# Carrier-Grade NAT & Yunohost \>\> Workaround?

**URL:** https://forum.yunohost.org/t/carrier-grade-nat-yunohost-workaround/13780
**Category:** Discuss
**Tags:** english
**Created:** [December 30, 2020, 1:31pm UTC](https://forum.yunohost.org/t/carrier-grade-nat-yunohost-workaround/13780 "2020-12-30T13:31:57Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![arkadi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/arkadi/32/5350_2.png) [@arkadi](https://forum.yunohost.org/u/arkadi)
#### Post date: [December 30, 2020, 1:31pm UTC](https://forum.yunohost.org/t/carrier-grade-nat-yunohost-workaround/13780/1 "2020-12-30T13:31:57Z")

</div>

**Backstory** : Wife wants to change ISPs to get a better, this means for a 3 month transition period I am stuck on some LTE+ garbage that can’t do port forwarding. I can’t live without Yunohost for 3 months!

So, it seems I need to find a VPN with a static IP & port forwarding. Any suggestions? I’ve seen some guides on using VPS to make own VPN but that looks very complex.

I just want the simplest solution to make my Yunohost server usable for the next 3 months. I can pay for a VPN.

**Details** :  
ISP is FarEastTone in Taiwan  
Router is WondaLink Inc. WRT2061

---

<div class="post-metadata">

### Author: ![arkadi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/arkadi/32/5350_2.png) [@arkadi](https://forum.yunohost.org/u/arkadi)
#### Post date: [December 30, 2020, 11:25pm UTC](https://forum.yunohost.org/t/carrier-grade-nat-yunohost-workaround/13780/2 "2020-12-30T23:25:05Z")

</div>

Now trying this 1 click server [https://marketplace.digitalocean.com/apps/openvpn-pihole](https://marketplace.digitalocean.com/apps/openvpn-pihole) on DigitalOcean.

1. Super easy to setup. Works no problem as a client. Highly recommend it if you want a quick VPN when going on a trip or something.
2. But…not sure how to configure it to forward ports to Yunohost.

So…Has anybody ever run a VPS with OpenVPN to forward traffic to your local Yunohost installation?

---

<div class="post-metadata">

### Author: ![arkadi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/arkadi/32/5350_2.png) [@arkadi](https://forum.yunohost.org/u/arkadi)
#### Post date: [January 2, 2021, 12:31am UTC](https://forum.yunohost.org/t/carrier-grade-nat-yunohost-workaround/13780/3 "2021-01-02T00:31:34Z")

</div>

Ok, here is how to do it on OpenVPN Access Server.

> **[How to setup DMZ in OpenVPN Access Server | OpenVPN](https://openvpn.net/vpn-server-resources/how-to-setup-dmz-in-openvpn-access-server/)**
>
> Setting up DMZ allows one or more public IP addresses to be NATed at the server into the VPN tunnel and then routed to a specific client. Here's how..

I’m forwarding all ports to my server.

Working now!

---

<div class="post-metadata">

### Author: ![arkadi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/arkadi/32/5350_2.png) [@arkadi](https://forum.yunohost.org/u/arkadi)
#### Post date: [September 14, 2022, 9:06am UTC](https://forum.yunohost.org/t/carrier-grade-nat-yunohost-workaround/13780/4 "2022-09-14T09:06:59Z")

</div>

Just had to do this again, so I will add more details to make it easier for myself and others to do this.

1. Setup DMZ from new carrier router to your Yunohost box.
2. Setup OpenVPN Access server on a VPS: [Creating A DMZ In OpenVPN Access Server | OpenVPN](https://openvpn.net/vpn-server-resources/how-to-setup-dmz-in-openvpn-access-server/)
3. In OpenVPN Access server, set the user to be “Autologin”, and DMZ to your carrier router. To forward all ports just type in the IP address, don’t specify ports.
4. Download the user profile (ovpn file) for the user you created for Yunohost box.
5. On your Yunohost box, install openvpn3. Load the user profile (\*.ovpn file) [https://community.openvpn.net/openvpn/wiki/OpenVPN3Linux](https://community.openvpn.net/openvpn/wiki/OpenVPN3Linux)
