Remote access SimpleShare drive setup

[jafi]

Hi all,

I’m trying to set up the iShare function on my Simpletech SimpleShare NAS drive. The iShare function allows you to access the SimpleShare drive remotely via a dynamic URL setup through registering the drive with www.simpleshare.com.

Disclaimer: I’m not a networking expert. Everything I'm trying is from reading documentation and googling. This is the first I've ever tried to set up port forwarding, remote access etc. I'm pretty newbie to routing stuff.

My setup is:
Qwest DSL with Qwest.net as my ISP (no MSN), cisco 678 ADSL modem, Linksys wrt54g router. The SimpleShare drive is plugged into the Linksys, along with a desktop computer and a network enabled HP printer. I also have a laptop that connects via the Linksys wi-fi.

My ISP is Qwest.net – according to online info they do not block port 80, I found a site (http://www.planetdns.net/testserver/list/67/page/75) and it returns :
Below are the results of your server test. If you have any questions or comments regarding these results please do not hesitate to e-mail our support at support@planetdns.net

Web Server (PlanetSiteServer)


TCP Port: 80
Service Status: OK


Greeting: httpd
Description: The service is working correctly and is available from the entire internet.

My Linksys is connected to the the 678, under advanced routing it says gateway operating mode lan and interface to lan & wireless. The linksys firewall is enabled, though I did uncheck block anonymous requests while trying to set this up.

I forwarded the traffic on port 80 from my Cisco 678 (10.0.0.1) to my Linksys wrt54g (10.0.0.2) (local address of 192.168.1.1)
Using the following commands:
Cbos> en
cbos#set nat entry add 10.0.0.2 80 tcp

cbos#set nat entry add 10.0.0.2 80 udp

cbos# write
cbos# exit

cbos> show nat
NAT is currently enabled

Port Network Global
eth0 Inside
wan0-0 Outside 71.208.56.9
vip0 Outside
vip1 Outside
vip2 Outside

Local IP : Port Global IP : Port Timer Flags Proto Interface
10.0.0.2:1026 71.208.56.9:27217 21270 0x00246 tcp eth0 wan0-
0
10.0.0.2:4026 71.208.56.9:11455 60570 0x00146 tcp eth0 wan0-
0
10.0.0.2:4139 71.208.56.9:15545 67500 0x00246 tcp eth0 wan0-
0
10.0.0.2:1030 71.208.56.9:18258 83940 0x00246 tcp eth0 wan0-
0
10.0.0.2:1035 71.208.56.9:18278 84420 0x00246 tcp eth0 wan0-
0
10.0.0.2:80 *****:80 0 0x00041 tcp eth0
10.0.0.2:80 *****:80 0 0x00041 udp eth0
10.0.0.2:1357 71.208.56.9:18611 86340 0x00046 tcp eth0 wan0-
0


On the wrt54g port forwarding is set port 80 to 192.168.101 ( the address of the simpleshare drive).
I realize this is DHCP and could change but if I can get this to work then I’ll assign a static ip like 192.168.1.50 or similar (DHCP is 100 – 149).

After setting the port forwarding if I type http://10.0.0.2 in the web browser it goes to the simpleshare drive – not to the Linksys any longer. I assume this is correct since I’m forwarding all port 80 traffic to the simple share.

I then fire up the simpleshare browser interface. It prompts for the info from registering the simpleshare drive at simpleshare.com (they give you a numerical key and a dynamic url in the form of xxxx.simpleshare.com, you also record the MAC address of the drive, I have verified the correctness of all entered info several times)

After prompting for the ishare port number (80), the web site address name xxxx.simpletech.com and registration key 12345 my simpleshare then tests the port

I see the outgoing request in the Linksys log:
Lan ip destination url/ip service/port number

192.168.1.101 66.237.65.185 www

I don’t see an incoming response in the Linksys log.

I switched from port forwarding to DMZ putting 192.168.101 as the host IP address

I see the outgoing request:
Lan ip destination url/ip service/port number

192.168.1.101 66.237.65.185 www

The only incoming I see is:
Source IP Destination Port Number
64.233.169.104 2900
64.233.169.104 2924

Which resolve to google (which begs the question of why do I having incoming requests from google? I have a couple of disabled google firefox extensions but I don’t have google toolbar or desktop etc. installed).

So I am going crazy trying to understand why I can’t get this to run since Qwest does not appear to block port 80, port 80 appears to be forwarding, the outgoing request is there but I never get an incoming response.


Ideas????

Thanks!!!

 

[Zakkas]

What you should really do first off is to forward all traffic to the WAN port on your Linksys router. Basically allow all traffic through the Cisco. Having 2 NAT devices is never a good thing as it causes chaos on outgoing/incoming connections. Then you'll want to reconfiure the linksys to use a different port than port 80 for accessing its config page (such as 8080).

When you connect to your webserver from the outside you want to connect to the WAN ip address of your Cisco modem (71.208.56.9).

 

[jafi]

Thanks,

>>>What you should really do first off is to forward all traffic to the WAN port on your Linksys router.

Do I remove the port 80 entries from the 678 and do a
cbos#set nat entry add 10.0.0.2 ? (The web page where I found this notes that reduces security)



>>Basically allow all traffic through the Cisco. Having 2 NAT devices is >>never a good thing as it causes chaos on outgoing/incoming >>connections.

How do I check that all traffic is coming through the Cisco?

>>Then you'll want to reconfiure the linksys to use a different >>port than port 80 for accessing its config page (such as 8080).

The managment port for the wrt54g is listed as 8080 under administration/management - is there somewhere else I'd look for the port 80 setting?

>>When you connect to your webserver from the outside you want to >>connect to the WAN ip address of your Cisco modem (71.208.56.9).


I can't specify the ip address to connect. To activate the iShare feature the software does a query to the simpleshare system which sets all that up using a dynamic URL jafi.simpleshare.com to connect.

All I can do is specify the port the communication is supposed to happen over.

 

[Zakkas]

Do I remove the port 80 entries from the 678 and do a
cbos#set nat entry add 10.0.0.2 ? (The web page where I found this notes that reduces security)

Yes you'll want to remove the old NAT entry and create a new NAT entry forwarding all traffic to the Linksys routers WAN IP address. Yes it forwards all traffic internally but in your case you have another router on your internal network with firewall/nating capabilities.

Make sure you leave the port forwarding statement for your webserver in the Linksys router though.

The managment port for the wrt54g is listed as 8080 under administration/management - is there somewhere else I'd look for the port 80 setting?

From what I read on linksys' website it doesn't look like you can change the management port for the internal IP address of the Linksys router. You'll just have to leave that for now.

I can't specify the ip address to connect. To activate the iShare feature the software does a query to the simpleshare system which sets all that up using a dynamic URL jafi.simpleshare.com to connect.

All I can do is specify the port the communication is supposed to happen over.

Thats ok, so to test the new configuration from an outside computer see if you can connect to jafi.simpleshare.com or "http://71.208.56.9:80."