Port forwarding through a double-NAT

I'm having issues figuring out port forwarding through a double NAT setup and need some guidance.

Currently, I've got a Google WiFi mesh as my primary router running the 192.168.0.1/24 subnet. Behind this, I've got an Asus RT-N66U at 192.168.0.20 running the 192.168.2.1/24 subnet. The Asus router is running Asuswrt-Merlin custom firmware 380.70 (the latest as of this post), and I'm connecting to the PIA CA Montreal server with the router's built-in OpenVPN client. This works fine. Behind the Asus router, I've got an Ubuntu server (at 192.168.2.5) as well as my desktop (for now, until configuration is complete). I've verified this router-VPN setup works correctly (the router status says VPN is connected, PIA's website says I'm protected, etc.).

I ran the bash script for requesting a forwarded port  on the Ubuntu server, and received the port number. I've set up a simple web server hosted on that port, and I've forwarded that port from the Asus router to the Ubuntu server. However, I can't access the web server using the public-facing VPN address. The article says I won't be able to access it from behind the VPN, so I switched my desktop back to my main subnet, still no dice. I've also tried other machines on the main subnet, as well as my phone's LTE network.

Am I missing a configuration step? I wouldn't think I'd need to forward the port from my main router to the secondary router since the port is going straight from the VPN address to the secondary router (as the VPN client), but I can try it.

Thanks in advance.

Comments

  • Hello! 

    Unfortunately, we do not directly support the Mesh Network or router configuration. This does not mean connecting is impossible, we are not able to assist.  You can also look into our Forums Page (which yo have posted here on) or use a search engine like Google to see if anyone has successfully set up our service this way. Please let me know if there is anything else I can assist you with! Thank you for your patience and for allowing us to serve you for your VPN needs.
Sign In or Register to comment.