G devices but RBI is not one of them. RBI is using this network becuase it is available, and without realising it is effectively hobbled, a one way street.

The Vodafone B3000 Router-modem is IPv6 capable as are most network connections. Is IPv6 is disconnected as Vodafone NZ has been slow on the enablement of IPv6?

I note a very good review by a UK group for those interested. http://stakeholders.ofcom.org.uk/binaries/research/technology-research/2013/cgnat.pdf

I do wonder if RBI traffic should be treated differently rather than caught up in the usual 3-4G mix.

PhilW

5 posts

Wannabe Geek

#1240829 17-Feb-2015 13:32

It has been suggested that I try using a VPN like solution to get around this..

I am not sure I fully understand how this may help and how exactly to set it up. Any help on this?

>>>
Maybe you can use something like "LogMeIn Hamachi"?
>>

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1240856 17-Feb-2015 14:10

PhilW:
I do wonder if RBI traffic should be treated differently rather than caught up in the usual 3-4G mix.

Other RBI providers do offer a static IP. it's just Vodafone who don't.

The CGNAT issue also isn't unique to RBI. It's how providers such as My Republic and Bigpipe are delivering fibre and copper services by default.

chevrolux

4962 posts

Uber Geek
Inactive user

#1240965 17-Feb-2015 16:07

PhilW: It has been suggested that I try using a VPN like solution to get around this..

I am not sure I fully understand how this may help and how exactly to set it up. Any help on this?

>>>
Maybe you can use something like "LogMeIn Hamachi"?
>>

The hard thing about setting up a VPN is you would need the client part to be on the RBI connection with the server somewhere else. The hard part would be getting the client to dial when required.

Maybe, if you were REALLY keen, you could use an Amazon EC2 instance to be a VPN server.

So you would set up a VPN server on an EC2 instance (which will have a static, public IP) and then set up a client on your RBI connection and have it always on. Then when you are out and about you would VPN in to the EC2 instance and then, with the correct routing, you could access your home stuff.
The issue with that is the latency would be excessive because the closest EC2 servers are in Sydney.