CGNAT, Double NAT, Closed Ports -SOLVED-

[dw1spc]

Hi!

To those who also struggle (like me) with ISP restrictions like CGNAT, Double NAT, Closed ports, No SIP ALG. I have a solution for you. This is what I am currently using right now and it works flawlessly. It’s self healing, configure once and forget it. Move it from one ISP to another with no problem. 100% Plug and play. Meraki cloud VPN will bypass all ISP restrictions and the connection is very stable even after power outage it will connect by itself. My Radio body is in the Philippines and the control
is here with me in Dubai.

1. Buy 2 units of “UNCLAIMED” Cisco Meraki Z1 from ebay approximately 24USD each. (It should be unclaimed by the previous user otherwise it’s useless.)

2. Buy 2 3yrs Enterprise license from meraki for 60USD each.

3. Create a meraki dashboard. https://account.meraki.com

4. Configure site-to-site vpn. Unlike any other VPN, meraki site-to-site vpn is using the meraki cloud instead of router to router handshake via port forwarding. It’s only 2 mouse clicks away and you are connected.

5. If you want to install it in your car (control side), then buy an “unlocked” netgear aircard 340u from ebay. (This is only one of the few usb modems that meraki Z1 is configured to work.)

Because there is very limited information on the internet, it took me 3 months to get my system running. That’s why I am happy to share this and cut future frustrations of new users like me.

https://youtu.be/4f04JT6vBNI
https://youtu.be/fsKU26knhx8



Enjoy!

De
DW1SPC/ Jonathan
73!


Sent from my iPhone using Tapatalk

[VE3VEE]

Hi Jonathan,

Thanks for sharing. Is this something that can be used by people who have no public IP on either end?

Marvin VE3VEE

[dw1spc]

Yes! My radio side is behind ISP router and another 3rd party router. My ISP router is on CGNAT and cascading it to another router becomes double NAT. Meraki punch hole (hole punching UDP) to both of them to reach the public IP.

And my control side has the same situation or when I am mobile I use the aircard 340 usb modem which is directly attached to the meraki z1.


Sent from my iPhone using Tapatalk

[F6IIV]

Hi Jonathan,
Thank you for your post. It seems to be very difficult actually to find unclaimed Meraki Z1. The Meraki Z3, which replaced the Z1, is very expensive and also hard to find. So I'm looking for an equivalent solution from another provider, any idea ?
Regards, and 73 de Marc, f6iiv.

[dw1spc]

US ebay has a lot of "unclaimed z1's until now. Meraki Z3 is the best option right now if you will ask me. Because Z1 is in it's end of life, support for this model will be untill 2025 only. it means in 2025, z1 vpn may stop working.