Cumulus Support

I have an IP cam which I can access via my LAN or via the Internet, from anywhere in the world. I am not on a static IP, but I can log into the cam suppliers website, which keeps a record of my current WAN IP and redirects me to my cam IP. I guess the way it works, is that the firmware in the cam, constantly reports back to the site, so the site knows my current IP.

Can I access C MX in a similar way, from the Internet beyond my LAN please?

You can, but it means opening ports in your firewall which is not advisable.

The CMX admin interface is designed only for local LAN use as it is has no security, so if you did open the ports you have no way of locking it down, which could cause all sorts of problems e.g. malware, hacking etc.

And what software are you using to run a weather station with Cumulus at away location via the internet?

water01 wrote: ↑Fri 06 Nov 2020 1:14 pm You can, but it means opening ports in your firewall which is not advisable.

The CMX admin interface is designed only for local LAN use as it is has no security.....

Simple Solution is a good router that will give you a secure VPN.

Having a Dynamic IP or even being behind CG-NAT is not an issue now as the likes of DrayTek have broker services that map the CG-NAT around & manage the Dynamic IP Issue.

Phil23 wrote: ↑Wed 26 May 2021 9:37 am

water01 wrote: ↑Fri 06 Nov 2020 1:14 pm You can, but it means opening ports in your firewall which is not advisable.

The CMX admin interface is designed only for local LAN use as it is has no security.....

Simple Solution is a good router that will give you a secure VPN.

Having a Dynamic IP or even being behind CG-NAT is not an issue now as the likes of DrayTek have broker services that map the CG-NAT around & manage the Dynamic IP Issue.

I know this is a bit of an old post but I echo this sentiment. I have an old Asus router with Merlin firmware on it and it runs an OpenVPN server without a hitch. I can access it from my mobile phone using the OpenVPN app as well as any pc I'm on. Works like a charm and adds only one extra step and it a bit more secure than opening up ports (which I used to do but I was familiar enough with setting up my opens ports to restrict which IP addresses could access it).

BigOkie wrote: ↑Mon 19 Jul 2021 2:00 pm I have an old Asus router with Merlin firmware on it and it runs an OpenVPN server without a hitch. I can access it from my mobile phone using the OpenVPN app as well as any pc I'm on. Works like a charm....

Maybe that is a solution for my planned remote CMX install.

Presume your Router is on a true public IP address.
Is it Static or Dynamic?

As far a the phone is concerned, I'd guess it would be on a CG-NAT connection; that's become the general trend out here in Aus.

So essentially If I could make the remote rPi maintain a persistent connection to my router as a VPN Client, most of my problems would be solved.
(The remote Pi will be on a 4G wireless internet).

You might find Zerotier of interest. I've found it much easier and more useable than traditional VPNS.

Dave

Phil23 wrote: ↑Mon 19 Jul 2021 9:18 pm

BigOkie wrote: ↑Mon 19 Jul 2021 2:00 pm I have an old Asus router with Merlin firmware on it and it runs an OpenVPN server without a hitch. I can access it from my mobile phone using the OpenVPN app as well as any pc I'm on. Works like a charm....

Maybe that is a solution for my planned remote CMX install.

Presume your Router is on a true public IP address.
Is it Static or Dynamic?

As far a the phone is concerned, I'd guess it would be on a CG-NAT connection; that's become the general trend out here in Aus.

So essentially If I could make the remote rPi maintain a persistent connection to my router as a VPN Client, most of my problems would be solved.
(The remote Pi will be on a 4G wireless internet).

True public and while technically my ISP connection is dynamic, it rarely changes (maybe once a year). The ASUS router itself has it's own DDNS service and when it notices an IP changes it re-registers it so you can always have a named address and don't have to remember to check your IP address to see if it's changed.