Unraid server unreachable from outside (DECO M4 mesh WiFi + ISP modem/router)

[jarenward]

Hi everyone!

 

I'm trying to set up a reverse proxy on my unraid box, in order to be able to access it from the internet.

 

Right now, my setup is this (drawing in attachments)

 

Network setup

1) ISP modem/router

• ISP : Bougues Telecom (France)
• Model : Sagemcom F@st 5330b
• No bridge mode
• Wi-Fi disabled

2) DECO M4 WiFi mesh

• Replaces my ISP's WiFi
• Static IP (set up on the ISP box) : 192.168.1.54
• Currently in router mode but can be set up as access point
• Has its own DHCP server (192.168.3.2 to 192.168.3.250)
• Wired to my ISP modem/router

3) Unraid box

• Static IP : 192.168.3.2
• Wired to the DECO box

 

 

What I'm trying to achieve

Basically: being able to access my unraid server from elsewhere, and to use docker containers such as Nextcloud or Plex.

 

Right now, I can access the Unraid dashboard using tower.local or by entering 192.168.3.2 if I'm home, but not by typing in my IP address. Maybe that's normal, I don't know, I struggle to wrap my head around how networks work.

 

NB : I can set up remote access to my ISP's box, which allows me to access my ISP box dashboard when I type my IP. When I check my open ports and remote access is enabled, I can see that port 443 is open. When remote access is disabled, that port is closed. 80 is closed no matter the situation.

 

What I've tried

 

I naturally tried to follow spaceinvaderone's awesome videos about how to configure a reverse proxy but nothing worked in my case.

 

I bought a new domain just for that purpose, set up a DuckDNS docker to track my dynamic IP, then tried different methods to get letsencrypt to work, but I wasn't able to get the certs. Apparently, something was up with my port forwarding settings, which doesn't surprise me since I apparently have two DHCP servers, one (the DECO) on top of the other (my ISP box).

 

I then tried the DNS verification method and it finally worked (I got the certs) but sadly my subdomains didn't point to anything. I tried opening / forwarding ports on both my ISP modem and my DECO mesh system, but still no luck.

 

Now I'm reconsidering my whole setup. Maybe having my DECO as a router on top of a modem/router that cannot be put as bridge mode complicates everything?

 

Should I set up my DECO access point only, and use my ISP modem/router to manage static IP adresses and port forwarding?

 

If I do that, will I be able to access my Unraid server from outside?

 

Many thanks to anyone who took the time to read this.

 

Hopefully someone will be able to understand what's going on with my current install.

[Vr2Io]

3 hours ago, jarenward said:

Static IP (set up on the ISP box) : 192.168.1.54

Likely your ISP provide internet service with NAT, so you can't reach your server outside.

Edited July 27, 2021 by Vr2Io

[VRx]

If You have access to GUI on Your Sagemcom F@st 5330b, You can check If You have something like Portmapping or Port Forwarding (possibly in Access Control Tab - I'm guesing because I can't find any manual for this model Sagemcom in english).
If You set up remote access to ISPbox, this is only access to Sagemcom GUI from Internet, this is not good way. But this gives me some good information, that probably You have public IP address from Your ISP, and if Sagemcom can redirect ports, You could access Your Unraid from internet probably.