Elk M1 - Cannot Connect over WAN using Secure Port

Hi All,
 
Hoping someone can shed some light on how to connect via WAN using secure port.
 
I have a static IP on the M1XEP - 
DHCP reservation for the M1XEP IP using MAC Address
Port 2601 forwarded to internal IP
Port 2601 is open
DDNS is working properly.
 
It does not work using ElkRP or ekeypad using secure port from outside the LAN
 
If I enable non secureport 2101 and forward 2101, I can connect with either ElkRP or ekeypad using 2101, but would prefer not to use non-secure port for obvious reason.
 
Internet is VDSL, and using TP link router.

You have a static IP or DNS?

So, if you go to:
 
http://www.canyouseeme.org/
 
And enter port 2601, you get a "Success" message?

Port is open and visible.

Weird thing is that 2101 as non secure works from anywhere. Lab or wan.

Port is open and visible.

Weird thing is that 2101 as non secure works from anywhere. Lab or wan. Il is static

equitax said:

Port is open and visible.

Weird thing is that 2101 as non secure works from anywhere. Lab or wan. Il is static

Click to expand...

 
Sounds like a security protocol issue. Have you upgraded the firmware on the M1XEP to the latest level?  V2.0.34

Yikes - Boot ver is 1.14, Firware is 1.2.14 - I suppose the upgrade is in order..  Can I go straight to 2.0.34 or does it need to be done in steps.
 
I don't want to Brick it...

equitax said:

Yikes - Boot ver is 1.14, Firware is 1.2.14 - I suppose the upgrade is in order..  Can I go straight to 2.0.34 or does it need to be done in steps.
 
I don't want to Brick it...

Click to expand...

 
You'll need to update the bootware version first.  You'll also need the current version of RP2.  Then you can install the latest firmware. Read the Release Notes carefully and follow the steps.

Keep in mind, you're going from the Java supported version/browser interface to the non-supported.
 
RP should be able to connect no matter what version though. Can you ping from outside the network? Do you have all the required ports open on the firewall? There's at least 3-4 I remember off the top of my head.

Have tried everything. Including dmz. I have 2101 26 and 2501 forwarded to the static ip.

It only fails if secure. Tried setting secure port to 2101 that doesn't work either.

I connect using elk rp or ekeypad.

Hope firmware is the problem. Getting mighty frustrated.

equitax said:

Hope firmware is the problem. Getting mighty frustrated.

Click to expand...

 
The older M1XEP firmware only supported SSL v3 for secure connections.  But due to a security problem with SSL, pretty much all browsers and operating systems (including iOS) removed support for SSL by the end of 2014.  I'm willing to bet that's why you can't connect.
 
Upgrading the M1XEP to v2 of the firmware should fix the problem.

RAL said:

The older M1XEP firmware only supported SSL v3 for secure connections.  But due to a security problem with SSL, pretty much all browsers and operating systems (including iOS) removed support for SSL by the end of 2014.  I'm willing to bet that's why you can't connect.
 
Upgrading the M1XEP to v2 of the firmware should fix the problem.

Click to expand...

RAL,
 
If this was the case, I wouldn't be able to connect with either of the machines I have in front of me at the moment (or connect to a bunch of client's units). I'm personally running 1.3.28 as are many of my accounts (last supporting the java app off the top of my head). I have 2 pretty "conservative" corporate imaged laptops.
 
Have we gotten an answer if the port is exposed and not blocked by the ISP? Port forwarding/redirect tried?

Hi all. The upgrade of firmware solved the problem with no changes on the router.

my firmware and boot ware were ancient. I needed to update boot ware in 2 steps and then the firmware once.

Good to have this online. Thanks all for your help!

Also to clarify the version of firmware that was on my zero was pre 1.3.28, which is why I needed to up to 1.3.28 first. Maybe if I stopped there my issue would have been resolved also. But i did not test at that stage.

Glad you got it working!