EXPERT ONLY: Fix DrayTek/Yeastar/Cudy VPN & VoIP over 5G CGNAT (Read Rules)

@mak94pk

First, I will reconfigure Caddy on the Contabo VPS to use a non‑443 port for the DrayTek web GUI and set up a reverse proxy for the Yeastar S20 PBX, eliminating the SSL VPN conflict. I’ll then adjust the DrayTek Smart VPN to pure split‑tunnel IPsec/IKEv2, route the KSA and Egypt subnets, and fine‑tune WireGuard MTU/MSS and keep‑alive. I’ll also disable SIP ALG, set DMZ on the Cudy, and enforce Opus on the PBX. Delivery in 7 days. Do you have any custom firewall rules on the VPS that could interfere with WireGuard?

@longngoc2307

==== Hi - Truong here ==== "DRAYTEK VIGOR 2915 + CUDY P2 + YEASTAR S20 VPN/VOIP" — you need the existing production setup fixed without manual switching or disrupting the working Egypt site. I’d first take full backups through AnyDesk/UltraViewer, then resolve the VPS 443 conflict, Yeastar port forwarding, SIP ALG, DMZ, and WireGuard MTU/Keepalive. I’d keep the working Egypt configuration untouched and verify split-tunnel routing, Linkus auto-switching, and stable audio end to end. Do you have the current DrayTek, Cudy, and Yeastar configuration backups ready for the initial comparison? Looking forward to work with you.

@jordanrafael7

Hi - Jordan here "EXPERT ONLY: FIX DRAYTEK/YEASTAR/CUDY VPN & VOIP OVER 5G CGNAT (READ RULES)" , you need the DrayTek/VPN, Yeastar/Linkus, and Cudy/5G CGNAT setup working seamlessly. I'd rework the VPS port 443 exposure and VPN pathing, then validate split-tunnel routes, MTU/MSS, and codec policy so the DrayTek SSL/VPN conflict and audio drops don't recur. Each service will carry the correct ports, routes, and keepalive settings, with Linkus registering cleanly by DDNS and the first milestone being a full backup plus a working remote registration test. One thing I'd verify first is whether Caddy is still binding 443 anywhere beyond the intended reverse-proxy paths. Looking forward to work with you

@engruhulajom

Hello Dear, I'm Md Ruhul Ajom, a Full-Stack Web & Mobile App Developer with over 10 years of professional experience, and I'm excited about the opportunity to work with you. I can start your project immediately and am committed to delivering high-quality results. I have extensive experience in web and mobile application development, custom software solutions, API integration, database design, performance optimization, and bug fixing. My expertise includes React, Vue.js, Laravel, PHP, Python, Automation, Twilio, REST API, WordPress, JavaScript, React Native, MySQL, REST APIs, Git, Docker, Linux, SEO, eCommerce, and Shopify I understand you're looking for a reliable developer to build a secure, scalable, and user-friendly solution that meets your business needs. I prioritize clean code, timely delivery, and clear communication throughout the project. I'm ready to discuss your requirements and help bring your vision to life. Best regards, Md Ruhul Ajom

@pasion0128

★•══•★ Hi client ★•══•★ I have recently completed similar production VoIP/VPN troubleshooting involving site-to-site WireGuard, SIP routing, PBX connectivity, split tunneling and CGNAT environments. I understand the exact goal: seamless Smart VPN routing, native external Linkus access, stable VoIP, and zero manual switching. I’ll take backups first, then diagnose the Cudy P2, DrayTek 2915, Yeastar S20, VPS/Caddy and WireGuard path via AnyDesk/UltraViewer only. I can provide a fixed-price bid and work strictly within your stated scope. Can you confirm you require hands-on experience with all three exact device models before proceeding? Best regards, Rico

