Forwarding a specific device using RMS and VPN

nick_namsep · January 17, 2025, 10:32am

Helle everyone,

I have been tinkering with my RUT956 for the past couple of days and i am running into a bit of an issue. I need to connect to device connected to the LAN of the RUT via a vpn that uses some very specific ports but i cant get any connection to it. I have been able to get a vpn connection to the RUT and that works i can login remotely but i cant figure out how to forward to the specific lan device. If anyone knows how to do this or has some other ideas it would be much appreciated

Kind regards,
Nick

Marija · January 17, 2025, 10:52am

Hello,

I recommend reviewing our wiki page for guidance: RMS VPN Hubs.
Additionally, this forum discussion may provide valuable insights: VPN Access RUT901.

If the issue persists, please let me know and provide the following details:

The specific device on the RUT LAN you are trying to access via VPN.
A summary of your current configuration.
The steps you have already tried based on the recommendations in the forum post linked above.

Best regards,

nick_namsep · January 17, 2025, 12:27pm

Thanks for the info,

I have got it working with the route via the VPN so i can connect to the interface from the RUT using a local IP i changed mine but i can access it from 192.168.5.1 so that works my other device is located on 192.168.5.107 and it uses 2 ports namely 8234 and 8235 but when i route the 107 ip and test the connecten even when tracing using wireshark i get the error port unreachable and the connection times out. I have followed the following video and for the router interface i got this working. https://www.youtube.com/watch?v=dfAudZR2wPY

Marija · January 17, 2025, 12:46pm

If I understand correctly, is it working now? Or are you still experiencing any issues with the RMS VPN hub?

Best regards,

nick_namsep · January 17, 2025, 12:50pm

No the issue is still there i can get into the router at 5.1 but i cant connect to 5.107 even when i have added the route in the vpn hub. When i plug my pc into the router i can connect to 5.107 just fine but remotely it doesnt work

I have attached a small part of a trace from wireshark

nick_namsep · January 20, 2025, 7:24am

I just read in the documentation that lan to lan via VPN can be done using two RUT modules does that mean it is not possbile with just one module?

nick_namsep · January 20, 2025, 9:33am

In my current test setup i have connected a pc and the other device to the router and i am connected using a different pc to the VPN hub, all the routers are in place and i can even connect remotely to the PC when i ping the pc connected to the router i get a response just fine when i ping the other device i dont get a response. But when i log into the remote pc and ping it from that so from the lan the other device is on i get a response just fine i really dont understand why

Marija · January 20, 2025, 10:07am

Hello,

Could you please provide a screenshot from RMS VPN → VPN Hubs → Select the created hub → Routes page?

Thank you!

Best regards,

nick_namsep · January 20, 2025, 10:22am

Sure,

The router is on 192.168.0.1
The other PC on 167
and the other device on .50 and that ip is also made static on the device itself

Marija · January 20, 2025, 10:43am

Could you please provide a screenshot where the Clients configuration is visible as well?

Best regards,

nick_namsep · January 20, 2025, 11:15am

Please dont mind the other routes i was just testing some new stuff

nick_namsep · January 20, 2025, 12:01pm

I have the feeling that the device does not want to respond to data comming for an IP that differs from the lan IP. So for example the lan ip is 0.50 and the vpn ip i try to connect from is 255.6 is there a way around this?

Marija · January 20, 2025, 1:12pm

The device connected to the RUT956 LAN should be in the same subnet. For instance, if your RUT956 has an IP address of 192.168.1.1, then the device connected to the RUT956 LAN should have an IP address in the range 192.168.1.X (e.g. 192.168.1.6).

Best regards,

nick_namsep · January 20, 2025, 1:16pm

Yes that is exactly what i am thinking but it just does not work for some reason it just does not want to listen to any incoming data

nick_namsep · January 20, 2025, 1:26pm

would there be a different way to achive the same thing? maybe without RMS?

Marija · January 20, 2025, 1:31pm

Could you please provide a topology of your setup, including all devices and their respective LAN and VPN addresses? This will help us better understand your configuration and assist you more effectively.

Best regards,

nick_namsep · January 20, 2025, 2:07pm

Sure,

I have a RUT956 in a mobile machine that works on site. The machine works with a PLC what we would like to monitor and update remotely. The PLC uses ethernet for this communication which is why we chose the 956. The PLC is directly connected to the RUT which has just a simple simcard for the mobile data functionality. We want to be able to log into the PLC from the office so using some soft of VPN or tunnel to the PLC using the RUT. I can log into the modem remotely just fine but i can’t get into the PLC and dont really understand why i can even connect to a Laptop that i have connected to the RUT via a VNC just for testing so i know that works. I have the feeling that the PLC might not respond to data comming from a different IP that the router so if a tunnel/brige to the router would be possible that puts my office onto the same lan would be i think the next step.