If your suggestion is manual port forwarding, I can’t figure out how to do that on my Router. See the attached screenshot from the router’s port forwarding page. What do I enter?
The diagnostics you’ve provided suggest there is a redundant layer of network address translation preventing port forwarding.
This can either be at the local-network level (commonly as a result of two routers), or at the level of your service provider (in the form of carrier-grade NAT).
If your setup involves an ISP-provided gateway (modem/router combination) and your own third-party router:
In the web administration interface of the ISP-provided gateway (modem/router combination), enable Bridge Mode or equivalent, where the ISP-provided gateway does not have DHCP routing enabled.
Alternatively, if you have already created a manual port forwarding rule in your 3rd party router, you can add an additional rule to forward the port through the ISP/second router.
If you only have one router in your setup or your modem is already in Bridge mode, please take a look through our list of known router and internet service provider solutions, as other users may have already encountered the same situation: ISPs and Routers: List of Known Solutions and Workarounds
You can reach out directly to your service provider to ask if they support port forwarding; this question will often enough to prompt them to explain whether or not the carrier-grade NAT they’ve implemented can function with ARC.
More specifically, you can pass along the following questions:
Have you implemented carrier-grade NAT for my account level?
Have you fully implemented IPv6, or do you have IPv4 addresses available?
Can I request a static IPv4 address to support port forwarding?
Are there any ports you have reserved at the ISP level I should be aware of?
If you’re unable to locate an existing solution in our #support:port-forwarding-resources subcategory, please reach out to the Roon support team and include the following information:
What is the make and model of your modem and router?
Do you have any additional network hardware, like additional routers or managed switches?
Who is your internet service provider and what is your geographic region?
Is your Modem configured in Bridge Mode so that it operates only as a modem or do you have the ports forwarded on both?
I have a second question. If I set up ARC using UPnP, do I always need to keep UPnP turned on in my router? I don’t want that, because I have heard it is a security risk to leave it turned on.
I have another model tplink archer c3150 and do not switch on upnp but create under Virtual servers (visible in Your screendump) an external Port for my nuc using tcp protocol.
I’m somewhat confused by your post. The first screenshot of your post contained a manually configured port forwarding rule. In the second screenshot of your router, you seemed to have removed this. (Or maybe it’s just the order of the screenshots that is off?)
From what I understand, you have the following setup:
Internet => ISP Gateway => TP Link => NUC Roon Core
If this is indeed the case, then
your mobile ARC device on the internet will not be able to see your TP link router or any device (e,g. NUC Roon Core) behind that router
your ISP gateway will not be able to see the NUC Roon Core either. It only sees the TP Link router.
To overcome this, you need 2 port forwarding rules:
From your ISP gateway to the “external” ip address of your TP Link. So not to the ip address of your NUC Roon Core. From the log I think the “external” of your TP Link is 192.168.1.186
From your TP Link to your NUC Roon core. As you had configure in the first screenshot.
I am running the roon core behind a TP-Link Archer router, which is behind an AT&T BGW 320 Gateway/Router (my ISP’s router). There are no other routers or managed switches.
I have found out through contact with my Internet provider AT&T’s technical support that their BGW 320 Gateway/Router does not support Bridge Mode. Therefore, I experimented with IP Passthrough on the AT&T Router. After setting up IP Passthrough, ARC will still not connect, but I think this is a different error message:
I do not consider myself to be an IT security expert, but I do have a word of advice: if you don’t fully understand what you are doing, please be careful with any security configurations you make on your routers/gateways.
That being said, I had never heard of IP pass through, so out of curiosity, it looked it up. From what I understand, it is a function AT&T gateway to provide a single device with an internet IP address. In doing so, you are bypassing all the firewall functions of your AT&T gateway. That is not necessarily bad, provided that your are passing on the IP address to your own properly configured router/firewall. It basically would mean that your AT&T gateway is acting as a modem only.
Maybe someone we more in-depth knowledge on networking and security can correct me if this is not accurate.
The error you are currently receiving seems to suggest that’s there are timeout issues, which may indicate that your basic connectivity is not ok. Again, someone please feel free to correct if I’m wrong.
After you have enable the IP pass through, you should check your TP Link router to ensure that this now has an non-private external IP address. This should be something other than 192.168.x.x.
If this is ok, and your Roon Core is getting an IP address from your TP Link router, you should then configure a port forwarding rule on your TP Link router, as you did in the first screenshot of your first post.
This is essentially how I’ve set up my ISP router (they call it a DMZ), but you connect nothing except another router to the port.
The error message suggest that port forwarding is misconfigured. Remember, the LAN side of the ISP router will have a private IP address, e.g., 192.168.1.1, so the second router, which is the firewall, needs to use a different private subnet, e.g., 10.0.0.0.
Forward port 55000 to the Roon core on 10.0.0.0, e.g., 10.0.0.10.
“After you have enable the IP pass through, you should check your TP Link router to ensure that this now has an non-private external IP address. This should be something other than 192.168.x.x.”
Please see the attached screenshot. It appears that my TP Link router does not have a non-private external IP address:
I’ve just noticed that in your original screenshot of the Roon ARC settings screen, the port is 48926. If this is still displayed, then change the port in the TP-Link virtual server to match this.
Success! I have successfully connected ARC. Thanks everyone for your support. I couldn’t have done it without all the great ideas.
So in summary, what I had to do is:
Enable “IP Passthrough” on the AT&T BGW 320 router. This eliminated the “double NAT” issue.
Enable port forwarding on the AT&T router under the Firewall>NAT/Gaming menu to port 55000, with the device pointing to the D-Link router using TCP protocol.
Create a “Virtual Server” on the D-Link router with an external port and internal port of 55000 using HTTP as the protocol.
