Fantasy Grounds Classic Connections Explained

[damned]

Welcome pcsantosf

Question 2 says to check if FG and your Router both show the same Public IP address. Yours do not. Your ISP is doing CGNAT and this prevents you from port forwarding.
You can:
a) call your ISP and tell them that you have installed a new home security system and you need to do IPv4 port forwards - can you help (this seems to work better than saying you need it for a game)
b) look at the Port Forwarding Alternatives thread

[johnecc]

Hi damned

I am looking at running some online games for friends, and I had one of them try to connect to my FG Classic last Saturday. He had no luck doing so, just the 'Unable to connect' message. I have tried several things:

Clicking on 'Run Test' within FG results in Failure.
Turning Off Windows Defender AV
Turning Off Windows Firewall
Turning Off router Firewall

All these end in Failure, and friend still unable to connect. Below are the answers to the 8 points you ask:

1. Your LAN IP Address - 192.168.8.100
2. The first two sets (octects) of your WAN IP as displayed by Fantasy Grounds and as displayed by your Router - 128.18.x.x
3. Whether you are using Wired or Wireless (and not both) - Wireless (Vodafone)
4. Confirmation that you have set your Adapter in Network and Sharing Centre to Private - Yes
5. Confirmation of what AV you are running and whether you have set any exceptions - Windows Defender
6. Post the results of the tracert 8.8.8.8 command (if you have security concerns you can remove this bit once its been responded to)
Tracing route to dns.google [8.8.8.8]
over a maximum of 30 hops:

1 4 ms 7 ms 3 ms pocket.wifi [192.168.8.1]
2 * * * Request timed out.
3 41 ms 47 ms 25 ms 10.247.97.97
4 35 ms 36 ms 36 ms 10.252.52.197
5 64 ms 42 ms 34 ms 10.246.10.254
6 65 ms 44 ms 41 ms 120.18.253.249
7 * * 29 ms dns.google [8.8.8.8]

Trace complete.
7. Confirmation as to what you have setup in your Router if changes have been made - Followed instructions from here https://portforward.com/huawei/e5573s/; see image
Attachment 36655
8. Confirmation you do or do not have any Virtualisation NICs - Yes, VMWare & VirtualBox NICs

I hope you can help.

Cheers
John

[damned]

Hi damned

I am looking at running some online games for friends, and I had one of them try to connect to my FG Classic last Saturday. He had no luck doing so, just the 'Unable to connect' message. I have tried several things:

Clicking on 'Run Test' within FG results in Failure.
Turning Off Windows Defender AV
Turning Off Windows Firewall
Turning Off router Firewall

All these end in Failure, and friend still unable to connect. Below are the answers to the 8 points you ask:

1. Your LAN IP Address - 192.168.8.100
2. The first two sets (octects) of your WAN IP as displayed by Fantasy Grounds and as displayed by your Router - 128.18.x.x
3. Whether you are using Wired or Wireless (and not both) - Wireless (Vodafone)
4. Confirmation that you have set your Adapter in Network and Sharing Centre to Private - Yes
5. Confirmation of what AV you are running and whether you have set any exceptions - Windows Defender
6. Post the results of the tracert 8.8.8.8 command (if you have security concerns you can remove this bit once its been responded to)
Tracing route to dns.google [8.8.8.8]
over a maximum of 30 hops:

1 4 ms 7 ms 3 ms pocket.wifi [192.168.8.1]
2 * * * Request timed out.
3 41 ms 47 ms 25 ms 10.247.97.97
4 35 ms 36 ms 36 ms 10.252.52.197
5 64 ms 42 ms 34 ms 10.246.10.254
6 65 ms 44 ms 41 ms 120.18.253.249
7 * * 29 ms dns.google [8.8.8.8]

Trace complete.
7. Confirmation as to what you have setup in your Router if changes have been made - Followed instructions from here https://portforward.com/huawei/e5573s/; see image
Attachment 36655
8. Confirmation you do or do not have any Virtualisation NICs - Yes, VMWare & VirtualBox NICs

I hope you can help.

Cheers
John

Can you confirm your ROUTER/MODEM displays the 128.18 address as its WAN interface?
From your tracert it suggests that this is not the case and if its not the case it doesnt look like you can port forward.
You may need to also try:
a) call your ISP and tell them that you have installed a new home security system and you need to do IPv4 port forwards - can you help (this seems to work better than saying you need it for a game)
b) look at the Port Forwarding Alternatives thread

One other thing - if your router and FG WAN match then try disabling the virtual nics before loading FG and see if that works.

[pcsantosf]

Welcome pcsantosf

Question 2 says to check if FG and your Router both show the same Public IP address. Yours do not. Your ISP is doing CGNAT and this prevents you from port forwarding.
You can:
a) call your ISP and tell them that you have installed a new home security system and you need to do IPv4 port forwards - can you help (this seems to work better than saying you need it for a game)
b) look at the Port Forwarding Alternatives thread

The ISP technician came here this morning, he said CGNAT was preventing port forwarding but they removed this barrier. They did a `NAT IPV4 rollback` (I dont know what it is). Now some ports are accessible, but 1802 still blocked. My ISP says there`s nothing else they can do, but if I use a private router instead of theirs, I may have some success. So, what do you think? port_access_ok.PNG

[damned]

The ISP technician came here this morning, he said CGNAT was preventing port forwarding but they removed this barrier. They did a `NAT IPV4 rollback` (I dont know what it is). Now some ports are accessible, but 1802 still blocked. My ISP says there`s nothing else they can do, but if I use a private router instead of theirs, I may have some success. So, what do you think? port_access_ok.PNG

They may be giving you access to a small number of ports.

