Blue Iris Mobile App WAN connection (HTTPS) issue

[mraidas]

Hey guys,

To make long story short I have made step by step photos of my configuration that leads to prefect LAN connection on my mobile phone and no connection over WAN network HTTPS (when I'm in the city).

Please advice me future where is a problem and how shall I fix it. Thank you in advance

PS. Blue Iris mobile app Version 2.0.71. I'm using Huawei Mate 20 Pro

 

[TonyR]

Since you have not mentioned a VPN (recommended), have you forwarded the required ports (not recommended) in your router?

BTW, redacting all those LAN (private) IP's like 192.168. X.X is not necessary and is extra work, we all have similar.

 

[mraidas]

Since you have not mentioned a VPN (recommended), have you forwarded the required ports (not recommended) in your router?

BTW, redacting all those LAN (private) IP's like 192.168. X.X is not necessary and is extra work, we all have similar.

Hi TonyR, thank you for your input.

Is it that possible that my Technicolor TG789vac v2 doesn't have a VPN? how is that possible now days? When the Internet provider came to install a new router I saw on the box VPS and I thought that's a VPN . do I need now new router?
Yes I did port forwarding of my computer IP so I could finish setting up my BI Web server remote access wizard (picture 7). I used Stunnel to get my WAN IP - > https and there was requirement to do port fowarding. Didn't know that there is another way around.

Yes , redacting Lan IP's is no need thank you

 

[SouthernYankee]

looking at the specs for your router Technicolor TG789vac v2 I do not see that it supports for OpenVPN. A lot of routers provided by ISP companies do not support VPN. Are you using the phone component of the TG789vac ? It may be possible to put your router into bridge/pass thru/ by pass mode. This mode will turn your router into a Modem only. The data is then passed to a second router that does the router work. So you can purchase your own router that will support OpenVpn. I use an ASUS router. You will have to dig around in the modem documentation or call the ISP customer support .

=======================================
My general VPN post - short version

There are two types of VPN, do not get them confused.
The type depends on where the traffic conversation (traffic) originates

1) origination: local home network, destination the internet.
This type of VPN is purpose to hides your activity from the internet, it is outbound, it normally costs a monthly fee to use. Direction is from your home PC to the internet, going to your bank, google, porn sites,,,, this not what you want. This VPN uses a VPN server that is in the middle of your communications.

2) Origination: the internet world wide web, destination: your home network.
This VPN type is used to provide a secure connection onto your local network, in bound to you local home network, from your office computer, your cell phone in your car, tablet at the coffee shop.. This is what you want, it does not have a monthly fee and is normally completely free. OpenVPN is this type of VPN.

If you home internet provider is a cellular network, then DDNS (dynamic Domain Name System) may not work, the DDNS is needed for most Inbound VPN services (OpenVpn) to get your home IP address (it is not static) so OpenVPN may not work for you.

 

[reflection]

Hi TonyR, thank you for your input.

Is it that possible that my Technicolor TG789vac v2 doesn't have a VPN? how is that possible now days? When the Internet provider came to install a new router I saw on the box VPS and I thought that's a VPN . do I need now new router?
Yes I did port forwarding of my computer IP so I could finish setting up my BI Web server remote access wizard (picture 7). I used Stunnel to get my WAN IP - > https and there was requirement to do port fowarding. Didn't know that there is another way around.

Yes , redacting Lan IP's is no need thank you

You are correct, but make sure you only forward port 8080 on your router to your BI server. Make sure stunnel is setup on your BI machine to listen on port 8080. Your BI app on your phone will build an TLS VPN tunnel to your BI machine.

 

[Kev79]

You are correct, but make sure you only forward port 8080 on your router to your BI server. Make sure stunnel is setup on your BI machine to listen on port 8080. Your BI app on your phone will build an TLS VPN tunnel to your BI machine.

Bi App will build a TLS VPN tunnel? I had to install open VPN on my phone to talk to my Pfsense router to get a VPN connection to work.

 

[reflection]

Bi App will build a TLS VPN tunnel? I had to install open VPN on my phone to talk to my Pfsense router to get a VPN connection to work.

Absolutely. Check out my post here: Noob Question on Router & Switch

Your way works too. You are doing the 3rd diagram in my post. You have a port open on your pfSense box for OpenVPN.