KR2 Not getting a default route

sfusco · EVDO Newbie Joined: 03 Feb 2010 Posts: 7

I have been pulling my hair out. Brand new KR2, with an ATT 885U wireless broadband modem. Hooked it all up and everything seemed to be working fine. Machines on the inside are browsing the internet. Works like a charm.

Wanted to create a virtual machine, or put one machine outside the firewall so I can access the security camera. Set up dynamic DNS, so far so good. DYNDNS sees and updates the IP address as appropriate.

From the outside I can not access anything. I configured remote access and allowed ICMP, nothing. Hours on the phone with Kyocera and ATT, no help. Finally I noticed that I have an IP address, a subnet mask of 255.255.255.255, but NO default gateway. How can this be? I think it must be a glitch with the KR2 - It just does not make sense that the internal machines can successfully browse the internet, if the KR2 does not know what the default gateway is.

Firmware is the latest. Have hard reset the device iaw instructions from Kyocera.

Next things I am going to try are seeing if there is a flash update for the ATT Mercury.

Any ideas? What else could it be?

Torrey · Posted: Wed Feb 03, 2010 1:25 pm Post subject:

Are you not getting a default gateway on your IP Camera, or from your WWAN/ATT connection?

sfusco · EVDO Newbie Joined: 03 Feb 2010 Posts: 7

The KR2 does not have a default gateway - status, device settings, WAN...

sfusco · EVDO Newbie Joined: 03 Feb 2010 Posts: 7

Beginning to wonder if ATT allows this to work. Can anyone confirm that it is possible to use an ATT broadband device with the KR2 and be able to successfully enable remote admin? If so, which ATT broadband device - because the Mercury (Sierra Wireless 885U) is not working for me...

sfusco · EVDO Newbie Joined: 03 Feb 2010 Posts: 7

Update:

I flashed the ATT USBConnect Mercury (aka Sierra Wireless 885U) to the latest firmware - no change. I have two 885U's and neither of them works.

I took the ATT USBConnect to another Kyocera KR2 that i know works properly (with a Verizon broadband USB dongle) and it does not work there either.

So, the issue is either the Mercury dongles, or the way that they communicate with the Kyocera KR2

To reiterate - With the ATT mercury installed in slot USB1, I can browse the internet, but I can not access the network remotely - I can not even get into remote admin (port 8080). And yes, I've configured it to allow remote access - with and without https.

The issue is that somehow the Kyocera does not know what the default gateway is. Here is what I see when I go into Status, Device Settings, Wan:

MAC Address : 00:xx:xx:xx:xx:7A
Authentication & Security : CHAP
IP Address : xxx.xxx.155.180
Subnet Mask : 255.255.255.255
Default Gateway : 0.0.0.0 <=============hey what's this?
Primary DNS Server : 209.183.33.23
Secondary DNS Server : 209.183.35.23

With a Verizon EVDO USB device, instead of 0.0.0.0 for a Default Gateway, I get an appropriate IP address for the dongle's subnet.

I am surprised/puzzled that I am able to browse the internet at all, given that the Kyocera does not 'know' what the default gateway is. Makes me think that some part of the software is aware of the gateway, at least for outgoing traffic, but my inbound traffic gets lost trying to find its way back to me.

So, what do I do next? I am going to trade in one of the ATT Mercury dongles for another model that ATT offers and see if that fixes the problem.

More detail (in case you are wondering why don't I just use a Verizon dongle) There is no Verizon signal at this location. My ultimate goal is to set up Dynamic DNS so that we can easily tap into a security camera located on site - but until I resolve the gateway issue, I am stuck.

Torrey · Posted: Mon Feb 08, 2010 12:55 pm Post subject:

Sounds like ATT is blocking those ports... To see which ports are not blocked, you could always put one of the machines on your network on the DMZ, and then do a port scan for your ATT public IP address. Make sure you don't have a firewall enabled on the machine that is on the DMZ.

Note: For security reasons, DO NOT leave this machine on the DMZ for longer than it takes you to perform the test. As all ports being open is a huge security risk.

sfusco · EVDO Newbie Joined: 03 Feb 2010 Posts: 7

I can try the DMZ and port scan and greatly appreciate your troubleshooting suggestions, but it would seem that without a default gateway nothing is going to be able to find its way back out to me...

The fact that I get a gateway with a Verizon Broadband dongle, but not with the AT&T does not seem to be a function of port blocking.

Know what I mean? I'll report back the results of the DMZ/port scan.

sfusco · EVDO Newbie Joined: 03 Feb 2010 Posts: 7

After a lot of research, I have discovered that AT&T's default mobile broadband service does not permit any inbound traffic. You think they would have told me that when I called...

Anyway, I found another web site where a user was having similar issues to what I described, and the user there said that the solution is:

"...contact business sales and ask for 'mobile terminated data', since you want to go from the internet to the device. They have special plans for this." The answer can be found in one of ATT's forums. The thread subject is "Hosting a webcam AT&T wireless and a cellular router". I won't insert the link here, cause that makes this forum unhappy...

Thanks for taking the time to help me logic this one out. AT&T could have saved me 10 days of consternation if their tech support could answer a simple question, or at least be smart enough to know that they did not know the answer and kick me up the chain of command. Sheeeeesh.

Torrey · Posted: Mon Feb 08, 2010 10:53 pm Post subject:

sfusco · EVDO Newbie Joined: 03 Feb 2010 Posts: 7

Just closing the loop with how this was eventually resolved.

With ATT you need to contact them - preferably a business IP specialist, because the regular tech support people will have no idea what you are talking about. There are several options for setting up a static IP and data termination. i2gold was the option that worked for me, since it was the least expensive -- $3 per month per card.

Once ATT has provisioned your aircard, you need to go into the Kyocera - Advanced - Modem Settings and add your new APN or Access Point Name (in my case i2gold) into the appropriate box. First make sure that you have selected the right modem interface in the drop-down box (express card, cardbus, USB1, or USB2). Save the settings, reboot the router, plug and unplug the aircard. Say a small prayer.

I did one other step that I am not sure is necessary, but I can't say that it isn't - before I reconfigured the router, I plugged my aircard directly into my laptop and added the APN to the aircard configuration. I suspect that this step was uneccesary, but I mention it, just in case...

Cheers, and thanks for your assistance.