R7450 Wake on Internet

Question

I currently have an R7450 router and CM1000-100NAS modem.

I would like to be able to remotely access my Linux Mint (Ubuntu) server via Remmina while traveling but don't want the PC to be left on all the time. I also do currently have a VPN, but do not have this option enabled in the router.

Ideally, powering on the PC could be done through my Android phone but I also have a Macbook. Either one works for now.

I have not found any clear, and more importantly, secure method to open a Wake-on-Internet connection.

Options I've seen:

1. Set up a DMZ in router settings (seems like a terrible idea, being that this is my primary PC)

2, Set up some sort of SSH tunnel via ethtool(?) on the Linux server then use an Android SSH client?

3. Install Telnet and set up a Static ARP IP (still seems like another risky option)

4. VPN in router settings?

I have Wake-on-LAN setup and running fine but it's obviously useless when I leave the home network.

Any clear recommendations around what approach makes the most sense with my current hardware would really be appreciated!

antinode · Answer

I don't use WoL, so I know nothing, but...

> Ideally, powering on the PC could be done through my Android phone but
> I also have a Macbook. Either one works for now. [...]

But that's when those devices are on your LAN, not when they're
remote, right?

> Options I've seen: [...]

"seen" where? (How am I supposed to learn everything about this
stuff without helpful links?)

> 1. Set up a DMZ in router settings (seems like a terrible idea, being
> that this is my primary PC)

I'd avoid DMZ on general principles, but it's not obvious to me how
you'd get anything like the WoL magic packet through that path.

> 2, Set up some sort of SSH tunnel via ethtool(?) on the Linux server
> then use an Android SSH client?

How would that work if "the Linux server" is powered off? SSH to
what?

3. Install Telnet [...]

On what? And then use it to talk to what?

> [...] and set up a Static ARP IP (still seems like another risky
> option)

I'd need more details before I could pretend to understand that
scheme. (Because I know _what_?)

> 4. VPN in router settings?

Perhaps. My VPN expertise is also negligible.

My (limited/uncertain) understanding of WoL is that you really want a
device with an always-on presence on the LAN, so that it could broadcast
a (magic) packet which would get to your sleeping device. It sure would
be handy if your router (which is always on, and on your LAN) could do
this. Sadly, so far as I know, no Netgear consumer router offers such a
feature.

There could easily be some clever scheme (of which I'm ignorant)
which would let you do this without adding hardware. With my current
burden of ignorance, however, I'd be looking to add something like a
Raspberry Pi (Zero W?), to leave running on the LAN. I haven't looked
(so I know -- that's right -- nothing), but I'd bet that there's some
WoL software available there, and you should be able to SSH into that.

I'll assume that you know enough not to enable port forwarding from
_external_ port 22 to anything, but I can explain if you don't.

baconneggs15 · Answer

Thanks for the quick reply&nbsp;antinode&nbsp;&nbsp;Here are sources for the aforementioned "options":1.&nbsp;DMZ setup for WOI via Android2. SSH WOI from Linux to Linux3. Telnet into router for ARP entry4. VPN&nbsp;sounds promising but still unsure if that can be done for my needs through Netgear's feature.Android is giving me general parsing errors trying to import the 'client_phone.ovpn' file Netgear is spitting out.&nbsp;I'll keep trialing the OpenVPN soltion for now. May end up leveraging the always-on Pi connected to the router if all else fails... Really appreciate the help either way.&nbsp;

baconneggs15 · Answer

So OpenVPN works fine for access when PC is powered on, but the router 'forgets' the PC's IP a few minutes after power off. (i.e. WOL is useless after that tiny window after shutdown). Even testing with port forwarding, firewall exceptions and NAT filtering disabled I can't get this to work via Android...

Apps used:

https://play.google.com/store/apps/details?id=co.uk.mrwebb.wakeonlan

https://play.google.com/store/apps/details?id=com.bitklog.wolon

antinode · Answer

&nbsp;&nbsp; Again, bear in mind how much I know abou WoL, ...&nbsp;&gt; [...] but the router 'forgets' the PC's IP a few minutes after power&gt; off. (i.e. WOL is useless after that tiny window after shutdown). [...]&nbsp;&nbsp;&nbsp; There are two addresses of interest for this stuff: the IP addressand the MAC address.&nbsp; Port forwarding (and, I assume, your VPN) works atthe IP-address level.&nbsp; WoL works at the MAC-address level.&nbsp; The routermight remember the IP address longer than you think (DHCP lease time =1 day?), but the IP-MAC association might evaporate much sooner.&nbsp; Theconnection between the two is ARP:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; https://en.wikipedia.org/wiki/Address_Resolution_Protocol&nbsp;And ARP relies on link-layer broadcast messages (MAC address"FF:FF:FF:FF:FF:FF") which is the kind of thing which I might expect toget blocked by an IP-level transport like, say, a VPN.&nbsp;&nbsp;&nbsp; That's why having a gizmo like a Raspberry Pi on the LAN isadvantageous for something like remote WoL.&nbsp; You can talk to it at ahigh (routable) level (SSH, say), and it can shout at its immediateneighbors using low-level (link-layer) broadcast messages.&nbsp;&nbsp;&nbsp; Port forwarding in a router (or use of a VPN?) can get a messageaddressed to the destination LAN IP address, but, unless the router cantranslate that IP address into a (local) MAC address, that's the end ofthe line.&nbsp; Which may be why that third article talks about stuffing therouter's ARP cache with an artificial (permanent?) ARP entry.&nbsp;&nbsp; But "permanent" is a relative thing, and you'd need to do that everytime the router starts, unless you can find a way to jam those data intothe non-volatile firmware storage.&nbsp;&nbsp;&nbsp; As for Telnet access to your router, which might let you do any ofthat, I wouldn't depend on it.&nbsp; Netgear appears to have been removingthat (undocumented, unsupported) feature from various models in recenttimes.&nbsp; Whether that's intentional or just another blunder is notobvious.&nbsp; See, for example (different model):&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; https://community.netgear.com/t5/x/x/m-p/1786837&nbsp;&nbsp;&nbsp; You can try it, but I wouldn't be amazed by a failure, and, even ifit works today, the next firmware version could break it.&nbsp;&nbsp;&nbsp; Everything's complicated.

baconneggs15 · Answer

Got that right&nbsp;antinode&nbsp;:smileylol: I think the Pi is the solution. Also thinking smart strip probably quickly/cheaply solves my travel needs here.&nbsp;Reboot at end of any VNC session. Cut power at login screen via smart strip app, then restore for next VNC session and repeat...&nbsp;Either way, afraid I'm tapping out of the router config solutions for now. Thanks again for all the help.&nbsp;

Forum Discussion

R7450 Wake on Internet

5 Replies