How to configure the router so Back To Mac optimal

Hi,

When I was checking the iCloud account settings on my Mac (running macOS 10.13.6), the Back To My Mac says it may be slow because the NAT-PMP or UPnP setting on the router is turned off.


User uploaded file


I checked, and while the UPnP is already turned on, the PMP is not yet configured, as can be seen on the image below:

User uploaded file

Anyone know how to configure the PMP setting on the router?


Thanks!

MacBook, macOS High Sierra (10.13), 12-inch, Early 2017

Posted on Jul 25, 2018 9:37 PM

Reply
Question marked as Top-ranking reply

Posted on Jul 29, 2018 9:40 AM

Yes, I see that you have enabled UPnP on your Huawei gateway and are still getting the "error" message when using BtMM. Since your gateway does not have an option to enable/disable NAT-PMP, it leads me to at least two reasons that you are getting this message:

  1. BtMM attempts to open the appropriate ports on your gateway to allow it to communicate. Again, it would do this "automatically" by using either the UPnP or NAT-PMP protocols. BtMM can be a bit finicky and may not perform this process efficiently with all makes of routers. However, the message does provide a clue ... and that is about it being "slow." Which leads me to the second potential reason.
  2. In order for BtMM to work "efficiently" the public (WAN-side) IP address of your gateway must be publicly reachable. That is, its IP address must NOT start with 10, 172, or 192. A quick way to test this is to run the traceroute command in either the Terminal or the Network Utility app.


As an example, l will run it from the Network Utility, as follows:

  • Option-click on the Apple logo on the macOS menu bar.
  • Select System Information.
  • From the System Information menu bar, select Window > Network Utility
  • Click on the Traceroute tab.
  • I will use 8.8.8.8 (the Google DNS server) for this test. Enter this value in the "Enter an Internet address to trace the route to" field.
  • Click on Trace.

I provided a screen shot of my results below:

User uploaded file

Each numbered "hop" represents a router that the traceroute packet has traversed to its final destination at 8.8.8.8. The first hop should be a private IP address. That is an address that starts with 10, 172, or 192. This would be on your local network and on the LAN-side of your Huawei gateway. It would also be known as your gateway's router address. You can see it started with "10" from the image. The next hop starts with "173" which is a public IP address and what we would want.


I suggest that you use the Network Utility to run a traceroute from your local network and see what you get. Look at the IP addresses especially at the first two or three hops to see if they are private or public. You don't need to post them, just let us know your results.

25 replies
Question marked as Top-ranking reply

Jul 29, 2018 9:40 AM in response to andy js

Yes, I see that you have enabled UPnP on your Huawei gateway and are still getting the "error" message when using BtMM. Since your gateway does not have an option to enable/disable NAT-PMP, it leads me to at least two reasons that you are getting this message:

  1. BtMM attempts to open the appropriate ports on your gateway to allow it to communicate. Again, it would do this "automatically" by using either the UPnP or NAT-PMP protocols. BtMM can be a bit finicky and may not perform this process efficiently with all makes of routers. However, the message does provide a clue ... and that is about it being "slow." Which leads me to the second potential reason.
  2. In order for BtMM to work "efficiently" the public (WAN-side) IP address of your gateway must be publicly reachable. That is, its IP address must NOT start with 10, 172, or 192. A quick way to test this is to run the traceroute command in either the Terminal or the Network Utility app.


As an example, l will run it from the Network Utility, as follows:

  • Option-click on the Apple logo on the macOS menu bar.
  • Select System Information.
  • From the System Information menu bar, select Window > Network Utility
  • Click on the Traceroute tab.
  • I will use 8.8.8.8 (the Google DNS server) for this test. Enter this value in the "Enter an Internet address to trace the route to" field.
  • Click on Trace.

I provided a screen shot of my results below:

User uploaded file

Each numbered "hop" represents a router that the traceroute packet has traversed to its final destination at 8.8.8.8. The first hop should be a private IP address. That is an address that starts with 10, 172, or 192. This would be on your local network and on the LAN-side of your Huawei gateway. It would also be known as your gateway's router address. You can see it started with "10" from the image. The next hop starts with "173" which is a public IP address and what we would want.


I suggest that you use the Network Utility to run a traceroute from your local network and see what you get. Look at the IP addresses especially at the first two or three hops to see if they are private or public. You don't need to post them, just let us know your results.

Jul 29, 2018 1:12 PM in response to Tesserax

Tesserax wrote:


Yes, I see that you have enabled UPnP on your Huawei gateway and are still getting the "error" message when using BtMM. Since your gateway does not have an option to enable/disable NAT-PMP, it leads me to at least two reasons that you are getting this message:

  1. BtMM attempts to open the appropriate ports on your gateway to allow it to communicate. Again, it would do this "automatically" by using either the UPnP or NAT-PMP protocols. BtMM can be a bit finicky and may not perform this process efficiently with all makes of routers. However, the message does provide a clue ... and that is about it being "slow." Which leads me to the second potential reason.
  2. In order for BtMM to work "efficiently" the public (WAN-side) IP address of your gateway must be publicly reachable. That is, its IP address must NOT start with 10, 172, or 192. A quick way to test this is to run the traceroute command in either the Terminal or the Network Utility app.


