Three HomeFi and Port forwarding

Is there any users out there that have successfully setup port forwarding and verified it works? I'm having major issues in getting anything to work but can't be certain it's my setup or if it's 3 blocking it.

Am I making an incorrect assumption that with a proper HomeFi contract and 3internet APN, you get a unique IP and there is no CG-NAT happening?

EDIT: Just a few hours later, determined what when my B525 is in bridge mode port forwarding doesn't work. If I switch it back to router mode it comes good without touching any of my firewall rules in pfsense.

Edited by deleted (Sun 19-May-19 12:48:23)

I�ve forgotten how you check for CG-NAT, and I don�t use port forwarding, but what I can tell you is that the IP Address is very dynamic and also several Three IP addresses are blacklisted. If you get one of those, could it screw up port forwarding? Even assuming you are using a dynamic DNS.

I'm just trying to port forward an HTTP server on one of my RPi's so that the interface is externally accessible. Not trying to setup more complex port forwarding for gaming etc, just a simple port 80 redirect so I can view the web interface out of the house when my primary WAN is down.

I was of the understanding the HomeFi/MBB contracts do not get CG-NAT'ed on 3 - but thought it'd be sensible to check.

As is usually the case - I've spent all week tackling this, decided to post for help and then found a resolution - typical!

Anyway, I was using the Huawei B525 in bridge mode (amongst other various Mifi's/dongles through the week). I've taken the B525 out of bridge mode, assigned my pfsense box a static IP on that interface and everything just started working. So there's something strange happening with the B525 in bridge mode it seems!

I use 2 x three sims via 2 x Mikrotik LTE Kit's to a Draytek 3220 and dont have any problem with port forwards, and sadly with these Mikrotiks its double NAT as there is no bridge mode, I run BlueIris CCTV software which I use externally no problem with a No-ip domain.
All works as expected, IP does change everytime I connect, but these things are so reliable they have both been connected now for 68 days and that was only re-connected for a firmware upgrade. So glad I ditched my ADSL, that could hardly stay connected for 68 mins!!

Surely it doesn't make sense for the B525 to be doing port forwarding when bridge mode is enabled ?

Isn't the whole point of bridge mode to pass all traffic direct to the internal router ? At which point it is the internal router that has to do port forwarding ?

Or does bridge mode not operate the way I've been assuming it does ?

Sorry, I was referring to port forwarding on my pfsense router with the B525 in bridge mode.

That makes more sense.

At some point I need to move my MikroTik and backup B525 over to bridge mode so I can get a proper pfSense setup running again like I had with my bonded FTTC lines.

In reply to a post by biohead:

Sorry, I was referring to port forwarding on my pfsense router with the B525 in bridge mode.

I have come to the conclusion that Huawei removed Bridge Mode from later firmware releases because it had never worked properly.

I've just got a Three Unlimited Sim Deal and I'm going to order the B612 as it has 4X4 MIMO

Quick question - if I get this router (which is a good one) and bridge it to my main router Asus AC86U, using NI IP and port forwarding from the Asus will I be able to get access to devices on my network such as CCTV Cameras, etc?

Thanks in advance!

With regards to bridge mode on the B525. I have this option on my unlocked June 2019 Amazon B525. Here are the firmware versions:

Device name: B525s-23a
Hardware version: WL1B520FM
Software version: 11.189.63.00.1217

Edited by gary333 (Wed 31-Jul-19 09:50:28)

I am unable to get this working again (port forwarding). I'm not an expert, just a novice and have tried the following actions in my B525 (using XBOX as a test)

- Setup "Virtual Server" (Huawei's language) and setup port forwarding on WAN & LAN port 3074 for UDP & TCP to the xbox's IP
- I have given the xbox a reserved IP
- I have tried putting xbox IP in to the DMZ and enabling
- I have tried changing NAT setting between Cone & Symmetric and bacl
- I have tried turning the whole firewall off (for 30 secs), and disabling all firewall options such as "Enable IP address filter", "Disable WAN port ping", "Enable domain name filter", and "Enable MAC filter"
- I have turned uPNP on and let the xbox try to negotiate. I can see from router that it's requested port 3074
- I have added "Special Application" to the xbox IP using the Special application option in router
- I have rebooted router a couple of times

Non of this works and I still (when doing a port scan) get port closed.

If anyone has any other ideas I am happy to try. I know the company I work for have Three as a client (Glasgow Office). If all else fails I could ask internally for help if it's something important to get to the bottom of.

D'oh, not sure why I didn't check this but the WAN IP is 10.* (so internal), however the IP address to the world is 188.*. When the service worked I had a proper external WAN IP.

The issue is CGNAT I am thus assuming. I've contacted Smarty to see if there is an APN i can use that will give an external IP address. I am using 3internet at the moment which appears does have the capability to hand these out as had them yesterday before my first reboot.

In reply to a post by gary333:

D'oh, not sure why I didn't check this but the WAN IP is 10.* (so internal), however the IP address to the world is 188.*. When the service worked I had a proper external WAN IP.

The issue is CGNAT I am thus assuming. I've contacted Smarty to see if there is an APN i can use that will give an external IP address. I am using 3internet at the moment which appears does have the capability to hand these out as had them yesterday before my first reboot.

I'm so confused, some people have it working some don't. What are the requirements? Hum..

I don't have any specific need for it. Just trying out what is possible .

To further add to the story I have tried the following sim cards today

1) Smarty sim
2) Three PAYG (3-2-1)
3) Three Mobile Broadband sim

Both the Three sims in a Netgear Aircard got allocated public IP addresses when using the "3internet" APN. I didn't bother trying the three.co.uk APN.

The Smarty sim using 3internet APN gave out internal IP address (10.*) I tried the smarty specifc apn (mob.asm.net) this also gave out an internal IP address.

It appears the APN is not the deciding factor for Smarty sim card like it probably is for Three sims. What you end up with on Smarty must be random (if you are allocated a public IP address) as i had one last night (94.*) but cannot get one today using different equipment and APNs.

Edited by gary333 (Wed 31-Jul-19 17:00:06)

If you add friends - for each sim you add you get a free month on SMARTY - so add ten friends - sign up for the £5/month - and get 10 months free- that's what I've done -

Using a HUEWAI (sic) router running my MAC, Apple TV, and PS4 w Projector - full home setup basically for £25/30 including mobile phone unlimited...

+ Google VOICE for a geographic landline at $8- buying an OBI ATA would work out cheaper in the long run - but it would take a while... - then your VOIP Calls could be 0.002/min

Hi, I am also trying (and failing) to get port forwarding to work on my Three 4G HomeFi connection through a Huawei B535.

I have set up port 22 as a Virtual Server in the router web interface pointing to my Raspberry Pi and I've checked that my WAN IP is a proper external IP (188.*), so I don't know if it's an APN issue like others seem to have had.

Any tips/tricks?