Howto connect to device behind RUT951 with RMS VPN

[webtourHS]

Hi,

I have a new RUT951 Teltonika Router. There is a RaspberryPi connected at LAN1.

I add the device to my RMS. I configure a VPN Quick Connect in the Teltonika RMS. When I start the VPN, I don’t understand how to connect to the Device behind the Router. Can I use SSH or HTTPS with the local IP Network from the router?

I read the dokumentation and visit some videos, but I am still confused.

Has any one a howto for an example with a https connection?

best ragrds

Holger

[TautvydasVaiciackas]

Hello,

Thanks for contacting Teltonika Networks’ technical support team.

As I understand you have Raspberry Pi in RUT951 LAN network and using RMS you want to remotely access that, Raspberry controller. In this situation, RMS has the RMS Connect feature.

To configure it:

• Navigate to Remote Access in the RMS Connect section.

• Press the add button.

• Select the manual section.

• In Search Devices select RUT951. Add name, write Raspberry IP, set port 443, and select HTTPS protocol.

Since you asked for an HTTPS connection example, I set the port and protocol accordingly. If you want to access a different service change the port and protocol values accordingly.

If want to know how to connect to SSH, Telnet, HTTP(S), RDP/VNC, or SFTP services. View our wiki page: RMS Remote Access - Teltonika Networks Wiki.

Below is a configuration’s example to connect to the device’s HTTPS service:

After pressing add. Press the play button. RMS should show your HTTPS service UI.

As a second solution, you could create a VPN hub and add the devices to the hub. This is a more scalable solution in case you would need to expand your setup, but it takes a bit more steps to configure. This would probably be a better option if you had numerous devices connected to the Routers LAN Network. For one device, the first solution would be more optimal.

To configure it:

• Navigate to VPN hubs section.

• Press add. Set name and select a desired location.

• Press create. After creating the hub, select it.

• Go to the Clients section.

• Press add.

• Select RMS users’ section and press + near your email.

• Press add again and this time go to RMS devices section.

• Press + near RUT951.

The VPN hub clients section should look similar to this:

After add the clients download the VPN configuration file. Press the download button near your RMS user. You will receive VPN configuration file.

Now you will need to download OpenVPN connect for your computer. After downloading the program install it and launch it. In OpenVPN Connect select Upload file.

Press the Browse button and select the VPN configuration or simply drag the file that you have just downloaded. After importing the file press the orange Connect button.

Now your computer should be in the same VPN network with RUT951 and devices under it.

Next, we will need to create a port forward rule so that we could access Raspberry Pi under the router using RUT951 VPN IP.

Connect to RUT951 WebUI.

• Go to Network → Firewall → Port forwards.

• Create a new port forward rule. Set name, set an external port (general recommendation is set the port higher then 5000) as an internal IP address select Raspberry Pi’s IP address and set internal port to 443.

• Edit the port forward rule that you have just created (press the pencil button). Change the source zone to openvpn.

• Press save & apply.

Since you asked for an HTTPS connection example, I set the port accordingly. As an example, view the picture below:

Now in the URL address bar type RUT951 VPN IP and add port 5000. For an example: https://RUT951.VPN.IP.ADDR:5000. You should see your HTTPS service’s UI.

To find RUT951 VPN IP. Go to VPN hubs, select your hub. In the sessions section you should see each client’s VPN IP in the IP address field.

For more information about RMS VPN hubs, you can view our wiki page: RMS VPN Hubs - Teltonika Networks Wiki

You might wonder why I did not provide an RMS VPN quick connect. VPN Quick connect is a temporary solution. Even the VPN quick connect hub can be active only for a short time. Creating a VPN hub or creating an RMS Remote access are more permanent solutions.

If you have more questions, feel free to ask.

Best regards,

Tautvydas