Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


1449 posts

Uber Geek
+1 received by user: 317

Subscriber

Topic # 201941 10-Sep-2016 21:52
Send private message

Now to be fair, I've done most of it but there is just 1 thing I'm struggling with.

 

I have a WHS2011 box that runs 2 websites.

 

When I was on ADSL using a TP-Link TD-W8970, I could access the 2 websites using their external address but from within the LAN. It was a handy way of me being able to check that the connectivity was OK.

 

Since going to fibre, I now have a HG659, and I have set up all the same port forwarding rules as I had before.

 

Now I cannot access the websites from within the LAN. It works using their internal address and I am mostly sure that they can be accessed from outside the LAN. 

 

What other setting do I need to adjust to be able to access my websites via their external address but from behind my router?





Life is too short to remove USB safely.


Create new topic
544 posts

Ultimate Geek
+1 received by user: 127

Subscriber

  Reply # 1627199 10-Sep-2016 22:45
Send private message

Unfortunately I don't believe the HG659 supports "hairpin NAT" hence you wont be able to access your internally hosted server using your WAN IP / via public DNS.

 

You can however add a static DNS entry to your PC's hosts file to direct your server's public domain to it's local IP.

 

192.168.1.10       www.myserver.co.nz   #My server local IP and domain

 

 

 

Ref: http://www.howtogeek.com/howto/27350/beginner-geek-how-to-edit-your-hosts-file/

 

 


27154 posts

Uber Geek
+1 received by user: 6586

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1627206 10-Sep-2016 23:26
One person supports this post
Send private message

Most routers don't support hairpin NAT.

 

 




1449 posts

Uber Geek
+1 received by user: 317

Subscriber

  Reply # 1627238 11-Sep-2016 06:48
Send private message

Thanks for that.

 

Does that mean I am going to have to leave the house to do my checking now?





Life is too short to remove USB safely.


470 posts

Ultimate Geek
+1 received by user: 116

Lifetime subscriber

  Reply # 1627243 11-Sep-2016 07:40
Send private message

Although I know the conclusion of your other thread was that the HG659 is not a bad router, it may be that you actually want something that is a bit more configurable.

544 posts

Ultimate Geek
+1 received by user: 127

Subscriber

  Reply # 1627249 11-Sep-2016 08:16
Send private message

kiwifidget:

 

Thanks for that.

 

Does that mean I am going to have to leave the house to do my checking now?

 

 

If you modify the hosts file you can continue to do your checking locally using your public domain; you'll still be able to see if your server is working, just won't get an idea external latency, routing issues etc. 

 

However to actually perform tests from the perspective of a public user you could either; 

 

- access through a VPN or web proxy on your PC

 

- use a reverse proxy service such as CloudFlare (which has many other advantages).

 

- use a server monitoring service for uptime logging

 

- use 3G on your mobile device

 

- use a router that supports hairpin NAT  (aka Nat loopback ).




1449 posts

Uber Geek
+1 received by user: 317

Subscriber

  Reply # 1627252 11-Sep-2016 08:25
Send private message

froob: Although I know the conclusion of your other thread was that the HG659 is not a bad router, it may be that you actually want something that is a bit more configurable.

 

This may well turn out to be the case. My TP-Link router cant to do the voip thing, and it seems like the HG659 might not be WHS2011 friendly.

 

 

 

I have manually forwarded port 443 but the error persists, even though it does seem to function from the WAN.

 

I have enabled upnp but this also may be a factor.

 

If the HG659 turns out to be not quite the right fit for me I will look into alternatives. 

 

 

 

 





Life is too short to remove USB safely.


544 posts

Ultimate Geek
+1 received by user: 127

Subscriber

  Reply # 1627254 11-Sep-2016 08:36
Send private message

kiwifidget:

 

I have manually forwarded port 443 but the error persists, even though it does seem to function from the WAN.

 

 

That's simply a result of no hairpin as your server can't see itself using its public domain / IP. If you've verified you can access it wan side then simply ignore that message otherwise if it's causing issues (i.e. won't allow you to proceed with a setup) you can probably trick it by adding a entry on your server hosts file directing your public domain to localhost:

 

127.0.0.1    mydomain.com




1449 posts

Uber Geek
+1 received by user: 317

Subscriber

  Reply # 1627287 11-Sep-2016 10:08
Send private message

OK. So just for checking every now and then or if I think there is a problem, I could unplug the LAN connection from the HG659 and plug it into the TP-Link.

 

The TP-Link is currently setup for ADSL with pppoe. To set it up for fibre, other than using the WAN port instead of the ADSL is there anything else I would need to do?





Life is too short to remove USB safely.


470 posts

Ultimate Geek
+1 received by user: 116

Lifetime subscriber

  Reply # 1627289 11-Sep-2016 10:13
Send private message

Vodafone right? WAN needs to be set to DHCP and VLAN10.



1449 posts

Uber Geek
+1 received by user: 317

Subscriber

  Reply # 1627290 11-Sep-2016 10:15
Send private message

froob: Vodafone right? WAN needs to be set to DHCP and VLAN10.

 

Yeah, Vodafone. Thanks, I'll try that tomorrow.

 

I'm only allowed to do network maintenance during business hours, ie while Himself is at work!





Life is too short to remove USB safely.


544 posts

Ultimate Geek
+1 received by user: 127

Subscriber

  Reply # 1627295 11-Sep-2016 10:28
Send private message

kiwifidget:

 

OK. So just for checking every now and then or if I think there is a problem, I could unplug the LAN connection from the HG659 and plug it into the TP-Link.

 

The TP-Link is currently setup for ADSL with pppoe. To set it up for fibre, other than using the WAN port instead of the ADSL is there anything else I would need to do?

 

 

You're back at square one with this thread as your TP-Link doesn't appear to support WAN VLAN tagging to work with Vodafone UFB: http://www.geekzone.co.nz/forums.asp?ForumId=40&TopicId=201778

 

You want hairpin which your TP-Link supports and VOIP ATA which your HG659 has...

 

There is a way to do this specifically on Vodafone+Chorus; I'll PM you the details.




1449 posts

Uber Geek
+1 received by user: 317

Subscriber

  Reply # 1627333 11-Sep-2016 10:57
Send private message

solutionz:

 

kiwifidget:

 

OK. So just for checking every now and then or if I think there is a problem, I could unplug the LAN connection from the HG659 and plug it into the TP-Link.

 

The TP-Link is currently setup for ADSL with pppoe. To set it up for fibre, other than using the WAN port instead of the ADSL is there anything else I would need to do?

 

 

You're back at square one with this thread as your TP-Link doesn't appear to support WAN VLAN tagging to work with Vodafone UFB: http://www.geekzone.co.nz/forums.asp?ForumId=40&TopicId=201778

 

You want hairpin which your TP-Link supports and VOIP ATA which your HG659 has...

 

There is a way to do this specifically on Vodafone+Chorus; I'll PM you the details.

 

 

Oh yes, I wish this damn cold wasn't making my head so woolly. Thank you for details that would be most appreciated.

 

 





Life is too short to remove USB safely.


Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.