14 Feb
2023
14 Feb
'23
12:05 p.m.
I've done this for myself, with my BGP block. This way I have multiple clients in
different locations all able to use the block via wireguard.
Get Outlook for Android<https://aka.ms/AAb9ysg>
________________________________
From: Mark Phillips <enicomms(a)gmail.com>
Sent: Monday, February 13, 2023 4:18:57 PM
To: Joshua McDonald <josh(a)2cold.net>
Cc: Kris Kirby <kris(a)catonic.us>us>; ken boyle <ken(a)kc2idb.net>et>; David Harris
<KE6GAE(a)hotmail.com>om>; 44net(a)mailman.AMPR.org <44net(a)mailman.ampr.org>
Subject: Re: [44net] Re: IPIP Tunnel
I was just going to add Wireguard VPN as a solution for the Cellphone hotspot.
Available at 10 Hamgates and many other nodes. Mikrotik V7 OS works well. Go here for a
howto
http://hamgatepa.ampr.org/docs/Programming%20the%20MikroTik%20hAP%20lite%20…
On Mon, Feb 13, 2023 at 12:44 PM Joshua McDonald via 44net
<44net@mailman.ampr.org<mailto:44net@mailman.ampr.org>> wrote:
On the client side, using Mikrotik can be done with Wireguard if on RouterOS v7. Use an
AP as a client to the Cellular Hotspot and build Wireguard tunnel back to “VPN
Concentrator” somewhere.
Of course would require someone on remote end to have public IP to terminate tunnel and
route the 44net subnet allocation.
I have done this, but both ends of tunnel and subnet allocation are all in my control. If
interested, I can go more in depth.
On Feb 13, 2023, at 12:21 PM, Kris Kirby via 44net
<44net@mailman.ampr.org<mailto:44net@mailman.ampr.org>> wrote:
_______________________________________________
44net mailing list -- 44net@mailman.ampr.org<mailto:44net@mailman.ampr.org>
To unsubscribe send an email to
44net-leave@mailman.ampr.org<mailto:44net-leave@mailman.ampr.org>
I don't think this is possible with a hotspot
from a cellular
connection.
You are behind a nat on cellular, which shares one public IP with many
and doesn't allow routable ports/protocols.
The only solution would be to get a public IP address from a home
connection or a vps, and setup a VPN to access it from remote.
I could be wrong, but that is my understanding at this point.
Not only that, but some VPSs do not allow loading the IPIP module, which
means that a full KVM virtualized private server is the only solution
short of setting up a VPS to announce a /24 via BGP.
--
Kris Kirby, KE4AHR
Disinformation Architect, Systems Mangler, & Network
Mismanager_______________________________________________
44net mailing list -- 44net@mailman.ampr.org<mailto:44net@mailman.ampr.org>
To unsubscribe send an email to
44net-leave@mailman.ampr.org<mailto:44net-leave@mailman.ampr.org>