Accessing Local network device remotely

[tatters]

Hi,

I am having some issues directly connecting to a device that is on a remote network and cant figure out how to get the global IP address of the device.



There is a server which is connected to the internet via a EnGenius router, using the IP address of the router l can connect to the server via remote desktop and then using IE on the server l can see the webpage of the device via the local IP of 192.168.1.10

How can l directly connect to this device at 192.168.1.10 ?


Thanks
____________________
Past:NRG50,AF1125(x2),NSR125RR,ZZR250,CX500,VFR400,KR1S,ZZR600(x2),CB400N,YZF1000(x2),KH125,Z200,FX400R,CBR954RR(x2)GPZ500S,GT550,VFR750F(x2),RD350N,XR650R,CBR600F,CB250,KDX250,YZF750R,CRM250,400EXC,KLR650,TTR600RE,DR350S,R100GSPD,RGV250,VMAX1200,DL650,KZ750 Present:G650XC,C12,CRF450X,1190ADV

[Derivative]

You can find the global IP address that other machines 'think' it has via a site like e.g. https://ip.alt.io

However, if the device is behind NAT (i.e. not directly connected to the Internet), then there is no direct global IP address, so you won't be able to connect (you'll hit the router/gateway between the internal network and the Internet)

On a home network you would achieve this by forwarding the port you need on the router. Then the router would forward requests on globalip:port to the machine.

As an example, imagine you have a standard home network with phones, computers etc connected with addresses 10.10.10.1, 10.10.10.2, etc. Those are local addresses - but there's only one global IP that the ISP assigns you, which is "owned" by the router's DSL/fiber/whatever interface.

The other option is to set up a VPN on the router, which you can then connect to, and via that access all local IP addresses in its' subnet.

If you're interested in more than a superficial manner, TCP/IP Illustrated is an old book now but the basics of IPv4 remain the same.

[tatters]

Thanks,


Managed to work out how to setup the port forwarding on the router and connected in.
____________________
Past:NRG50,AF1125(x2),NSR125RR,ZZR250,CX500,VFR400,KR1S,ZZR600(x2),CB400N,YZF1000(x2),KH125,Z200,FX400R,CBR954RR(x2)GPZ500S,GT550,VFR750F(x2),RD350N,XR650R,CBR600F,CB250,KDX250,YZF750R,CRM250,400EXC,KLR650,TTR600RE,DR350S,R100GSPD,RGV250,VMAX1200,DL650,KZ750 Present:G650XC,C12,CRF450X,1190ADV

[Derivative]

[doggone]

Probably a good idea to back up router settings now in case of later brain fade regarding the port forwarding.
I have three IP cams and when the router had to be reset for some mysterious reason it was a sod to relearn the forwarding done 2 or 3 years before.

[P.]

Have you exposed port 3389 to the internet...

[Derivative]

[CaNsA]

I use a random external port and forward that to 3389 internally.

[P.]

If you really want rdp... Set up an Rd gateway on 443 and get that to forward the request for rdp after authentication. Fuck exposing that. A scan using nmap will tell you the service name even if you've changed the port. Unsure that's what you mean CaNsA?

[CaNsA]

https://i.imgur.com/AvALIJl.jpg

[P.]

Interesting. Have you nmap'd from an external machine to your public IP? It'll say what service is on what port. Keen to know what you are using if not. I just vpn to home.

[CaNsA]

Nopes.

It's only active when I'm out of the country.

If i was worried about security I would sort out a VPN, but cba.

[Rogerborg]

YUNO ssh and then tunnel anything you like over it?
____________________
Biking is 1/20th as dangerous as horse riding.
GONE: HN125-8, LF-250B, GPz 305, GPZ 500S, Burgman 400 // RIDING: F650GS (800 twin), Royal Enfield Bullet Electra 500 AVL, Ninja 250R because racebike