As an example, l will run it from the Network Utility, as follows:

  • Option-click on the Apple logo on the macOS menu bar.
  • Select System Information.
  • From the System Information menu bar, select Window > Network Utility
  • Click on the Traceroute tab.
  • I will use 8.8.8.8 (the Google DNS server) for this test. Enter this value in the "Enter an Internet address to trace the route to" field.
  • Click on Trace.

I provided a screen shot of my results below:

..........

Oh my goodness, thank you.

I'm going to try your suggestions tomorrow, it's already 00:39 AM here as I'm writing this, and besides that Huawei router is at the office.

I'll let you know the result a.s.a.p. when it's done.

Thanks again, talk to you soon.


[Edited by Host]

Jul 31, 2018 8:00 AM in response to Tesserax

Tesserax wrote:


No PPPoE is just a type of connection. The issue is that your ISP appears to be providing you with private IP address (172.16.xx.xx from the traceroute). You would then have a double NAT condition where you basically have two routers in series that are providing NAT service.


Looks like your only choice now is to either:

  1. Change ISP or ask your ISP to provide your modem with a public IP address, or
  2. User another third-party remote access product, like LogMeIn, for remote access.

Thank you very much for your help, really appreciate it.

(compared to the others who keep shoving me links to wifi for beginners)

It feels good to talk to someone who really know about the problem at hand, you even provided me step-by-step how to do it.

Two thumbs up.

This is how the Apple Support Community should be.

Jul 30, 2018 1:33 PM in response to andy js

No PPPoE is just a type of connection. The issue is that your ISP appears to be providing you with private IP address (172.16.xx.xx from the traceroute). You would then have a double NAT condition where you basically have two routers in series that are providing NAT service.


Looks like your only choice now is to either:

  1. Change ISP or ask your ISP to provide your modem with a public IP address, or
  2. User another third-party remote access product, like LogMeIn, for remote access.

Jul 28, 2018 2:41 PM in response to andy js

NAT-PMP is a networking protocol similar to UPnP that is used on Apple routers as these routers do not support UPnP natively. Back to My Mac (BtMM) can use either of these protocols to open the necessary firewall ports on a router for it to work. It doesn't need both enabled ... so your enabling UPnP on your Huawei router is all that is needed.

Jul 28, 2018 7:24 AM in response to andy js

FWIW I think the best answer when having an issue with a third party device is to ask for help from the third party device manufacturer. If you are having a problem with your router the best place to seek help is with the manufacturer. If you are having trouble with a Microsoft product the best place to seek help is with Microsoft. If you are having trouble with your ...

You were provided with links to possible assistance then advised to seek help from the router manufacturer. I think the help provided was very reasonable. If you don't want to take the advice offered you might as well not ask.

Jul 28, 2018 8:20 AM in response to tygb

tygb wrote:


See these articles Resolve Back to My Mac status messages in iCloud preferences - Apple Support

macOS Sierra: If Back to My Mac doesn’t work

AirPort Utility 6.x: Set NAT options for your base station or AirPort Time Capsule

Thanks, but that is for AirPort while mine is Huawei.

But still, I'll try them out tomorrow, it's 22:16 PM here when I'm writing this reply.

Jul 29, 2018 4:48 AM in response to Tesserax

Tesserax wrote:


NAT-PMP is a networking protocol similar to UPnP that is used on Apple routers as these routers do not support UPnP natively. Back to My Mac (BtMM) can use either of these protocols to open the necessary firewall ports on a router for it to work. It doesn't need both enabled ... so your enabling UPnP on your Huawei router is all that is needed.

The UPnP setting is already turned on, and yet I still got that message about turning on the NAT-PMP, that's why I'm asking it here.

Below is the screenshot of the UPnP:

User uploaded file

Jul 29, 2018 10:07 PM in response to andy js

No the “173” address is just an example. The first two hops are what you would want in this case.


Based on what I can see from traceroute there is a jump in hop time at hop 5 that is continuing to increase towards the destination. This would indicate an issue starting with that router going forward. This is neither your Huawei or your ISP, but somewhere farther down the line towards the Google DNS server. This would increase the overall data latency and possibly affect BtMM’s performance leading to the “error” message.


Although you could get some clues to who “owns” the “offending” router, you’re not going to be able to resolve it. This also may be a temporary condition that could “fix itself” in time.


So, unfortunately at this point, there is no real solution. Sorry, I wasn’t able to help you find one.

Jul 28, 2018 7:39 AM in response to Kappy

Kappy wrote:


Recommended settings for Wi-Fi routers and access points

Resetting Your Router the Paranoid (=Right) Way

Choosing a Wi-Fi router to use with Apple devices

OMG.

Are you kidding me, those are for someone who don't know anything about WiFi and routers.

I knew all of those already, what I'm asking are advanced settings, if you don't know then PLEASE restrain yourself from sending for-beginner-links like that.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How to configure the router so Back To Mac optimal

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.