how to access LAN connected device web interface using public network

[tvnaidu]

consumer appliance device with ethernet (RJ45) interface can be plug into home router or office router within that LAN, local DHCP server assigns IP address with that LAN, this contains web interface to configure device (if its IP address is 192.168.0.66, this can be accesses using http://192.168.0.66), how can this device access from outside home, for example public places where internet available (starbucks, bnookshop, Cafe, public library using some computer). basically I am looking for some software it provides an access web interface of this remote IP device using public internet.

[NeoPa]

This seems to be a networking question. I'll move it.

The question is very unclear. I assume due to difficulty with the language. It seems to be asking about referring to a network enabled device from outside of the protected zone that it is contained within.

The clue is in the protected zone. Unless this is configured in the router to allow and direct traffic to that device specifically, it will not happen. This is because the default is to protect internal addresses from the outside world. Accessing the device using the internal IP address will never be possible from outside of the internal network.

[tvnaidu]

Thanks.

I want to access this LAN device (private IP address) from public internet to control using its own web interface. any software can bundle with the device will allow to access web interface?. any remote access server can be install on this device?. any software like that to access protected zone device from public?

[sicarie]

It seems like you have the concepts, but why do you need a secondary appliance?

How big is your network - small home/office; medium sized business?

What's the line in/out? DSL? Cable? T1?

You can probably take your gateway router/modem (the incoming line plugs into some sort of router/modem) and configure that, but it depends on your setup. You may have a router plugged into your modem that was provided by your internet service provider, in that case it depends on the programming of the modem.

[NeoPa]

I've answered these questions already, but let's do it again to be clear :

1. You will never be able to access an internal device from the internet using its private IP address.
2. No software on the device will effect your ability to access it from the internet.
3. Remote Access Server is software so the answer is the same as #2 above - No.
4. Again. Same as #2 (It's the same question). No.
5. The only way that any traffic will get through to even access it in the first place, let alone make a successful connection, is by configuring your router/firewall to direct specific traffic directly to it. This has severe security implications and I would not recommend it to someone who understands the issues as clearly as you do. Let me be clearer. I warn you that this would be likely to get you into trouble unless you get some experienced help and do it securely.

[tvnaidu]

I found on internet that VPN allows to access private network IP address remotely using VPN client on remote computer, looklike VPN is allows secure connection, it needs another VPN box at home to access any of home computer remotely, like VPN anykind of software available can be installed in my appliance to access remotely?. low cost software?

[NeoPa]

VPNs can allow secure connections as you say, but they are still a facility provided by the firewall/router. All my earlier points are still true.

[tvnaidu]

I found some tools like VNC, TeamViewer, LogmeIn fdor windows, those need to be installed on both sides, log into remote machine, but my device is microcontroller based TCP/IP stack, also couple of web pages on that with RJ45 (ethernet), If I get some opensource software, can be integrate with device code and load onto onboard flash memory, that should allow me to login form public network just like VNC/TeamViewer/LogMeIn.

[NeoPa]

It appears you have failed to grasp the fundamental point here. VNC etc cannot grant access into a private network. The only ways of doing that are to configure the router specifically, or for the node within the private network to initiate the connection somehow. As you don't seem to believe what I say it appears I'm just wasting my time here. I'll leave my posts to guide you should you ever decide to trust me, but only you can make that choice, and it's frankly your choice to make. Good luck anyway.