Port forwarding on ZTE MC801A 5G router not working

[elarry]

To access the OpenVPN server on my home network from outside, I need to set up port forwarding on the ZTE MC801A 5G router provided by Three. I found the settings in the router settings under Advanced Settings - Firewall - Port forwarding. I entered the LAN IP address of my OpenVPN server, set the port range to the port used by the server, and applied the changes. However, both canyouseeme.org and yougetsignal.com reported that the port was still closed. Restarting the router and my computer didn't help.

I called Three Customer Services. They said that they didn't restrict port forwarding, and advised me to contact the device manufacturer, ZTE. I called ZTE and described what I did. They confirmed that my procedure was correct, and told me that my router was custom-made for Three, so Three could have limited the functionality...🙄 When I called Three again telling them my conversation history, another Advisor said that it could be due to the default Safe Browsing restriction (adult content filtering, of which I failed to see the relevance) on Three home broadband. However, even if they removed the Safe Browsing block, port forwarding is still not working.

This is frustrating - I used to have the same settings on my Virgin Media Superhub 3 and it worked smoothly. I saw a few posts online reporting similar problems on this router. Someone said port forwarding only worked when it was in bridge mode, but I don't have another router and don't plan to have one. Has anyone successfully set this router up for port forwarding?

[crypt0ninja]

Port forwarding is possible when using the 3Internet APN but not when using the Three.co.uk APN due to CGNAT.

[Prydd21]

If you have actually done it, please take screenshots of the relevant pages and and post them.

Tree technical department say it’s not possible.

thanks 

[crypt0ninja]

Maybe this port forwarding issue is specifically related to the MC801A then? I have the NR5103E and both port forwarding and UPNP are working for me and the process is similar to port forwarding on the majority of consumer routers.

You said Three share IP address and as such port forwarding is not possible but I was simply stating that's not correct, as when using the 3Internet APN each user is allocated their own IPv4 address (not shared) and as such port forwarding is possible, however if using the Three.co.uk APN then many users sit behind a shared IP address and as such users cannot be uniquely identified which makes port forwarding NOT possible in that case.

[Prydd21]

You have miss quoted me, I said 

“did you find the answer? 
possibly that three share IP address and port forwarding is not possible?”

Note the word “possibly “.

I tell the truth when I said “ Three technical department say it’s not possible.”

will you take screenshots of the relevant pages and and post them please?

id like to see your exact input so I can copy it to see if it works for me.

best regards 

[crypt0ninja]

I simply stated facts regarding APNs and port forwarding, I'm not here to spread misinformation that's for sure.

I definitely don't dispute what you were told by Three as its known for their call centre's to incorrectly advise hence why many end up on these forums seeking further help 🙂

Like I said above this thread/question is related to the the MC801A which I don't have, I have the NR5103E and it works for me but my screenshots wont be of any use as the hardware/firmware are different, I was simply stating facts about APN's and port forwarding at the network level, not router hardware level, so maybe someone with the MC801A can assist you.

Cheers

[Mongoose333]

Hi. Sorry to drag up a topic this old but I’m having the same issue and I’m also using the NR5103E router which I’ve just got from 3 and I’m trying to open the ports to access my Synology NAS but with no luck. I’ve set my apn to 3internet and I’m getting a public ip address which my NAS’s DDNS is showing correctly but for some reason I can’t seem to get port 5000 to open. Any chance of posting some screenshots of your protocol rule settings and access control settings as I’m sure I must be doing something wrong. I had this working on my Sky router but I’m struggling now I’ve moved over to 3 5G. 

Many thanks 

[Prydd21]

Hi, As you can see by my previous messages on this platform I contested that port forwarding is not possible however the same person maintained that it is so I asked that person several times for a screen shot of the relevant pages but they did not respond to that request. 
I eventually discovered “ Tailscale “ software that enabled me to create a VLAN using a rasberrypi as the bridge between the networks and this gave me Ip addresses that could support port forwarding. The people at TAILSCALE are extremely helpful and assisted me throughout. 
this was the only way I could port forward using a 3 5G router. No doubt someone will jump on board and say it is possible but to them I say , screenshot the relevant pages of their setup. I will guarantee they will not do that.

regards

prydd21

[Prydd21]

Please can you screenshot shot the relevant pages so that I can copy them word for word and see if it will work on my router.

Best regards

Bob

[crypt0ninja]

Are you using the Three.co.uk APN or the 3internet APN? Which one is the router showing you are connected to?

The 'Three.co.uk' APN puts users behind a CGNAT and prevents port forwarding and causes all sorts of issues as all users are essentially sharing the same WAN IP so these users cannot be uniquely identified.

The '3internet' APN does not put users behind a CGNAT and you get allocated an IP in which you can be uniquely identified and should allow port forwarding etc just like 'regular' broadband.

[elarry]

Thanks very much for your reply, crypt0ninja - somehow I didn't get a notification, so I just saw it today.

I just checked my router settings, and I was already using the 3internet APN as illustrated in the screenshot. Are you using the same settings and your port forwarding is working?