Make a copy of your Fantasy Grounds shortcut.
Edit the shortcut and put -p5080 at the end so the Target looks like this:
"C:\Program Files (x86)\Fantasy Grounds\FantasyGrounds.exe" -p5080

Substitute whatever port you can port forward in there.
Obviously you must also add the Port Forward and also do the Firewall rules and everything else.

Now your players also need to make a copy of and edit the new shortcut.
When playing to together you must all use the new shortcut.
I dont think the connection test will work.

[pcsantosf]

They may be giving you access to a small number of ports.

Make a copy of your Fantasy Grounds shortcut.
Edit the shortcut and put -p5080 at the end so the Target looks like this:
"C:\Program Files (x86)\Fantasy Grounds\FantasyGrounds.exe" -p5080

Substitute whatever port you can port forward in there.
Obviously you must also add the Port Forward and also do the Firewall rules and everything else.

Now your players also need to make a copy of and edit the new shortcut.
When playing to together you must all use the new shortcut.
I dont think the connection test will work.

SUCESS.PNG
With the shortcut trick I got my first Success. Now I will ask some of my players to test and check if they are able to join. I will return with a feedback after that. Thank you very much!

[damned]

Woot pcsantosf well done.
If you are playing as a player with another GM you will need to use your original shortcut.

[DomesticEngineer]

Hello! I've followed the directions from the original post, but players still can't connect. CanYouSeeMe.org indicates that my ISP isn't blocking Port 1802. Fantasy Grounds shows a successful connection test. Please help.

1. Your LAN IP Address
192.168.2.1

2. The first two sets (octects) of your WAN IP as displayed by Fantasy Grounds and as displayed by your Router
FG: 173.25.XX.XX
Router: 173.25.XX.XX

3. Whether you are using Wired or Wireless (and not both)
Wireless

4. Confirmation that you have set your Adapter in Network and Sharing Centre to Private
Network Adapter set to private

5. Confirmation of what AV you are running and whether you have set any exceptions
No antivirus

6. Post the results of the tracert 8.8.8.8 command (if you have security concerns you can remove this bit once its been responded to)
Tracing route to dns.google [8.8.8.8]
over a maximum of 30 hops:

1 1 ms 1 ms <1 ms 192.168.2.1
2 11 ms 12 ms 8 ms 10.164.1.1
3 11 ms 9 ms 9 ms 172.30.1.5
4 16 ms 23 ms 17 ms po10.demia001cr1.mchsi.com [68.66.73.253]
5 15 ms 16 ms 18 ms po13.chgil001cr1.mchsi.com [68.66.72.41]
6 17 ms 16 ms 29 ms po10.chgil001er1.mchsi.com [68.66.73.122]
7 16 ms 19 ms 15 ms 72.14.194.2
8 18 ms 16 ms 17 ms 209.85.240.245
9 16 ms 18 ms 15 ms 108.170.238.91
10 16 ms 16 ms 15 ms dns.google [8.8.8.8]

7. Confirmation as to what you have setup in your Router if changes have been made
I've created port-forwarding rule
"Fantasy Grounds - Port 1802-1802 TCP 192.168.2.4 1802-1802"

8. Confirmation you do or do not have any Virtualisation NICs
No virtualisation NICs

[LordEntrails]

Hello! I've followed the directions from the original post, but players still can't connect. CanYouSeeMe.org indicates that my ISP isn't blocking Port 1802. Fantasy Grounds shows a successful connection test. Please help.
<clip>
6. Post the results of the tracert 8.8.8.8 command (if you have security concerns you can remove this bit once its been responded to)
Tracing route to dns.google [8.8.8.8]
over a maximum of 30 hops:

1 1 ms 1 ms <1 ms 192.168.2.1
2 11 ms 12 ms 8 ms 10.164.1.1
3 11 ms 9 ms 9 ms 172.30.1.5
4 16 ms 23 ms 17 ms po10.demia001cr1.mchsi.com [68.66.73.253]
5 15 ms 16 ms 18 ms po13.chgil001cr1.mchsi.com [68.66.72.41]
6 17 ms 16 ms 29 ms po10.chgil001er1.mchsi.com [68.66.73.122]
7 16 ms 19 ms 15 ms 72.14.194.2
8 18 ms 16 ms 17 ms 209.85.240.245
9 16 ms 18 ms 15 ms 108.170.238.91
10 16 ms 16 ms 15 ms dns.google [8.8.8.8]

That second hop is a private IP address. Meaning either you are using two routers/modems/gateways, or more likely your ISP is doing CGNAT and sharing their pool of IPv4 addresses with multiple users.

If you don't have access to the second device (10.164.1.1) then you can call your ISP and tell them you have a new security system that needs a public facing IPv4 address on port 1802, can they help? They might be able/willing to configure port forwarding for you or to give you a public IP address. Otherwise you will have to look at using a VPN solution or FGU.

EDIT: actually, the third hop is private too. Before you go further I would wait until one of the folks with more network experience than me replies. Reference; https://help.keenetic.com/hc/en-us/a...te-IP-address-

[DomesticEngineer]

That second hop is a private IP address. Meaning either you are using two routers/modems/gateways, or more likely your ISP is doing CGNAT and sharing their pool of IPv4 addresses with multiple users.

If you don't have access to the second device (10.164.1.1) then you can call your ISP and tell them you have a new security system that needs a public facing IPv4 address on port 1802, can they help? They might be able/willing to configure port forwarding for you or to give you a public IP address. Otherwise you will have to look at using a VPN solution or FGU.

EDIT: actually, the third hop is private too. Before you go further I would wait until one of the folks with more network experience than me replies. Reference; https://help.keenetic.com/hc/en-us/a...te-IP-address-

Thank you for your help. I appreciate your fast response.