Gelöst
Huawei 5G CPE Pro 2 - Dynamic DNS, Brückenmodus Unifi Security Gateway
vor 4 Jahren
Hi Gemeinde,
da ich ein DoppelNAT mit den nachgelagerter Netzwerken (Unifi Security Gateway (USG) & Unifi Switch) vermeiden möchte habe ich in dem mobilen DSLfunkrouter Huawei 5G CPE Pro 2 den Brückenmodus (CLAT) aktiviert.
Szenario:
Huawei 5G CPE Pro 2 => Unifi Security Gateway
192.168.0.1 (WAN1) => 192.168.1.1 (WAN1)
Bei der Konfiguration von DynamicDNS in der USG erhielt ich vom Support Unifi die Antwort, dass das NAT bzw. der Brückenmodus anscheinend nicht korrekt funktioniert, weshalb keine öffentliche IP durchgereicht wird:
UI Support (Ubiquiti Help Center)
Feb 1, 2021, 19:23 UTC
Thanks for the screenshots and the support file.
It looks like the USG is connected behind a NAT. Hence, the issue. The USG needs to have the public IP directly assigned to it for port-forward and DDNS to work directly.
You need to configure the upstream router/modem in the bridge mode so that the USG can acquire the public-facing IP directly.
The best way to avoid the double NAT scenarios is, have the ISP router/modem in bridge mode, this will disable NAT on the device and essentially make it transparent on the network so your router will receive the public IP address and perform the NAT function on its own. One way to compensate for double NAT is to set up separate port forwarding rules on each device so that incoming traffic is shepherded through both layers of NAT. So for example, on the first NAT device (the one closest to your Internet connection) forward the port(s) you need to the IP address of your router's WAN port. Then on your router, forward the same port(s) to the address of the device you need to reach. If you have a lot of ports to forward, doing them individually can get a bit cumbersome, so a simpler method is to configure the first NAT device to make your router's IP address the DMZ. This will hustle all incoming traffic through the first layer of NAT no questions asked, but when it hits your router it will be filtered or forwarded as appropriate.
Hope that's helpful. If you have any other questions, please let us know!
Thanks!
Best,
UI Support
Ubiquiti Inc.
Meine Frage ist daher ob eventuell das Internetprofil nicht korrekt funktioniert (siehe Screenshot Huawei_Internetverbindung.jpg, Eingaben von https://www.telekom.de/hilfe/mobilfunk-mobiles-internet/mobiles-internet-e-mail/apn-mobilfunk/wie-lauten-die-apn-fuer-mobilfunk?samChecked=true) oder ob woanders der Wurm liegt
Danke im Voraus
Viele Grüße
Daniel
3190
13
