Orcon Genius Router - Website Portfowarding Configuration

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Orcon Genius Router - Website Portfowarding Configuration

NateWon

29 posts

Geek

#179261 2-Sep-2015 14:06

Hello,

After a rather frustrating series of conversations - Ive been told my VDSL+VOIP connection will only work with my Orcon Genius Router (Id previously been told otherwise) - Ive been using a DrayTek Vigor 2710 VDN which is very simple to use. Ive attempted to configure the router to allow https and http hosting through to a servers IP address. however even my local IP addresses won't work.

Previously

External IPs - 500.500.500.500:8090 worked fine, simple configuration
Internal IPs - 192.168.1.18:8090 - and Port worked fine, easy to configure.
192.168.1.18 mywebsite Interal Host entries - working

IPs locally have changed to
192.168.20.3 etc
192.168.20.3 mywebsite - Internal Host entries - working enabled port 80

FIRST Problem - Trying to load the site on port 8090 won't work? i.e. 192.168.20.3:8090 - no response, server is all running on localhost etc. (NOT SSL). 192.168.20.3 will print the IIS hosted screen with languages listed (Apache server also works).
How do I get the router to work with these ports on the local network?

SECONDLY: The External IP won't access the servers either. This may be related to the same problem, Ive added a Virtual server entry to the Orcon Genius router (Netcomm) and it still doesn't work.

e.g. 500.500.500.500:8090 - No response either

Does anyone know how to solve these issues or alternatively could someone explain to me how to configure my Old and New Router to operate together (I suspect this may be more complex than needed - i.e any Port required at an external location may need to be configured on both routers? or waive much more security (Might be Ok, disable Wifi on Orcon Router etc)

Any help would be appreciated here, I have to keep using this equipment or be charged an early termination fee + wait up to 10 days (work from home so will screw me in a large way - have client demos needed)

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1378273 2-Sep-2015 14:11

I assume by 500.500.500.500 you mean your external IP whatever it is at the time?

If you can't access the server internally on your network at the local listening port, that's a problem with your server and nothing to do with the router.

Have you configured IIS to also listen on port 8090? Any reason you're using port 8090 internally and not just port 80?

Can you post a screen shot of your Virtual Servers screen from the NF4V?

NateWon

29 posts

Geek

#1378287 2-Sep-2015 14:28

ubergeeknz: I assume by 500.500.500.500 you mean your external IP whatever it is at the time?

If you can't access the server internally on your network at the local listening port, that's a problem with your server and nothing to do with the router.

Have you configured IIS to also listen on port 8090? Any reason you're using port 8090 internally and not just port 80?

Can you post a screen shot of your Virtual Servers screen from the NF4V?

Yes 500.500.500.500 represents my external IP (Static) - better to keep it at least partially private (Am aware its available if looked up) Its 100% the router sorry mate - have not changed anything on the web servers and have never had a problem before the new router. Webserver is configured against a large number of ports - many however are closed off at the router until needed (Not much more annoying than being told a website in development isn't working "Whilst coding"). Ive enabled "LAN Loopback" in the Router under the Virtual servers entries and now works - don't recall enabling that on the Draytek - enabling this also allows the external references to work.

Am I missing something or do I need to delete an entry and add again to edit it? Also does anyone know how I can enable the the Genius Router and Draytek to work side by Site e.g. Internet -> Orcon Genius (Perhaps large port range enabled) -> Draytek (Wifi) (Specific Ports enabled) - Switch+LAN
I don't think the lag between the Draytek and Genius would be of concern, few ms? VDSL has doubled my speed down and is 5x faster up (Apparently still slow for VDSL) but much better for me.

NateWon

29 posts

Geek

#1378304 2-Sep-2015 14:53

ubergeeknz: I assume by 500.500.500.500 you mean your external IP whatever it is at the time?

If you can't access the server internally on your network at the local listening port, that's a problem with your server and nothing to do with the router.

Have you configured IIS to also listen on port 8090? Any reason you're using port 8090 internally and not just port 80?

