Remote management still doesn't work

[Spiderpan]

)Due the coronavirus issue I need the remote management of my old but still good D7800
I've read several topis about it so I did everything properly I suppose:

1. update the latest firmaware, factory reset, restored the saved configuration
2. registerd the device on mynetgear site
3. registered an account in my-noip
4. installed genie app on my android phone

But I  can't reach my router via web
In the genie app my device isn't listed (but it's regularly registered)
via web https://XXXXXXX.mynetgear.com:8483  (connection has timed out)

I don't have a clue,

the only thing is that my connection is via via radio with wifi antenna but I doubt it's the problem because I can easily reach via web my NAS connected to the router

[antinode · Accepted solution]

> o My router (ADVANCED HOME) says my IP is 100.124.135.89, the same in
> the Android Genie App

>    Or, plug it/them in at: https://whois.arin.net/ yourself.

   Did you try that?  It's a shared/private address.  More important,
it's different from your apparent public address:

> I get 77.32.x.y

>    Or, plug it/them in at: https://whois.arin.net/ yourself.

   Did you try that?  It's a public address.  But it's not the (WAN)
address of your router.

> I tryed usign both the IP to reach the router 100.124.135.89:8483
> 77.32.24.191:8483 but they don't work

   That's right.  As explained before, "100.124.135.89" is a private
address, so can't work from the outside world.  "77.32.x.y" is a public
address, but it's the address of a router at your ISP, not the address
of your D7800.

> Strangely I can get the router and the NAS, using their own app like
> genie or dsfinder

   A device (router, NAS box, ...) which creates an _outgoing_
connection to some cloud server somewhere can be contacted by going
through that cloud server.  Using a web browser to create an _incoming_
connection directly to the router requires that the router have a public
IP address.

> > You might talk to your ISP, and ask about getting a public address.
> This may be the answer

   Yup.

[shadowsports]

Greetings,

Not all of your steps are recommended.

We do not typically recommend restoring a saved .cfg from an older firmware version on top of a new one since programming changes "added or removed' features might not be compatible with the new FW version you upgraded to.

It would be helpful if you could provide the following:

FW version running on the D7800?

Are you using Dynamic DNS (mynetgear.com)?

If so, are you sure that it is working?

Where are you trying to access the the D7800 from? 

Have you tried accessing using your WAN IP:8443 instead of the DNS entry?

You have to be outside of your LAN to do this.  A cell phone with the WiFi disabled is a good way to test.  

[Spiderpan]

so:

• the FW is the last  V1.0.1.56
• Yes i'm using dynamicdns by mynetgear
• it works, I tried from another pc with nslookup and with a mobile, connected via 4G they both resolved the correct IP
• As before I tired to manage the router with a laptop or mobile not connected to the D7800 network

Tomorrow I'll try doing another factory reset but this time I'll restore it manually (I'm taking screenshoots of the configuration)
thanks for now. I'll let you know if it works

[antinode]

> o Yes i'm using dynamicdns by mynetgear
> o it works, I tried from another pc with nslookup and with a mobile,
>   connected via 4G they both resolved the correct IP

   How, exactly, did you establish what's "the correct IP"?  What's the
top half of it ("a.b" out of "a.b.c.d")?

   Does your "the correct IP" match the D7800 WAN/Internet IP address?
      ADVANCED > ADVANCED Home : Internet Port : Internet IP Address

   The potential threat:

      https://en.wikipedia.org/wiki/Carrier-grade_NAT

[Spiderpan]

You were right @antinode I didn't know the issues behind CGN
The IP from the router was different from the one returned from the no-ip service and the Synology ddns

anyway this time I tried both of the IP but none is working
xx.xx.xxx.xxxx:8483

yyy.yyy.yyy.yy:8483

Somehow I managed to get the genie app working.
it sounds strange but It can help others:
I connected the genie app (android) through the same LAN, I set on the remote management (In the app I mean, even though it was already set in the router configuration). After that the app works even in remote.

I solved only half of the problem, for now

[antinode]

> xx.xx.xxx.xxxx:8483
> yyy.yyy.yyy.yy:8483

> [...] What's the top half of it ("a.b" out of "a.b.c.d")?

   Still a mystery.

   Or, plug it/them in at: https://whois.arin.net/ yourself.

> [...] I tried both of the IP but none is working

   A private address can't work from the outside world.  The public
address can't work from the outside world if it's not your router's
WAN/Internet address.  You might talk to your ISP, and ask about getting
a public address.

[Spiderpan]

> [...] What's the top half of it ("a.b" out of "a.b.c.d")?

I'm sorry but I can't get it, my english has become rusty

I'll try to explain better; for example:

• My router (ADVANCED HOME) says  my IP is 100.124.135.89, the same in the Android Genie App
• but when I resolve my two DDNS services xxxxx.mynetgear.com or xxxxx.synology.me ,  I get 77.32.24.191
  I checket it with my.noip.com  synology.com  dnsqueries dnscecker and even nslookup in the linux terminal

I tryed usign both the IP to reach the router 100.124.135.89:8483   77.32.24.191:8483  but they don't work

I hope I answered your question

Strangely I can get the router and the NAS, using their own app like genie or dsfinder

>A private address can't work from the outside world. The public address can't work from the outside world if it's not your router's WAN/Internet address.

> You might talk to your ISP, and ask about getting a public address.

This may be the answer

[antinode · Accepted solution]

> o My router (ADVANCED HOME) says my IP is 100.124.135.89, the same in
> the Android Genie App

>    Or, plug it/them in at: https://whois.arin.net/ yourself.

   Did you try that?  It's a shared/private address.  More important,
it's different from your apparent public address:

> I get 77.32.x.y

>    Or, plug it/them in at: https://whois.arin.net/ yourself.

   Did you try that?  It's a public address.  But it's not the (WAN)
address of your router.

> I tryed usign both the IP to reach the router 100.124.135.89:8483
> 77.32.24.191:8483 but they don't work

   That's right.  As explained before, "100.124.135.89" is a private
address, so can't work from the outside world.  "77.32.x.y" is a public
address, but it's the address of a router at your ISP, not the address
of your D7800.

> Strangely I can get the router and the NAS, using their own app like
> genie or dsfinder

   A device (router, NAS box, ...) which creates an _outgoing_
connection to some cloud server somewhere can be contacted by going
through that cloud server.  Using a web browser to create an _incoming_
connection directly to the router requires that the router have a public
IP address.

> > You might talk to your ISP, and ask about getting a public address.
> This may be the answer

   Yup.

[Spiderpan]

Thank  @antinode  and @shadowsports for helping me.

I don't think that my ISP would give a pubblic address (at leat not for free )

Anyway I managed to get the router via Genie, and definetely I've learnt something new.