Home Assistant accessible off LAN via DNS but not on LAN

So I had my home assistant up and running fine on my home network. I have ATT so I am required to use their gateway(modem). I have the Pace 5268AC. I then had a Orbi mesh system set up in access point mode. and I have duckdns access for my HA server.

I wanted more control with my LAN and set up vLAN so I wanted to make my Orbi a router. To avoid a double NAT, the Pace 5268AC doesnt have a true IP passthrough but it does have a “DMZPlus mode”. I set the Pace to use the ip range of 172.16.0.X and the ip address assigned to my Orbi, I set to DMZPlus mode. Once that was done, i set up my Orbi router with the IP in the 192.168.1.X range and allowed all my devices to connect to the router. Everything works like it should EXCEPT for connecting to HomeAssistant. I’m able to access it if i am off of my LAN via cell phone or at Work. But i can no access Home Assistant via my LAN. I dont think this is a HA issuse more so a networking issue. Im just not that experienced with networking. And man i HATE ATT and requiring these crappy gateways.

Any help is appreciated.

Can you access it from home using the duckdns address?

No. I can access it via duckdns from outside LAN but not from LAN.

Can not access it on LAN via IP because my base url ins config.yaml is set to the duckdns address.

Have you tried using nginx instead.
I wrote a little guide on this a few days ago.
That would give you duckdns access from outside but also access via local IP, directly to home assistant

I’m not sure on the orbi setup, but DMZ doesn’t sound like a secure place for an access point

Orbi is setup as a router with firewall. from what i have read, with the certificate requirement ATT has with these gateways, you have to use the DMZ mode on the PACE and the IP Passthrough mode on the other gateway to get the system set up without having a double NAT.

I will try your nginx guide later today when i get some free time from work.

In configuration.yaml
Comment out the http section

Restart home assistant
Check you can connect internally

In router / firewall:
Remove existing port forwards
Add fowrading to the device running nginx on ports 80:80, 81:81, and 443:443

Install the nginx add-on by Frenck
Follow the instruction in frencks gif

You should now have access internally over http and externally over Https.

here are your instructions… after i install nginx do i go back an uncomment the http in the config.yaml?

i uncommented http, HA was able to connect internally. I think removed the 8123 port forward and added 80,81,443 port forward to my HA server IP.

I installed nginx which says to uncomment the ssl_cert and ssl key then change the domain to the dns address. Im assuming that is the domain line in the NGINX configuration. Well i can still access locally but not getting the dns address to work outside

Whats also weird is when i do go to the dns address from outside the network i do get the homeassistant logo with “Unable to connect to Home Assistant. Retry”

No leave it commented out.
Have you installed frencks, nginx proxy manager?
Or a different nginx add-on?

hm i installed the NGINX from the home assistant add on board. let me look to see about Frencks NGINA

got it working. Thanks!. I wish that gif was screen shots… had to sit there a few times haha

so not i can access locally via homeassistant:8123 and i can access from outside securely via my dns address. Im not home yet so i havent tested it but what is my phone app going to do when on the home network?

I have my phone app set to ipadress:8123 for internal connection.
This works with http commented out

Got it all set up. Thank you so much for the help. as far as your instructions go you might want to add in adding the MariaDB to get NGINX by Frenck. As a beginner in home assistant thats the only place i got lost.

Glad you’ve got it working.
Once it’s running it’s great!
I’ve updated the instructions on your feedback

1 Like