How to configure the router so Back To Mac optimal

Hi,

When I was checking the iCloud account settings on my Mac (running macOS 10.13.6), the Back To My Mac says it may be slow because the NAT-PMP or UPnP setting on the router is turned off.


User uploaded file


I checked, and while the UPnP is already turned on, the PMP is not yet configured, as can be seen on the image below:

User uploaded file

Anyone know how to configure the PMP setting on the router?


Thanks!

MacBook, macOS High Sierra (10.13), 12-inch, Early 2017

Posted on Jul 25, 2018 9:37 PM

Reply
Question marked as Top-ranking reply

Posted on Jul 29, 2018 9:40 AM

Yes, I see that you have enabled UPnP on your Huawei gateway and are still getting the "error" message when using BtMM. Since your gateway does not have an option to enable/disable NAT-PMP, it leads me to at least two reasons that you are getting this message:

  1. BtMM attempts to open the appropriate ports on your gateway to allow it to communicate. Again, it would do this "automatically" by using either the UPnP or NAT-PMP protocols. BtMM can be a bit finicky and may not perform this process efficiently with all makes of routers. However, the message does provide a clue ... and that is about it being "slow." Which leads me to the second potential reason.
  2. In order for BtMM to work "efficiently" the public (WAN-side) IP address of your gateway must be publicly reachable. That is, its IP address must NOT start with 10, 172, or 192. A quick way to test this is to run the traceroute command in either the Terminal or the Network Utility app.


As an example, l will run it from the Network Utility, as follows:

  • Option-click on the Apple logo on the macOS menu bar.
  • Select System Information.
  • From the System Information menu bar, select Window > Network Utility
  • Click on the Traceroute tab.
  • I will use 8.8.8.8 (the Google DNS server) for this test. Enter this value in the "Enter an Internet address to trace the route to" field.
  • Click on Trace.

I provided a screen shot of my results below:

User uploaded file

Each numbered "hop" represents a router that the traceroute packet has traversed to its final destination at 8.8.8.8. The first hop should be a private IP address. That is an address that starts with 10, 172, or 192. This would be on your local network and on the LAN-side of your Huawei gateway. It would also be known as your gateway's router address. You can see it started with "10" from the image. The next hop starts with "173" which is a public IP address and what we would want.


I suggest that you use the Network Utility to run a traceroute from your local network and see what you get. Look at the IP addresses especially at the first two or three hops to see if they are private or public. You don't need to post them, just let us know your results.

25 replies

Jul 28, 2018 7:54 AM in response to BobTheFisherman

BobTheFisherman wrote:


FWIW I think the best answer when having an issue with a third party device is to ask for help from the third party device manufacturer. If you are having a problem with your router the best place to seek help is with the manufacturer. If you are having trouble with a Microsoft product the best place to seek help is with Microsoft. If you are having trouble with your ...

You were provided with links to possible assistance then advised to seek help from the router manufacturer. I think the help provided was very reasonable. If you don't want to take the advice offered you might as well not ask.

Wow, just wow.

Did you even carefully thought through of that guy's answer first before you wrote your reply up there?

First of all, I don't live in the US. I live in Indonesia, Asia-Pacific region, a country with very-very lousy tech support from every tech companies (small to big).

Most of them don't even have tech support, if I search for tech support in their website, there's no Indonesian domain available.

Second, this is a Huawei router I'm talking about. It's made in China, and Huawei don't provide tech support here either.

Third, the same line I've wrote before: why would I ask here if I can pick the phone and ask the tech support myself? Not every tech support on the line (or on email) can answer advanced settings, which I asked in the first place.


I asked an advanced settings in a router, not just some basic settings.

The links that guy before you gave are all for beginner, I knew them already.

Again, what I asked is an advanced setting.


Did you read the question or not?

If you don't even read the question, please restrain yourself.


PS: oh one more thing, I don't even know what's FWIW, and no I'm not asking you to answer and explain it, just want to let you know you're not helping others if you love using abbreviation like that.

