I have been struggling for hours. Using a WE826-T2 router with a USB 4G interface inside. Internet connection works and DDNS also. (My ISP gives me a routable IP (not CGNAS)).
I want to open a few ports to the internet so I can reach a server on the local network. Under port forwarding I have added a rule that matches any tcp/udp from any host in WAN via any route IO at port 8888 to forward to the specific IP address of the server on LAN.
This does not seem to be enough.
do I have to modify stuff under the firewall -> general settings -> Zones or set traffic rules?
what about the bridging between the interfaces?
Please show a proof from your device, feel free to partially hide the end of the address for privacy.
Currently your screenshot shows only private IP's.
Start with something real simple like opening (not forwarding) port 22 TCP on wan, which is the internal SSH server (make sure you have a secure password configured, because it will get probed).
IPs that start with 100 are from a block set aside for CGNAT. It is extremely rare to have an IPv4 cellular connection that is not CGNAT.
The IP reported by "whats my IP" sites must match the IP that the router holds on its WAN interface.
Also even if the ISP is not NATing your connection, they can and often do block incoming connections, especially to well-known ports like 80 and 443 to discourage you from running a web server.
yes it is very rare. But I had bugged my ISP for weeks about it and eventually they gave me a new APN address and did some stuff on their end and made gave me a different kind of IP. This all works on my little router that came with the SIM card (before it broke)
Correct. Before that there is no point in configuring a firewall.
Check with AT+CGDCONT? - do you see the correct APN there?
If yes, do you see a public IP in AT+CGPADDR response?
BTW, what modem is it?
Check the current mode with AT+QCFG="usbnet", if you will see "3" there, change the mode with AT+QCFG="usbnet",1
Finally, send AT+QCFG="nat",1 followed by AT^RESET
picocom v1.7
FATAL: failed to add I/O device: Filedes is not a tty
port is : /dev/ttyUSB1
flowcontrol : none
baudrate is : 9600
parity is : none
databits are : 8
escape is : C-a
local echo is : no
noinit is : no
noreset is : no
nolock is : no
send_cmd is : sz -vv
receive_cmd is : rz -vv
imap is :
omap is :
emap is : crcrlf,delbs,
Right, it is in the wrong mode (RNDIS) but the tty assignments should be the same. Try /dev/ttyUSB2 instead.
As a sanity check - ls /dev/ttyUSB* should show you only 3 ports.
