Open Ports on Access Server to port forward to Client VPN

robturner80

I have a 3g/4g router that doesnt have a public routable IP Address or even a static internal IP address.

I have successfully setup the router as a dial in VPN client and can remotely connect to the router and internal network devices. (Only while on the VPN as another Client)

However I need to be able to access the router without the use of a VPN for CCTV purposes.

If i had a public IP address I would simply apply some port forward rules (This isn't possible with the 3g router)

Is it possible to use the Access Servers Wan IP to forward the requested ports via the 3g routers VPN ?

Kind of senario im thinking of:
Internet -> Access Server WAN IP -> 3g router VPN Client Account -> 3g router ->LAN -> CCTV IP address and relevant open ports

TinCanTech

You are sure you are using OpenVPN-Access Server not Community Edition ?

robturner80 wroteIs it possible to use the Access Servers Wan IP to forward the requested ports via the 3g routers VPN ?

Kind of senario im thinking of:
Internet -> Access Server WAN IP -> 3g router VPN Client Account -> 3g router ->LAN -> CCTV IP address and relevant open ports

This does not make sense to me .. what is the WAN IP if you do not have a public IP address ?

robturner80

the Wan IP of the Access Server is hosted on Digital Ocean

The 4g router gets assigned a private IP from the mobile network provider. There is a public IP when looking up "whats my IP" but this inst routeable back to the private IP.

TinCanTech

robturner80 wrotethe Wan IP of the Access Server is hosted on Digital Ocean

That is who I would ask ..

As I do not understand your issue and you want to solve something without using a VPN

robturner80 wroteHowever I need to be able to access the router without the use of a VPN for CCTV purposes

I will have to step down.

robturner80

This is the current setup (IPs changed for simplicity)
Working when on VPN.png This is what I'm hoping can be achieved Working when off VPN.png

robturner80

Before I go looking for a config to suit, is this scenario possible?

Use the Open VPN server's WAN IP address to forward ports over a vpn a device on the VPN's subnet?

Basically im trying to work out a way to connect to an internal device that is working off a 4g router. (4g router doesnt have a public routable address and is behind a NAT)

robturner80

Current setup works when both sides are on the VPN

Hopefully this senario is possible?

TinCanTech

You only want to take away half of the VPN .. :geek:

robturner80

Yep that's right. Although in my case I'm trying to get the NVR this could be a webserver FTP etc...

TiTex

If you have connectivity between the DVR and the VPN Server it should work with a DNAT firewall rule

TinCanTech

What software will you use to connect to the vpn server ?

robturner80

No software it's a site to site VPN from AS to Mobile 4g Router.

TinCanTech

TinCanTech wroteYou only want to take away half of the VPN .. :geek:

robturner80 wroteYep that's right.

TinCanTech wroteWhat software will you use to connect to the vpn server ?

From the laptop to the vpv server ..

robturner80

This is kind of my question.

I want to use the wan IP on the Access Server.

So if we swaped the CcTv for a web Server. Would it be possible to http to the webserver via the Access Servers wan IP .

TinCanTech

TiTex wroteIf you have connectivity between the DVR and the VPN Server it should work with a DNAT firewall rule

Looks plausible ..

matiaszon

This is for sure possible, as https://crypticvpn.com/ is working this way. However, it keeps disconnecting, but definitely you can do it. I am also struggling with that. Trying to set up config the way, that VPN server will more or less behave as NAT forwaridng desired port to desired IP on the other side of VPN .