Enable Remote Access for Roon Server on ROCK (ref#56T7MI)

[rmmaskos]

What’s happening?

· I'm having trouble with Roon ARC

What best describes your issue with ARC

· Other

Describe the issue

Arc says that my roon server is not set up for remote access. My Roon server is sitting on a ROCK that someone else built for me. How do I enable that roon server for remote access, not being very tech savvy myself?

Describe your network setup

Roon server is connected directly to a Fritz Box 7590 router via LAN

[bearFNF]

Can you post a copy paste of the diagnostics data?

Might also do a screenshot of the expanded window:

[rmmaskos]

Not sure I understand what you are asking me to do. I understand from another post that I need to establish a VPN connection between the remote device (iPad or iPhone) running ARC and the Roon server sotting on my Roon ROCK. They recommend an app such as Tailscale to be installed in both places. However, I have no idea how to install any app on that roon server.

[Martin_Webster]

There are a number of reasons why ARC may not be ready, and jumping to the conclusion you need Tailscale is premature.

Please provide a screenshot of the diagnostic message in Roon Remote as requested by @bearFNF. Thanks.

[bearFNF]

In Roon go to Settings/Roon ARC and hit the arrow to expand the box:

Then if you see the diagnostics data like this:

Hit “copy” and the “paste” (or hit CTL v) into a post so we can see the data.

Also, post a screenshot of what is in the rest of the settings/Roon ARC area of Roon.
Like what I posted earlier. Ot at least post what port it is trying to use.

[rmmaskos]

Hi,
Here is the diagnostics I see:

{
"ipv6_connectivity": {"status":"NetworkError","status_code":504,"error":"error: Error: ETIMEDOUT, response code: undefined, body: undefined connected? undefined"},
"ipv4_connectivity": {"status":"NetworkError","status_code":504,"error":"error: Error: ETIMEDOUT, response code: undefined, body: undefined connected? undefined"},
"external_ip": {"actual_external_ip":"89.ggg.hhh.iii","actual_external_ipv6":"2a11:aaa:bbb:ccc:ddd:bbb:eee:fff","router_external_ip":"null"},
"natpmp_autoconfig": {"status":"NotFound"},
"upnp_autoconfig": {"server_ip":"192.168.178.1","found_upnp":true,"error":"<?xml version=\"1.0\"?>\n<s:Envelope xmlns:s=\"http://schemas.xmlsoap.org/soap/envelope/\" s:encodingStyle=\"http://schemas.xmlsoap.org/soap/encoding/\">\n<s:Body>\n<s:Fault>\n<faultcode>s:Client</faultcode>\n<faultstring>UPnPError</faultstring>\n<detail>\n<UPnPError xmlns=\"urn:schemas-upnp-org:control-1-0\">\n<errorCode>403</errorCode>\n<errorDescription>Not available Action</errorDescription>\n</UPnPError>\n</detail>\n</s:Fault>\n</s:Body>\n</s:Envelope>"}
}

[rmmaskos]

Roon is trying to use Port 55000

[rmmaskos]

The prompt displayed reads: Roon ARC was unable to securly access your roon server.

[Martin_Webster]

You don’t appear to have setup port forwarding, and UPnP has failed to setup this automatically.

Please take a look at the following guide to setup port forwarding.

Port Forwarding Instructions for (Most) Fritz!Box Users

Here comes a step by step setup for Fritzbox and should work with most fritz routers. There are two prerequisites: ensure that your ISP allows access from outside via a public ipv4 address. This is mostly the case but in some cases you need to pay extra for that. This is discussed here and here ensure that there are no other routers in between your router (fritzbox) and the roon core. If you have a setup with multiple routers or repeaters ensure that they are configured as a mesh that onl…

[daniel]

Hi @rmmaskos,
Thanks for letting us know about this issue. Were you able to set up port forwarding manually following the guide @Martin_Webster posted?

[rmmaskos]

Thanks for this. I have not yet succeeded at this. I will retry upon my return from business travel this coming weekend.

[daniel]

Okay we’ll be on the look out for your response. Hopefully it will work.

[rmmaskos]

Hi,
I am kind having second thoughts about security when opening up access outside my network. Is there an alternative solution using a VPN based approach?

[Geoff_Coupe]

Have a read of this:

ARC and Tailscale: Connect to RoonServer Without Port Forwarding

[connor]

Hi @rmmaskos,

On a RoonOS-based server, there are additional steps for using a proxy-mesh VPN like Tailscale. You need to set up another machine in your network as a router to forward requests to/from ROCK. The team is exploring ways to simplify connecting to ARC via Tailscale on RoonOS machines in future releases.

@rmmaskos

I am kind having second thoughts about security when opening up access outside my network

Without your Roon credentials, there’s no point of entry exposed via port forwarding so long as your firewall is properly configured. Keeping your Roon account information safe far exceeds disabling UPnP on the list of security priorities.

[rmmaskos]

Hi,
as a person who is not very good with technology I find these instructions quite complicated and not easy to follow. If there is not a simpler way of safely connecting ARC with my ROCK I think I am going to refrain from using Roon remotely from outside my network altogether.

Thanks,
Reinhard

[benjamin]

Hi @rmmaskos,

We understand your position, sorry it’s been difficult for you so far!

Reiterating what @connor mentioned above -

@connor

Keeping your Roon account information safe far exceeds disabling UPnP on the list of security priorities.

Setting up a manual port forwarding rule is common practice and without Roon credentials, you’re in no harm.

Have you tried toggling UPnP off and on in your router settings, and then trying to connect Arc again?