Jul 28, 2018 8:13 AM in response to BobTheFisherman

BobTheFisherman wrote:


FWIW I think the best answer when having an issue with a third party device is to ask for help from the third party device manufacturer. If you are having a problem with your router the best place to seek help is with the manufacturer. If you are having trouble with a Microsoft product the best place to seek help is with Microsoft. If you are having trouble with your ...

I have to write again, because wow.

When I re-read your reply, it is a wow.

In a very negative way, not positive.

Your choice of words are condescending.


BobTheFisherman wrote:


You were provided with links to possible assistance then advised to seek help from the router manufacturer. I think the help provided was very reasonable. If you don't want to take the advice offered you might as well not ask.

Just ask anyone, please.

Why would someone open up an Apple support website, write a lengthy problem at hand on advanced settings, and all he got are: 1.) beginner's tutorial, 2.) an advice to call a tech support.

Those are lazy replies.

Did you even see the reply with just links? No words, just three for-beginner links. Is that even appropriate?

Now ask yourself, is my reply wrong?

Here let me help you: of course not.


Please go away, bother other posts.

Jul 28, 2018 2:29 PM in response to andy js

😁 Now you've got on the wrong side of two people who are trying to help you. Before wasting our time any more why don't you take a step back and think about your issue with a third party product. We have no idea where you live nor do we care. Basic router configuration is a simple task supported by the router manufacturer. Here is your router manufacturer's support link http://support.huawei.com/enterprise/en/index.html

FWIW = For What It's Worth.

Jul 29, 2018 11:06 PM in response to Tesserax

Tesserax wrote:


No the “173” address is just an example. The first two hops are what you would want in this case.


Based on what I can see from traceroute there is a jump in hop time at hop 5 that is continuing to increase towards the destination. This would indicate an issue starting with that router going forward. This is neither your Huawei or your ISP, but somewhere farther down the line towards the Google DNS server. This would increase the overall data latency and possibly affect BtMM’s performance leading to the “error” message.


Although you could get some clues to who “owns” the “offending” router, you’re not going to be able to resolve it. This also may be a temporary condition that could “fix itself” in time.


So, unfortunately at this point, there is no real solution. Sorry, I wasn’t able to help you find one.

That's a real bummer, I was hoping to remedy the BtMM's slow connection.

Before we wrap up this thread, I'd like to show you another Network Utility trace result taken from my home WiFi router:

User uploaded file

The UPnP is also have been turned on, but the Mac says the BtMM is not even working on that home router, what do you think the problem is?

Jul 30, 2018 10:57 AM in response to Tesserax

Tesserax wrote:


Yes the issue is that the first three hops are all private IP addresses. Only the first one should be. It appears that either your home network has two or more routers in a double NAT configuration and/or your ISP is not providing you with a public IP address. Both of these would prevent BtMM from working.

Hi,

I've eliminated on of the routers, now there are only two private IP address:

User uploaded file

You see, at home I'm using a ZTE fiber optic modem router, and the internet connection is using PPPoE.

Perhaps the PPPoE is the one causing the other private IP address?

My home ISP insisted using the PPPoE connection, the modem has got to be from them too (because the modem has to be registered to their server), there's nothing else I can do.

At your example before; your third hop shows the public IP address, and you said it's possible my ISP isn't providing the modem with public IP address, maybe using the PPPoE connection got to do with it?

Jul 31, 2018 9:43 AM in response to andy js

Your issue has nothing to do with your Mac. If you had followed the advice originally provided you would have had your issue resolved.

My hat is off to Tesserax who had the tenacity and patience to continue to try to help you even in light of your demeaning remarks about the volunteers trying to assist you. Good luck with getting your still not working remote access issue solved. Hint, read the advice provided earlier about third party product support.

Aug 1, 2018 5:03 AM in response to BobTheFisherman

BobTheFisherman wrote:

Your issue has nothing to do with your Mac.

I know that already, and that's not what I asked in this thread.

Don't twist what I asked with the conclusion from Tesserax.

BobTheFisherman wrote:

If you had followed the advice originally provided you would have had your issue resolved.

