Double NAT Port forwarding with UPnP

[snbforumuser1234]

Hi

I have received a new modem with router functionality from my ISP. It has WiFi and, according to the ISP, should support UPnP IGD for port forwarding. I have no access to the web interface of the router, since all the configuration is done via the control panel on the ISP's website (which doesn't allow manual port forwarding by specifying ports).

Behind this ISP router I have my own router with asuswrt merlin on it. The setup currently is like this:

ISP Router: WAN port has public IP from ISP, LAN port has 192.168.1.1
Asuswrt merlin router: WAN port is connected to ISP router's LAN port and has the ip 192.168.1.2 on it. LAN ports of the asuswrt router are DHCP'd in 192.168.2.X. subnet on all networks is 255.255.255.0.

I have the OpenVPN function enabled in the asuswrt merlin router. However, since my setup is basically a double nat setup, I cannot connect from the internet to my asuswrt merlin router.

I would probably need to send a upnp request on the WAN port of the asuswrt router to my ISP's router, but this doesn't seem to work. I tried to ssh to the asuswrt merlin router and issued "miniupnpc -l", but it doesn't find the ISP router.

What would I need to do?

 

[Vexira]

can you put the isp unit into bridege mode? if not try using dmz of the isp unit and seting to the ip of the merlin box.

 

[snbforumuser1234]

can you put the isp unit into bridege mode? if not try using dmz of the isp unit and seting to the ip of the merlin box.

Unfortunately I can't put it in bridge mode and there is no way to setup a DMZ... The only thing I know which SHOULD work is UPnP IGD.

 

[Vexira]

Which isp and modem, they all have service menu's which the end user is locked out of.
Also is it not possible to use a third party modem.

 

[martinr]

Is it worth speaking to the technical section of your ISP and seeing what they suggest? Perhaps they could snd you a suitable modem to replace their router?

 

[snbforumuser1234]

Is it worth speaking to the technical section of your ISP and seeing what they suggest? Perhaps they could snd you a suitable modem to replace their router?

@Vexira: I don't know the model type right now, I will have to look it up. Afaik it's a new development of a small local ISP in my country.

@martinr: I did that already, they tell me they don't support manual port forwarding anywhere right now except for UPnP IGD. The may add the manual port forwarding at a later time but since it's a new product, there's not much that can be changed on the control center.
Since the ISP can not provide a time frame in which the manual port forwarding should be available I would like to setup port forwarding through UPnP...

 

[Vexira]

@Vexira: I don't know the model type right now, I will have to look it up. Afaik it's a new development of a small local ISP in my country.

@martinr: I did that already, they tell me they don't support manual port forwarding anywhere right now except for UPnP IGD. The may add the manual port forwarding at a later time but since it's a new product, there's not much that can be changed on the control center.
Since the ISP can not provide a time frame in which the manual port forwarding should be available I would like to setup port forwarding through UPnP...

which contry may i ask, im from austrlia and my isp is optus, they lock down thier unints hard, though thankfully i found out how to get third party hardware working via mac clone and how to get into the units service menus.

 

[TheUntouchable]

Here in Germany we don't have forced Network Hardware from ISPs anymore

 

[Vexira]

yea well we just got vdsl2 which is garbage, i wasnt lucky enough to get optic fiber to the home, plus most people here are too lazy to go get good third party kits, unlike me, they dont want to spend the money or learn about it.

 

[snbforumuser1234]

which contry may i ask, im from austrlia and my isp is optus, they lock down thier unints hard, though thankfully i found out how to get third party hardware working via mac clone and how to get into the units service menus.

[...]

yea well we just got vdsl2 which is garbage, i wasnt lucky enough to get optic fiber to the home, plus most people here are too lazy to go get good third party kits, unlike me, they dont want to spend the money or learn about it.

I will look at the model description when I am at home and provide the necessary details. It's a cable/coax modem-router though. ISP is: https://www.quickline.ch/