Thomson SpeedTouch 780WL – port forwarding to broadcast address
Sunday, 24 January 2010
For your home network to be able to wake-on-lan a computer from the Internet so that you could later remotely access it, you need to forward a port to your broadcast address. This way you can broadcast a magic packet to all the computers in your network and then wake only one of them using its MAC address.
If you are reading this, you probably already tried forwarding a port to 255.255.255.255 but to no avail. That is because ST780 just drops anything forwarded to the broadcast address.
So, what you should do is choose one unused IP address in your subnet and make it appear like it’s a broadcast address, and later do the port forwarding to that IP. How to do that? Telnet into your router, and assign a hardware (MAC) address of FF:FF:FF:FF:FF:FF (when translated to IP, that MAC address makes 255.255.255.255) to the chosen IP address. This is the basic idea behind this tutorial and a way to trick the router into doing the port forwardng to a (fake) broadcast address. So, do the following:
1 | telnet <router_ip_address> |
enter your superadmin username and password and execute the following two commands:
1 2 | :ip arpadd intf=LocalNetwork ip=192.168.1.xxx hwaddr=FF:FF:FF:FF:FF:FF :saveall |
where xxx is the last octet of your chosen IP address (make sure that the chosen IP is not already in use, and that it’s not 192.168.1.255).
Now go to your routers webinterface and create an application with UDP port 9 (to make it a little bit more secure, I recommend you choose a port above 1024, and then translate it into 9). Assign the created application to a newly created IP address (192.168.1.xxx) and voila, you got it.
Now you can try and use wol (for Linux) or this one (for Windows) to remotely turn on your computer. For this you will need your routers public address (I recommend using DynDns for that), and the MAC address of the computer you want to wake up.
cheers =)
No. 1 — April 21st, 2010 at 15:56
Cool, thx dude ;)
No. 2 — September 24th, 2010 at 16:04
I always had troubles with WOL over the internet: sometimes it worked, sometimes not. Now it finally works all the time, thanks for this trick!
No. 3 — November 22nd, 2010 at 21:57
Postovani, nije mi bas najasniji postupak. Da li za ip=192.168.1.xxx (treba da stoji 192.168.1.255 => kako pise na ino forumima) i sta se unosi za FF:FF:FF:FF:FF:FF (d ali je u pitanju MAC adresa LAN-a kome na PC-iju kome se pristupa.
Konkretno, imam Linksys WRT54GL, ne dozvoljava port forwarding na 192.168.1.255 (probao sam preko Mozile i NoScripta, kao i preko DOM Inspectora, medjutim bez uspeha. Kako ovo resiti na WRT54GL?
Hvala!
No. 4 — November 22nd, 2010 at 22:14
@Kole – ne, 255 je rezervirana adresa, tamo ne možeš / ne trebaš ništa staviti. ono što se ovdje želi postići je prevariti router, tako da on u biti misli da šalje na običnu adresu 192.168.1.xxx (xxx proizvoljan neki koji ne koristiš s nekim računalom u mreži) a u postavkama routera se toj adresi dodjeli MAC adresa FF:FF:FF:FF:FF:FF (znači ne unosiš ništa na FF.. već unosiš FF, kažeš routeru da je xxx adresa kada se prevede u MAC – zapravo FF…) koja je u principu broadcast. zadnji korak je napraviti port forwarding na tu xxx adresu. je li pomoglo ili dodatno treba objasniti?
No. 5 — November 23rd, 2010 at 18:08
@pootzko, hvala na dobroj volji!
Medjutim, potrebna mi dodatna pomoc. Veoma mi je vazno da mi profunkcionise WOL preko Interneta (radim na terenu i pristupam povremeno notebook-om kancelariji (ka 2 racunara).
Ako sam dobro razumeo, u svom Linksys WRT54GL routeru u Port Range Forward, za npr. port 5510 (start), 5510 (end), UDP (Protocol) i cekiram Enable IP adresu racunara kojem zelim da pristupim (probudim) 192.168.1.50. Isto to uradim i za drugi PC (192.168.1.51) za npr. port 5511. Da li je bolje ovoriti ove portove (5510. 5511,…) ili “one” 7 i 9?
Medjutim, imam drugi problem. OS je Vista-64bita, podigao sam Telnet, kucam telnet 192.168.1.1 (router) i javlja mi “Connecting 192.168.1.1…could not open connection to the host, on port 23, Connection failed.
Iskljucio sam KAV, takodje i firewall, medjutim opet isto. Sve u svemu, jos nisam stigao do komandi koje su ovde predlozene.
Hvala!
No. 6 — December 2nd, 2010 at 14:49
@Kole – pogledaj si ovdje default portove: http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers inače je zgodnije uvijek otvoriti neke visoke portove jer se na neki način na njima ‘ne očekuje’ da će tamo biti nešto… (npr. – ako netko želi skenirati za SSH, tražiti će port 22 i neće pretpostaviti da se ssh nalazi na na primjer 12345 portu… to će saznati jedino ako eksplicitno bude skenirao i visoke portove, ali default skenovi mu vjerojatno neće javiti SSH na 12345 portu…), a i osim toga treba biti oprezan sa ovim ‘niskim’ default portovima, da se nešto krivo ne iskonfigurira.. dovoljno je visokih pa radije njih koristi.
a što se tiče telneta, ne znam koji su servisi upaljeni na WRT54GL po defaultu… to probaj proguglad ‘how to telnet to WRT54GL’… ili možda bolje how to SSH… i osim toga, mislim da ti ove konkretne komande možda neće raditi budući da WRT54GL u biti vrti linux, ne znam šta se vrti na ovom mom speedtouchu, nekakav njihov firmware pa će ti cijeli ovaj proces vjerojatno biti nešto drugačiji…
pozdrav!
No. 7 — December 2nd, 2010 at 21:14
Problem je resen instaliranjem dd-wrt firmware-a.
(http://www.dd-wrt.com/wiki/index.php/WOL).
@pootzko
Hvala!