RTU901 Tunnelling Option

Networking Solutions Question
1

I have legacy 3G routers from another OEM which use IP-IP tunneling over a dedicated APN to allow connection between a RTU LAN and SCADA client LAN. The configuration is much simpler than the various VPN protocol option available with the RUT901. For example to establish a tunnel, all that get configured is the destination endpoint SIM card WAN IP address provided by ISP and RTU/SCADA LAN network on each router. I found in this configuration private IP addresses are used throughout(See attached example).

Current configuration type
Current configuration type745×456 6.01 KB

Other settings is the DNS, DHCP and internal and external port forward. No encryption is configure on the routers as this is catered at a different level.

However after unsuccessfully attempting all the available VPN options to connect two RUT901 routers using the APN the most communication ping is between the WAN IP with no success to ping into the routers LAN IP addresses. Also I have noticed all the VPN option examples for RUT901 always use a public IP address with a combination of LAN and sometimes virtual IP address.

My questions, is whether there is a option that can replicate the IP-IP tunnel with the old routers? Client router unfortunately only has IP-IP tunnelling capability.

Alternatively, is to replace the client router and thus configurating two RUT901 that will allow for communication connection for the two LAN networks without needing the ISP providing static public IP addresses.

In addition, the client should be able to open the WebUI to the server router and connected RTU.

Will appreciate any assistance.

GK

7

Hello, @Germanus ,

Thank you for reaching out and apologies for a delayed response,

Could you provide me with some additional details,

  • Is the legacy router’s “IP-IP tunnelling” confirmed to be literal IP-in-IP, or could it actually be a GRE-based implementation labeled generically? (Check the router’s config/manual.)
  • Are you committed to keeping the legacy client router, or open to replacing it with a second RUT901?
  • Can the carrier confirm whether this dedicated APN routes directly between the two SIMs (private/closed APN), or whether the SIMs sit behind CGNAT?
  • Does this APN provide any general internet breakout, or is it strictly closed-loop between the two SIMs only?
  • Which VPN protocol(s) were already tested between the two RUT901 units, and did the tunnel/instance show “Connected” in the WebUI, or did it never establish?
  • Are the APN-assigned WAN IPs on both routers static or dynamic?
  • Do ports 23, 80, and 2404 need to reach the server router’s own WebUI, the RTU behind it, or both?
  • Current RutOS firmware version on RUT901 unit?

I look forward to your response,

All the best,
V.