Can you post a screen shot of your Virtual Servers screen from the NF4V?

Re: Have you configured IIS to also listen on port 8090? Any reason you're using port 8090 internally and not just port 80? - Its much easier to provide an IP address with a Port than to try and explain how to modify a Hosts entry, it also means that certain technology Im working on isn't as easy to come across (Probably a bit paranoid)

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1378362 2-Sep-2015 15:21

NateWon: Its 100% the router sorry mate - have not changed anything on the web servers and have never had a problem before the new router

But you've changed your IP Range, so you have definitely changed something on the web servers ;) The router has nothing to do with restricting local LAN access, it's just a switch on the internal part.

What would you gain by adding the Draytek as well?

NateWon

29 posts

Geek

#1378405 2-Sep-2015 16:45

ubergeeknz:
NateWon: Its 100% the router sorry mate - have not changed anything on the web servers and have never had a problem before the new router

But you've changed your IP Range, so you have definitely changed something on the web servers ;) The router has nothing to do with restricting local LAN access, it's just a switch on the internal part.

What would you gain by adding the Draytek as well?

But you've changed your IP Range, so you have definitely changed something on the web servers ;) - The Routers DHCP changed the IP address, which I was aware of, so 192.168.1.18 became 192.168.20.3 as mentioned above. If we are going to get Richard involved, that's the Ethernet connection, not the server. The only changes required where on the router, and now works.

"What would you gain by adding the Draytek as well?" - Pre configured Configuration mostly - large number of entries that won't copy over to the NF4V from what I can see, and potentially a number of values that won't work copy/fit or will have to be configured differently - and a better UI. It will take me a while to workout whether I can do everything I need/want to, so the question is can I avoid having to check and which will be less work with less costs - CBA if you will.

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1378407 2-Sep-2015 16:53

NateWon:
ubergeeknz:
NateWon: Its 100% the router sorry mate - have not changed anything on the web servers and have never had a problem before the new router

But you've changed your IP Range, so you have definitely changed something on the web servers ;) The router has nothing to do with restricting local LAN access, it's just a switch on the internal part.

What would you gain by adding the Draytek as well?

But you've changed your IP Range, so you have definitely changed something on the web servers ;) - The Routers DHCP changed the IP address, which I was aware of, so 192.168.1.18 became 192.168.20.3 as mentioned above. If we are going to get Richard involved, that's the Ethernet connection, not the server. The only changes required where on the router, and now works.

"What would you gain by adding the Draytek as well?" - Pre configured Configuration mostly - large number of entries that won't copy over to the NF4V from what I can see, and potentially a number of values that won't work copy/fit or will have to be configured differently - and a better UI. It will take me a while to workout whether I can do everything I need/want to, so the question is can I avoid having to check and which will be less work with less costs - CBA if you will.

What I'm getting at is that the change in IP range and therefore address will have affected the server, ie. it has changed the server configuration. The router is not capable of blocking internal LAN access to specific ports. It may be that since the IP address change, your server is no longer listening on its allocated IP address.

On that note, no reason you couldn't keep your old IP addressing scheme with the new router, just need to configure it accordingly including IP reservations.

You can use another VDSL modem with your Draytek on the service. Just won't be able to use the Genius voice service, and the helpdesk won't provide any support for the other router/modem.

What config can you do in the Draytek which you think the NF4V might not do? If you let me know I might be able to help. NF4V is a fairly capable router, albeit with a slightly clunky interface.

NateWon

29 posts

Geek

#1378419 2-Sep-2015 17:21

ubergeeknz:
NateWon:
ubergeeknz:
NateWon: Its 100% the router sorry mate - have not changed anything on the web servers and have never had a problem before the new router

But you've changed your IP Range, so you have definitely changed something on the web servers ;) The router has nothing to do with restricting local LAN access, it's just a switch on the internal part.

What would you gain by adding the Draytek as well?

