I need to make a device (like a WR11 perhaps) that I can drop at a customer site and plug via Ethernet into a product so that I can troubleshoot or administer it remotely. When done, I can pick it up and take it to another site. I know I need a STATIC IP Address SIM so it is reachable via the Internet. Does anyone see a problem making this happen, assuming I can get the STATIC SIM card? I have a Hologram data account already. I need to be to do things like TELNET to the device that is connected to the WR11 ethernet port. What do you think?
Why do you need a static IP?
Just to remotely access a single port? What I would do is simply use the Device Tunnelling feature of Hologram and the NAT functionality of the WR11. It is a two step process but basically you open a port to the WR11 and then NAT ANOTHER port through to your end device.
Nicholas Wilson
Your IoT
If I plug the unit in someplace, in order to reach it I need to know the IP address it is at. Can Hologram offer some kind of service that will let me find the device when it has been assigned an address by DHCP?
Chris
No, you won’t get a public IP with Hologram. You will get an IP address that can be accessed via the device tunnelling only.
You will need to talk to a mobile operators to find one that will give you a static public IP or maybe a dynamic IP and just use a DynDNS service (or Digi Remote Manager) to find the public IP address. I expect this will cost you.
Alternatively you could have the WR11 VPN back in to a third party VPN server so you can access it transparently.
As you already have a hologram SIM I would play around with their Device Tunnelling to see if it meets your needs.
Nicholas Wilson
Your IoT
Nicholas –
I can’t use DynDNS unless the DIGI gateway/router has a Dynamic DNS client built in. Does it? There will not be a PC or anything to run a Dynamic DNS client.
If the WR11 has support for a VPN built-in, that might work.
Remember that I need to be able to drop this WR11, plug in a device via Ethernet, and walk away. Then I go back to my lab and access it from there. That requires that the WR11 be at a static IP address.
In have a feeling that a static IP SIM is the only good answer.
Chris Fox
You can do this. But I would suggest making sure you get a static Private IP address sim with a VPN to your company. This way, you are not creating an Open connection to your clients network.
The WR11 has a DynDNS client and VPN built in. It has lots of features.
Static IPs are expensive and provide a footprint to hackers without a strict firewall but are a super easy way to get things going.
Using device tunnelling or a VPN whilst more complex provide a much more secure way.
Nicholas Wilson
Your IoT
That’s good to know. I need to know more about the WR11 and how it can work for me. I have a DynDNS account and a Hologram data account. I am having to travel all over the US to do things I could do remotely via the Internet. I need to be able to send someone a box that they can plug in and then I can access the device through it.
Chris Fox
Nicolas –
I can tell that I need to learn a lot more about the WR11!
My use model is that there would be an Ethernet device (in this case a fuel access control terminal) in the field that needs to be serviced via TCP/IP. There is no network there. I ship to them a box that they can plug in to power, and to the Ethernet port, and then I can access the device remotely from my lab. Usually, I would be using TCP TELNET or HTTP to access it.
The device would have to come on line, get an IP address, update the DynDNS server, and then be reachable from my lab as if I was plugged into it directly.
Is there anything you can see that would prevent this from working? If not I will buy the WR11 right away. Once I prove it, I may be buying a dozen of them to equip my field technicians.
Chris Fox
Nicolas –
One more issue:
How do I know which model of the WR11 to buy to work in North America? Or is there one that is global?
I don’t understand all the different cellular regions and how to select a WR11.
Can you advise?
Chris Fox
Hi Chris,
Don’t use a WR11 if you can help it. The product is a legacy product. It’s days are numbered. Look at the IX10. It has the same features but is a modern version.
Either the IX10-00G4 or IX10-00N4 will do the job but it really depends on what carriers you want it to work on. The G4 is nicer to standardise on if you ever work overseas.
Nicholas Wilson
Your IoT
Nocholas –
Thanks for the advice. I wish the price wasn’t so much higher! 
Chris Fox
If you really need cheap and cheerful then you probably want to look at European devices like the RUT360 from Teltonika (lookup RMS VPN on youtube) or Chinese devices like the UR32 from Milesight.
Ultimately you get what you pay for but your use case is fairly straight forward and your feature requirements are very basic however we are on a Digi forum so we probably shouldn’t talk too much about other vendors!
Nicholas Wilson
Your IoT
Don’t worry. I’ll stick with DIGI!
If only because of the help you have provided!
Chris Fox
You can assign these static IP addresses on the device itself—using, say, Windows’ network settings on each computer—or you can do it at the router level. If you do it through the router, it will likely be called a DHCP reservation, though many people (and even some [routers] still refer to it as a “static IP address.”
One thing I will also note on this topic, DynDNS still will not allow incoming connections to the Digi. Cellular networks are heavily NATd and most if not all IP address will resolve to a class A, B, or C private address. Thus, the most common/only way to allow incoming connections to the Digi is building a VPN tunnel from the Digi. This will allow it to navigate the NAT the cellular carriers use via port address translation.