I don't find any clue in the links you gave me or the person before you that can solve the problem, and if you so sure those links contain the solution, why don't you point out which one and show me?

But don't use Tesserax's step-by-step guide as reference, build your own version of solution based on information from those links, and come up with the answer according to your own diagnostic.

BobTheFisherman wrote:

My hat is off to Tesserax who had the tenacity and patience to continue to try to help you even in light of your demeaning remarks about the volunteers trying to assist you.

Yes, Tesserax is truly a remarkable person.

He shows compassion and patience to help me, and he really understand the problem.

Tesserax, if you're reading this, you have my gratitude again.

Thanks man.


Demeaning for you, but I don't hear it from Kappy.

And absolutely not from Tesserax.

Get your facts straight first.

You forgot that you started it first with your condescending examples of calling up tech support, remember?

And don't forget you use laughing emoticons in two of your replies, if that's not insulting, then you're the one who doesn't have empathy. You should consider using the laughing emoticon in a more appropriate tone, considering we're already having this heated conversation from the beginning.

It's a common knowledge the laughing emoticon is a friendly emoticon in a friendly conversation, but it has the opposite effect in a not friendly conversation. Surely you understand this.

If you tried to use geography as an excuse or if it's differently used in where you live, then surely you remember where I live because I've told you before.

BobTheFisherman wrote:

Good luck with getting your still not working remote access issue solved.

Now I don't understand this sentence, maybe it's because my English is not that good, but this sentence sounds funny and doesn't sound right.

BobTheFisherman wrote:

Hint, read the advice provided earlier about third party product support.

Again with the reference of those links, like I've said above; point it out which links contain the answer. If it checks out and reasonable, I'm more than happy to mark your reply as the answer too for this thread. Fair enough? But you'll have to thoroughly explain it (like Tesserax did), not just point to another link again.


Speaking of your previous remark about why I didn't provide the information of where I live in the beginning of my post, then you really have spoken without thinking clearly:

1.) it's already stated in my profile, just a click away and you can see it. I have never change it ever since I joined in, it stays the same and available for everyone to see. Just try it yourself.

2.) I shouldn't announce where I live, instead those who's trying to reply should ask first, or take a peek at the profile first, because there are many people around the world joined in here, not just a handful of nationality.

You should re-arrange your logic and facts first, it's hindering your judgement to actually help my case.

Aug 2, 2018 10:14 PM in response to Tesserax

Tesserax wrote:


No PPPoE is just a type of connection. The issue is that your ISP appears to be providing you with private IP address (172.16.xx.xx from the traceroute). You would then have a double NAT condition where you basically have two routers in series that are providing NAT service.


Looks like your only choice now is to either:

  1. Change ISP or ask your ISP to provide your modem with a public IP address, or
  2. User another third-party remote access product, like LogMeIn, for remote access.

Tesserax, I know I've finished the thread by marking your reply as the answer, but unfortunately I still got a question regarding the router settings in my home, the one using the PPPoE connection.

I've asked the ISP to change the private IP into public IP, they've changed it, and it's working like normal.

But the strangest thing is now BtMM doesn't work at all on my Mac, so I tried running the Network Utility again and here's what I got out of it:

User uploaded file

Now three of the first hops are all private IP address, I don't get it.

I'm using PPPoE connection on my wifi router, and the fiber optic modem from the ISP is set to bridge mode, and the ISP says they're giving me a static public IP (starts with "103").

What do you think went wrong there?

Jul 29, 2018 9:11 PM in response to Tesserax

Tesserax wrote:


I suggest that you use the Network Utility to run a traceroute from your local network and see what you get. Look at the IP addresses especially at the first two or three hops to see if they are private or public. You don't need to post them, just let us know your results.

Hi again,

Oh no, let me post the screenshot of the result, it's faster that way.

Below is the result from Network Utility:

User uploaded file

What do you think?

There's no hop with public IP address (starts with "173") in there, maybe that's the problem?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How to configure the router so Back To Mac optimal

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.