Setting up a VPN server using mobile data connection

[Tee_bag]

Hi Guys .. got some network queries need help

I am trying to enable the VPN Server feature on TPlink archer 4G router using SIMBA mobile 4G connection.

But the OpenVPN clients out on the internet cannot seem to reach the TPlink archer VPN router.
- yes, I've setup DDNS
- yes my opvn parameters + certs etc are all in order.

I suspect that this could be use to the IP issued to the TPlink archer 4G router.
I try using SIMBA mobile ...the DHCP issued a IP 172.x.x.x to the TPlink archer 4G router.
I try using GIGA mobile ...the DHCP issued a IP of 10.x.x.x to the TPlink archer 4G router.

These are all private IP ranges rite? ..and for VPN server to work.... the ports at the mobile providers have to be opened/mapped right?
If this is the case .. does it mean that setting up a VPN server with mobile data connection is technically impossible?

Got any bros know workaround anots ?

 

[xiaofan]

Hi Guys .. got some network queries need help

I am trying to enable the VPN Server feature on TPlink archer 4G router using SIMBA mobile 4G connection.

But the OpenVPN clients out on the internet cannot seem to reach the TPlink archer VPN router.
- yes, I've setup DDNS
- yes my opvn parameters + certs etc are all in order.

I suspect that this could be use to the IP issued to the TPlink archer 4G router.
I try using SIMBA mobile ...the DHCP issued a IP 172.x.x.x to the TPlink archer 4G router.
I try using GIGA mobile ...the DHCP issued a IP of 10.x.x.x to the TPlink archer 4G router.

These are all private IP ranges rite? ..and for VPN server to work.... the ports at the mobile providers have to be opened/mapped right?
If this is the case .. does it mean that setting up a VPN server with mobile data connection is technically impossible?

Got any bros know workaround anots ?

You can use alternative solution -- eg, Overlay VPN like Tailscale.
https://tailscale.com/

Using Overlay VPN is one work-around for those under CGNAT as well (eg: SIMBA).

Reference discussion.
https://forums.hardwarezone.com.sg/threads/remote-access-back-to-home-network.7151855/

 

[Tee_bag]

@xiaofan . thanks! ..
I tested tailscale and it works perfectly to "work around" the issue!

Thanks again!

 

[bert64]

Hi Guys .. got some network queries need help

I am trying to enable the VPN Server feature on TPlink archer 4G router using SIMBA mobile 4G connection.

But the OpenVPN clients out on the internet cannot seem to reach the TPlink archer VPN router.
- yes, I've setup DDNS
- yes my opvn parameters + certs etc are all in order.

I suspect that this could be use to the IP issued to the TPlink archer 4G router.
I try using SIMBA mobile ...the DHCP issued a IP 172.x.x.x to the TPlink archer 4G router.
I try using GIGA mobile ...the DHCP issued a IP of 10.x.x.x to the TPlink archer 4G router.

These are all private IP ranges rite? ..and for VPN server to work.... the ports at the mobile providers have to be opened/mapped right?
If this is the case .. does it mean that setting up a VPN server with mobile data connection is technically impossible?

Got any bros know workaround anots ?

You can't with IPv4 for the reason you've seen above. You would need to find a mobile provider which gives you a routable address, which is extremely rare and likely to be very expensive.
You can with IPv6 if the provider does not block inbound traffic, unfortunately Simba does (at least last time i checked). M1 does not and it will work there.

Anything else is a kludge - either you rely on a third party to relay your traffic (adds latency, privacy concerns, or cost if you rent a server yourself) or you rely on things like hole punching - which still needs a third party server for setup, and can be unreliable.
Hole punching can also work with IPv6 (eg on simba), it is more reliable with v6 because its less complex (only has to trigger the port, doesnt have to deal with port or address translation), but still not ideal.