Site to Site VPN - Is it possible with ee

[jatr30]

Dear Community

I am currently working away from home, but would like to access my Home network, for smart home usage i.e. CCTV, NAS (NOT Streaming) and able to easily remote access to my families devices for support and i do not want to open any ports et al to add potential vulnerabilities.

I have two Unifi products - Dream Machine (Remote address on EE Mobile Network) and a UNIFI UDM Pro on a VDSL connection. They have the ability to create a site to site VPN, which works extremely well using a "three" mobile network, but three does not give me a stable LTE+ connection, whilst EE signal is actually epic, considering where i am. I have done a little research and Unifi state that any CGNAT networks need the support of the provider. Any help much appreciated.

John 

[XRaySpeX]

You may find yourself up against a limitation of EE's mobile network. The EE mobile network uses Carrier Grade NAT (CGNAT) resulting in a double NAT, which games consoles often object to, which means you don't get your own public IP address but share it with other users. So you can't be uniquely id'ed on the Net & therefore your LAN cannot be addressed from outside for unsolicited accesses. This is unlike fixed BB.

If this occurs there is nowt you can do to avoid it.