Wifi not working externally.

[Sacohen]

OK. I need some of those great minds out there to help me figure this out.
Maybe I missed something, but who knows.

I got my WiFi working after I switched to a new Xfinity Router, but it will only work internally I can't access it from Away.

You would think it was port forwarding, but I set up port forwarding exactly like my old router, but with a new internal reserved IP address.

Port 2000 is open according to an online port checker.


Here is the router setup...


I'm pretty sure it has nothing to do with the DDNS because it still does not work if I enter my current IP address:2000 (http://73.139.228.XXX:2000/r99)

FYI, the camera doesn't work either.

[rimai]

Do you have any other router?

[Sacohen]

No. I had a Netgear, but I removed it and am using the Xfinity.
The Netgear worked fine with the setup and I copied the settings before I remove it.

[Sacohen]

Roberto;
I'm dealing with Comcast on the Port forwarding issue.

I know it is port 2000.

I need to confirm that it is TCP or UDP or both and if there is an IPV6 IP address.

[rimai]

It's ipv4 and we only use tcp

[Sacohen]

Thanks
Kind of what I thought.

[Sacohen]

OK. Comcast configured the router for port 2000 to be open to TCP traffic and I still can't get external connectivity, so I'm back to where I was when I originally posted this. STUMPED???

[rimai]

And you are positive that you can access it internally, right?

[Sacohen]

Yes. 100% positive.
Last connect internal at 8:05 AM this morning.



I couldn't connect at all until last weekend when I realized I had the IP range on my router set to short and the IP address I had reserved for the RA was at the end of the batch.

I changed the reserved IP address to 192.168.1.190 and have been able to connect internally (locally) since then.

[rimai]

Does it do the same thing if you disconnect your phone from wifi and go 3/4G?

[Sacohen]

No. It works fine on 3/4G.
The problem is with the WiFi, but I don't know what?

[rimai]

If it works fine with 3/4G, the problem is that your router doesn't support NAT loopback, which means it can't connect to the same ip address where the connection originated from.
I have the same problem on my router
But if you are connected to wifi, you can then use the internal ip, right?

[Sacohen]

That's correct.
What did you do to get around that issue on your router?

[rimai]

I didn't. I can't connect to my wan ip when I'm home
One thing you can try is getting a different router.

[Sacohen]

Ok. I'll talk with Comcast again and see if they know how to set it up or if they can get me a different router.
I guess I could also use their router to just connect and put my old router back in south of theirs and let it do the work like before.

[lnevo]

I thought the android app had the home and away profile to handle this circumstance?

[Sacohen]

You can choose home or away from the drop down up top, but when I'm set to away (like at work) I can't connect to the RA unless I turn off my WiFi and use my data minutes.

[rimai]

Oh that's different then. I thought you were talking about only at home

[Sacohen]

Well it seems to be only from home.
I thought it was from work too, but I just noticed that it is working outside of the house.

[rimai]

Yeah. So it is definitely the Comcast router.
Set it to bridge mode and use it only as a modem and then use your other router. You should be able to do it that way.

[Sacohen]

Yeah or I could switch to home on the app when I'm home.
I thought it was happening when I was out too.

[Sacohen]

Thanks for the help.
It is working fine switching between the home and away profile.
I haven't had time to call Comcast and either set it to bridge mode of see if there is a way around the NAT loop back.

[lnevo]

Some routers also have their own dns servers you can add an entry for your DDNS name so that internally that name will give your internal IP address. Something to look for also as another method.

[Sacohen]

Thanks. I'll look into that too.

[Sacohen]

Called Comcast about this issue and they enabled DMX mode for the RA port only.
I know DMZ is less secure, but do you think I will have any security issues?
I do have the server authentication set on the RA.

[rimai]

Ahhh. Can u still use dmz on RA and port forwarding on the camera?

[Sacohen]

I'm not using the camera anymore.
DMZ on the RA has been working fine.
I was just concerned that it was leaving me vulnerable.

[lnevo]

Only if the ra was listening on any other port which it isn't but i basically means you have no port forwarding going on at all

[Sacohen]

No. It's just open for that IP address.