But you've changed your IP Range, so you have definitely changed something on the web servers ;) - The Routers DHCP changed the IP address, which I was aware of, so 192.168.1.18 became 192.168.20.3 as mentioned above. If we are going to get Richard involved, that's the Ethernet connection, not the server. The only changes required where on the router, and now works.

"What would you gain by adding the Draytek as well?" - Pre configured Configuration mostly - large number of entries that won't copy over to the NF4V from what I can see, and potentially a number of values that won't work copy/fit or will have to be configured differently - and a better UI. It will take me a while to workout whether I can do everything I need/want to, so the question is can I avoid having to check and which will be less work with less costs - CBA if you will.

What I'm getting at is that the change in IP range and therefore address will have affected the server, ie. it has changed the server configuration. The router is not capable of blocking internal LAN access to specific ports. It may be that since the IP address change, your server is no longer listening on its allocated IP address.

On that note, no reason you couldn't keep your old IP addressing scheme with the new router, just need to configure it accordingly including IP reservations.

You can use another VDSL modem with your Draytek on the service. Just won't be able to use the Genius voice service, and the helpdesk won't provide any support for the other router/modem.

What config can you do in the Draytek which you think the NF4V might not do? If you let me know I might be able to help. NF4V is a fairly capable router, albeit with a slightly clunky interface.

I just messed around with disabling the NAT entries and you may have a point, however no changes where made to any web server configuration - 192.168.20.3 worked after disabling the entry - earlier today wouldn't work at all (Other than IP there have been no changes so a bit of a curious one).

You can use another VDSL modem with your Draytek on the service. Just won't be able to use the Genius voice service, and the helpdesk won't provide any support for the other router/modem - other than resetting a static IP or providing a password havn't needed ISP support before. Router supports VOIP, which is a bit frustrating - I suspect that means Ill have to pay even more for a phone connection, and it also sounded like they would roll back my VDSL connection to ADSL.

Re: Features - the URL Filtering etc will need to be sorted out, there are some features for that (much more limited however), I don't think I can limit Bandwidth on the new device (i.e. Guests uploading Snowboarding Videos whilst trying to work = longer work day) - Ill have a look at the VPN connections when I have time - they aren't needed this month so may have enough time to sort this out, and post them up here. Just spoke to my Mate (Installs and Manages the NetSpeed network in Wanaka) and it sounds like he knows how to configure a Bridge - if you do have information on setting that up that would be helpful.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1378422 2-Sep-2015 17:25

OK, it won't do bandwidth limiting, URL filtering (it maybe does something of this ilk but I've never tested it), and I don't think it does bridge mode either. Those are pretty advanced features for something intended more as a "home" router.

You should be able to change to a Naked VDSL plan, and get a voip line from 2talk or any other VoIP provider which support BYO device. Orcon does not have such a product.

Then you could BYO VDSL modem no problem (even if they "insist" you use the NF4V, just pop it on a shelf and return it when you're done).

NateWon

29 posts

Geek

#1378453 2-Sep-2015 17:46

ubergeeknz: OK, it won't do bandwidth limiting, URL filtering (it maybe does something of this ilk but I've never tested it), and I don't think it does bridge mode either. Those are pretty advanced features for something intended more as a "home" router.

You should be able to change to a Naked VDSL plan, and get a voip line from 2talk or any other VoIP provider which support BYO device. Orcon does not have such a product.

Then you could BYO VDSL modem no problem (even if they "insist" you use the NF4V, just pop it on a shelf and return it when you're done).

Its not meant to be a home router - we work from home - I specifically rang them prior to switching to check that it would be fine, and was told I could use my router - turns out that was wrong.

Ill have a look into other VOIP plans with BYOD, there are a few inter-connectivity options on the Orcon device, will need to research more.

NateWon

29 posts

Geek

#1378765 3-Sep-2015 09:27

Are you able to Bind a Mac address to an IP on the router?
I see why you assign IP addresses in a Home network with the router - the Draytek would assign them if it was turned off, it appears the Orcon router assigns them if they are turned off (Making life more difficult on a daily basis)