D-Link Forums
The Graveyard - Products No Longer Supported => Routers / COVR => DIR-855 => Topic started by: Grunker on January 19, 2014, 12:56:43 PM
-
Hi there,
Tunngle Network tells me I should forward the ports on my router, which sounded like an easy enough job. I logged into my router and told it to forward port 11155.
Problem is, it doesn't work. Tunngle and PFPortChecker agree; the ports are not open. After fiddling around with it for a while, I tried putting the computer I work at in DMZ-mode. Still no luck; port not reachable.
Anybody got a guess what my issue might be? I tried turning off Windows Firewall and Microsoft Security Essentials both. No dice.
On a Windows 7, 64bit.
-
Link>Welcome! (http://forums.dlink.com/index.php?topic=41537.0)
- What Hardware version is your router? Look at sticker under router.
- Link>What Firmware (http://forums.dlink.com/index.php?topic=47512.0) version is currently loaded? Found on the routers web page under status.
- What region are you located?
Internet Service Provider and Modem Configurations
- What ISP Service do you have? Cable or DSL?
- What ISP Modem Mfr. and model # do you have?
- What ISP Modem service link speeds UP and Down do you have?
- Check ISP MTU requirements, Cable is usually 1500, DSL is around 1492 down to 1472. Call the ISP and ask. Link>Checking MTU Values (http://forums.dlink.com/index.php?topic=53008.0)
- For DSL/PPPoE connections on the router, ensure that "Always ON" option is enabled.
Router and Wired Configurations
Some things to try: - Log into the routers web page at 192.168.0.1. Use IE, Opera or FF to manage the router.
- Turn off ALL QoS (http://vonage.nmhoy.net/qos.html) or Disable Traffic Shaping (DIR only) GameFuel (DGL only and if ON.) options, Advanced/QoS (http://en.wikipedia.org/wiki/Quality_of_service) or Gamefuel. For the DGL-5500, review this for Streamboost information and settings: Furry's DGL-5500 Review (http://forums.dlink.com/index.php?topic=55136.0)
- Turn off Advanced DNS Services if you have this option under Setup/Internet/Manual or under Setup/PARENTAL CONTROL/Set to>None: Static IP or Obtain Automatically From ISP.
- Enable Use Unicasting (compatibility for some ISP DHCP Servers) under Setup/Internet/Manual.
- Turn on DNS Relay under Setup/Networking. Link>Finding Faster DNS Addresses using Name Bench (http://forums.dlink.com/index.php?topic=53222.0)
- Setup DHCP reserved IP addresses for all devices ON the router. Setup/Networking. This ensures each devices gets its own IP address when turned on and connected, eliminates IP address conflicts and helps in troubleshooting and maintain consistency for applications that need to connect as well as mapped drives.
- Ensure devices are set to auto obtain an IP address.
- Set Firewall settings to Endpoint Independent for TCP and UDP under Advanced/Firewall. Enable or Disable SPI (http://en.wikipedia.org/wiki/SPI) to test.
- Enable uPnP (http://en.wikipedia.org/wiki/Upnp) and Multi-cast Streaming (http://en.wikipedia.org/wiki/Multicast) under Advanced/Networking. Disable uPnP for testing Port Forwarding rules.
- WAN Port Speed set to Auto or specific speed? Some newer ISP modems support 1000Mb so manually setting to Gb speeds can be supported by the router. Advanced/Advanced Networking/WAN Port Speed
- Set current Time Zone, Date and Time. Use an NTP Server (http://forums.dlink.com/index.php?topic=48695.0) feature. Tools/Time.
-
Hi! Thanks for the quick response!
- Firmware is 1.12EU
- Firmware loaded is 1.24EU (I updated after your response to try if it helped, no dice)
ISP
- Cable
- I'm not sure about this question. I just have the D-LINK 855, and I plug it into the wall
- Speed i 40/40
- Not sure about my MTU value. Your guide says to ping specific sites, but since I don't have a problem accessing sites, what should I do, specifically?
- Not sure how to do that, can you direct me to the right menu?
Router
- I tried toying around with some of those settings. Didn't seem to work. I'm willing to try one more time if I've done something incorrectly.
-
- Was a Factory Reset performed before and after any firmware updates then set up from scratch?
- If this modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT (http://www.practicallynetworked.com/networking/fixing_double_nat.htm) and How NAT Works (http://cognitiveanomalies.com/cisco-nat-how-nat-works/). To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ.
Example of a D-Link router configured for PPPoE with ISP Modem bridged: PPPoE Configuration on Router (http://forums.dlink.com/index.php?topic=56344.msg219023#msg219023) - Set Firewall settings to Endpoint Independent for TCP and UDP under Advanced/Firewall. Enable or Disable SPI (http://en.wikipedia.org/wiki/SPI) to test.
- Enable uPnP (http://en.wikipedia.org/wiki/Upnp) and Multi-cast Streaming (http://en.wikipedia.org/wiki/Multicast) under Advanced/Networking. Disable uPnP for testing Port Forwarding rules.
How are you determining that the ports are not working? If you are using a port checker, you have to be actively using the ports to get a positive accurate result.
-
1. Yes.
2. No 192.-adress next to IP Adress (address is 10.10.3.197). Inputting the IP address in DMZ mode gave me this error message: "DMZ Adress should be within LAN subnet".
3. Didn't help.
4. Didn't help.
I tried on another router as well (I have an old Netgear 150 lying around). Didn't work either. Could my ISP be blocking the port?
-
Ok, there's your problem, you seem to have a double NAT condition between your router and ISP service. You need to see if you can get a public IP address on the 855 router, i.e. ##.##.###.###.### or see if you can use the DMZ on the ISP modem to work.
-
Ok, there's your problem, you seem to have a double NAT condition between your router and ISP service. You need to see if you can get a public IP address on the 855 router, i.e. ##.##.###.###.### or see if you can use the DMZ on the ISP modem to work.
Thanks a bunch! While I'm glad that you've identified my issue, could you tell me in more detail what's up? That post sounded like technobabble to me, sorry :)
-
To properly get port fowarding to work, the router needs a public IP address and not a private IP address. Your ISP service or modem is getting the pubic IP address and is handing out a private IP address to the 855 router. This will inhibit correct Port Forwarding as the router can not translate a private IP address to a private IP address on the 855. The ISP modem or service is doing this already.
You get to get into a Single NAT condition on the 855 router or see if you can have the ISP put the 855 into the ISP modems DMZ, this should resolve any port forwarding issues.
-
You get to get into a Single NAT condition on the 855 router or see if you can have the ISP put the 855 into the ISP modems DMZ, this should resolve any port forwarding issues.
I will try the latter tomorrow. Is the first something I can fix myself?
-
not unless you can gain access to the ISP modem..
-
not unless you can gain access to the ISP modem..
Alright. I'll call the ISP tomorrow and tell them what you told me. Thanks a bunch!
-
Let us know how it goes...
-
Let us know how it goes...
Well, I called them today.
They told me I'd need a a static rather than a dynamic IP address for the router. Gonna cost me an extra $4 each month they say. Is that normal practice?
Anyway, I told him "yes", and he will be calling me in two hours for the configuration. Hope that works.
-
Alright, they set me up with a new address. Now Tunngle works and gives the green light on my ports. I can play the games I need and, as such, the problem is solved! Thank you very much!
However PFPortChecker can't even ping my router now ???
-
There maybe a WAN Ping Respond option under Advanced/Advanced Networking? Is that enabled? Not sure if this will help any.
Glad the got it working. Enjoy