Router does not allow DMZ mode, my home network Firewall does not present itself directly on the internet with a Public IP but in turn has a local IP assigned by the Router to the WAN interface
I am a previous UPC customer and was switched over to Sunrise last year. My modem/router is still a UPC router though and ever since the switch, I have troubles accessing my home network firewall.
I have a set of surveillance cameras installed in the house and they are not accessible from outside the home network anymore, which defies the purpose of having the cameras in the first place. It is a holiday home and we spend a significant time away, so I need to be able to see if all is ok.
It looks like the router blocks unconventional ports. Although NAT rules are present on the Firewall (Pakedge), requests from outside to the DVR are not completed because for some reason they are blocked by the router. The router does not allow the DMZ mode, consequently the home network firewall does not present itself directly on the internet with a Public IP but in turn has a local IP assigned by the router to the WAN interface. This setting involves a double NATwhich for our DVR system with the cameras is a limitation and they cannot be accessed remotely.
We tried to change the router settings by making rules dedicated to the ports in use and later even tried disabling the internal firewall but to no avail. I need to point out that all this used to work without any issues for 9 years before the switch from UPC to Sunrise, so there must be a possibility to restore this function.
Please let me know how we can fix this issue. According to my network advisors, we should evaluate
a) replacing the UPC router to a sunrise router (if the latter allows the DMZ configuration)
b) if a does not work, check if a fixed IP could be assigned to the internet subscription
c) if nothing works, change of provider
I would prefer to stay with Sunrise as I am satisfied with all the other services we booked and hope that the matter could be resolved on a technical level, there must be a possibility to make this work; pretty sure we are not the only ones with a more complex home network and a firewall.
Thank you very much in advance for your advice in this matter!