DL2 and DDNS

167 views
Skip to first unread message

jalbano

unread,
Dec 12, 2011, 4:04:05 PM12/12/11
to Resol Vbus
Hi all,

I am trying to configure a DL2 setup so that I can hit the DL2
remotely with a fixed url.

1. I have a DL2 connected to a DLink router and have DDNS working such
that I can at least hit the router admin web page using the DDNS url.
2. I have setup port forwarding on the router to route 443 to the IP
that the router gave to the DL2 (not sure I'm doing this right though
-- should I be using TCP or UDP?).

When I try to hit mysubdomain.dlinkddns.com:443, nothing happens --
just times-out.

Any suggestions and/or advice?

Thanks in advance.

John

John Downe

unread,
Dec 12, 2011, 6:09:12 PM12/12/11
to resol...@googlegroups.com
John, have you set the DL2 to have a fixed IP address, ie not using
DHCP, then forward port 443 to that IP address in the DLink otherwise
the DL2 may get a different IP address at different times.
Can you access the DL2 from the LAN directly using port 443? Ie not
going out to Internet and back
Have you tried a different browser as using 443 browsers sometimes get
upset about lack of certificates.
Are you trying https://mysubdomain....... (ie "s" for SSL / Secure)
this goes with port 443

John

> --
> You received this message because you are subscribed to the Google Groups "Resol Vbus" group.
> To post to this group, send email to resol...@googlegroups.com.
> To unsubscribe from this group, send email to resol-vbus+...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/resol-vbus?hl=en.
>

Chester Wood

unread,
Dec 12, 2011, 6:12:08 PM12/12/11
to resol...@googlegroups.com
Should be TCP but no harm in forwarding both. 

Don't rely on the DHCP address that the router assigns to the DL2, it could change. 
Instead, configure the DL2 networking with a fixed static address within the appropriate range for the router (an address that is not in the range that the router uses for DHCP).
Then set up the port forwarding for that address.

jalbano

unread,
Dec 15, 2011, 7:23:05 AM12/15/11
to Resol Vbus
John,

Thanks for the reply. My router let's me "reserve" an IP based on the
mac address of the device -- so I'm sure it has the same IP each time,
but I'll also try using the DL2's approach -- although it wasn't quite
clear to me what to plug in for some of the parameters on that screen.

1. I can't even access the DL2 from the LAN using 443 as you suggested
trying.
2. I tried several browsers (firefox, chrome, safari) (yes, I'm on a
mac)
3. I tried https -- no change

John

On Dec 12, 6:09 pm, John Downe <j...@burstowcottage.co.uk> wrote:
> John, have you set the DL2 to have a fixed IP address, ie not using
> DHCP, then forward port 443 to that IP address in the DLink otherwise
> the DL2 may get a different IP address at different times.
> Can you access the DL2 from the LAN directly using port 443? Ie not
> going out to Internet and back
> Have you tried a different browser as using 443 browsers sometimes get
> upset about lack of certificates.

> Are you tryinghttps://mysubdomain....... (ie "s" for SSL / Secure)


> this goes with port 443
>
> John
>

John Downe

unread,
Dec 15, 2011, 8:03:07 AM12/15/11
to resol...@googlegroups.com
So if you just try to browse to http://192.168.n.nnn on your LAN do
you get the DL2? Where n.nnn is your DL2 IP.
On mine, that works as does https://192.168.n.nnn:442 where 442 is the
port I have allocated instead of 443.
John

jalbano

unread,
Jan 6, 2012, 12:53:25 PM1/6/12
to Resol Vbus
Sorry, this project got back-burnered for a bit -- back at it now --
with a fresh head -- and now with an even more basic question...

Let's say I do get this dlink router configured correctly so that when
it is connected directly to the internet, I can access the DL2
remotely using DDNS.

If I then take that dlink router and put it behind another router (I
have my reasons) -- it will break unless I also port-forward on THAT
router -- correct?

Thanks
John

Michael Lewis

unread,
Jan 6, 2012, 1:53:34 PM1/6/12
to Resol Vbus
Yes.
Using your terms for the two routers, you must forward the port on the
other router to the dlink router.
More precisely, the router closest to the outside world (cable modem,
DSL, etc), must forward traffic for the DL2 to the router between it
and the DL2, not directly to the DL2.

John Downe

unread,
Jan 6, 2012, 2:07:02 PM1/6/12
to resol...@googlegroups.com
This sounds quite complicated and I must admit "stacking" routers like
this is not something I fully understand - are both providing DHCP
function? Are they on the same IP address range? Do you really want
the DLink router to just provide Ethernet switch capabilities in which
case it's router functions need to be turned off which would be much
simpler I would have thought

jalbano

unread,
Jan 6, 2012, 2:32:28 PM1/6/12
to Resol Vbus
Thanks for the replies -- I should have explained the reasoning
(flawed, as it might be)...

I am trying to help a friend that plans on installing several of these
systems and wants to be able to...

1. Access them remotely -- which means DDNS so that when they lose
power and come back on, they still have the "same ip"
2. Not have to touch the homeowner's existing cable-modem/router
(assuming they have one) -- other than plugging something in

So, the plan was to get a cheap router and setup DDNS on that and
connect the DL2 to that and then plug that into the homeowner's
router.

But, it seems like that was never going to work.

How do solar installers deal with this?

Thanks
John

Michael Lewis

unread,
Jan 6, 2012, 2:34:22 PM1/6/12
to Resol Vbus
There are valid security reasons for having a network address
translation subnet behind another NATted subnet. Consider that your
DL2 is just part of a command and control system that operates things
like heating, renewable energy collection, batteries, inverters, and
perhaps other expensive, powerful equipment. It can be argued that
such a system needs protection from the computers on your home network
that surf the net, read email, watch movies, etc. Plus, the
additional layer of security might keep an outsider from gaining
control over the system. If we assume the original poster has these
or similar reasons for putting one router behind another, then no, he
would not want just a switch.
Yes, each router will have its own IP address subnet, perhaps with
DHCP, but definitely not sharing an IP address range. The two ranges
must be distinct and not overlap. For example, one router could have
an external WAN address of 24.34.45.56 as assigned by the ISP, with an
internal LAN
address of 192.168.1.1 and host a range from 192.168.1.2 to
192.168.1.254. The second router then would have to use a "WAN"
address in the first router's LAN pool, such as 192.168.1.2, and could
have a LAN address of 192.168.2.1 with a LAN pool of 192.168.2.2 -
192.168.2.254. The DL2 might have an address of 192.168.2.2 in this
case.
In order to access the DL2's https secure server from the Internet,
port 443 would need to be forwarded on the first router to the second
router, which then would have to forward it to the DL2, i.e.
124.34.45.56:443 --> 192.168.1.2:443 --> 192.168.2.2:443.
I would like to add that several of the home market routers I have
used have the ability to lock an IP address to a MAC address, but fail
to do so every time. Therefore, I manually assign addresses that are
critical, such as the routers, servers, DL2, and Ethernet control
systems. It is fine to let the routers assign addresses via DHCP to
user computers.

On Jan 6, 2:07 pm, John Downe <j...@burstowcottage.co.uk> wrote:
> This sounds quite complicated and I must admit "stacking" routers like
> this is not something I fully understand - are both providing DHCP
> function? Are they on the same IP address range? Do you really want
> the DLink router to just provide Ethernet switch capabilities in which
> case it's router functions need to be turned off which would be much
> simpler I would have thought
>

John Downe

unread,
Jan 6, 2012, 2:48:22 PM1/6/12
to resol...@googlegroups.com
I don't think they ( installers) do! When I had quotes for and
installed the solar thermal system I was on my own on the DL2 front.
I don't think you can avoid "messing" with your client's existing
router as you have concluded without a second dedicated Internet
connection for example through a 3G cellular one but that doesn't
sound very attractive either.

Michael Lewis

unread,
Jan 6, 2012, 2:51:05 PM1/6/12
to Resol Vbus
John,
You are correct in that your plan cannot work. The router that is
connected to the ISP is the one that must have dynamic DNS working, as
the ISP can change the IP address at will. While mine can, as long as
I have power to my router and modem, the IP address does not change,
but many ISPs do change IPs often. You simply have to touch that
router.
Most home routers have built in web pages for configuration. They are
all fairly similar, in that once you know what needs to be done, it is
just a matter of finding what that particular unit's manufacturer
calls it and where in the structure the settings are. Usually, the
default password will grant access.
Sorry, but I can't say what installers do, for I was on my own.
Michael

jalbano

unread,
Jan 6, 2012, 3:09:35 PM1/6/12
to Resol Vbus
Wrapping this up...

Thanks so much for all of the comments -- I believe I understand all
of the issues now and will need a plan "b" <g>.

John
Reply all
Reply to author
Forward
0 new messages