@nintysix96

PersistentKeepalive The numbers above are rough placeholders - final price comes after we check your current configs via AnyDesk. Your KSA site sits behind a Cudy P2 on 5G with no routable public IP, so standard site-to-site tunnels won't initiate from that end without a relay. The Contabo VPS is the right anchor point for both peers. The goal is zero manual steps: users walk in, routing adjusts automatically, Linkus switches to the local PBX IP, and when they leave it flips back to DDNS without anyone touching anything. Here's how we'd approach this: - Backups first: Pull full config backups from the Vigor 2915, Cudy P2, and Yeastar S20 to your local PC before a single change is made. - WireGuard hub on Contabo VPS: Both KSA and Egypt peers dial out to the VPS with PersistentKeepalive tuned to survive CGNAT idle timeouts - no port forwarding needed on the KSA side. - DrayTek policy routing: Configure split routing on the Vigor 2915 so local LAN traffic stays local when in-office, with no tunnel conflicts or route leaks. - Linkus auto-switch: Configure the Yeastar S20 so Linkus uses the local SIP address on LAN and falls back to the DDNS endpoint on 5G, bypassing the VPN entirely to keep call latency low. - All sessions via AnyDesk or UltraViewer only, with a change log shared after each session. Once we've reviewed your current configs, we'll send a written proposal with deliverables and a firm price. Want to set up a quick AnyDesk session this week? Best, 96 Studio

@elijahhmonreal

Hi there, I reviewed your project requirements and I am interested in working with you. I have extensive experience delivering Docker, Cisco, VPN, SIP, Network Administration, Linux, Asterisk PBX, Network Engineering, Network Security and VoIP. I focus on understanding the requirements clearly, providing a practical solution, and delivering accurate, well-documented work on schedule. I am available to begin immediately and would be glad to discuss the scope, timeline, and budget. Best regards, Elijah M.

@richardb063

Hi, I've read your project scope and I need to be upfront—I haven't worked hands-on with the specific models you mentioned (Cudy P2 5G Router, DrayTek Vigor 2915, and Yeastar S20 PBX). I have experience with network engineering, VPNs, and VoIP, but not with these exact devices in production. Given your strict hardware requirement, I'm not the right fit for this project. I'd rather be honest than waste your time or risk causing issues with your live production network. I hope you find the right expert who meets your requirements. Happy to help with other projects where my experience aligns with the specific technologies.

@abhilashr53

You need seamless, zero-touch VPN and VoIP connectivity across a 5G CGNAT environment, where the Cudy P2 handles upstream connectivity, the DrayTek Vigor 2915 manages site routing and VPN tunnels, and the Yeastar S20 serves live telephony - all while users move freely between office Wi-Fi and mobile 5G without touching a single setting. Here is my approach. Before any change, I pull full config backups from all three devices to your local PC via AnyDesk or UltraViewer. Then I address CGNAT by implementing a DDNS-anchored reverse tunnel or VPN concentrator endpoint that punches through carrier-grade NAT reliably. On the DrayTek I configure split-tunnel routing with subnet-aware policy so local LAN traffic stays local automatically. For the Yeastar S20 and Linkus, I configure the external SIP profile against your DDNS endpoint and tune the internal profile to the LAN IP, letting Linkus auto-detect and switch transparently. Risks I handle proactively: SIP ALG interference on the Cudy, RTP port conflicts over 5G, and failover loop conditions between tunnel interfaces. Realistic completion: one focused session, two to three hours. What is your current DDNS provider, and is the Cudy P2 in bridge or router mode right now?

@melopgabriel

Hi, I see a live production setup that needs stable VPN, clean VoIP routing, and zero manual switching between the KSA office and 5G. I understand the priority is to remove the 443 conflict, keep Smart VPN always on with split tunneling, and make Linkus register reliably without latency. I’ve handled DrayTek, Yeastar, WireGuard, and CGNAT-based remote access setups where the main goal was seamless handoff and call stability. I can work remotely through AnyDesk or UltraViewer, start with full backups of each device, then adjust the VPS forwarding, DrayTek VPN policy, MTU/MSS, and Yeastar codec settings in a controlled order. I’ll keep the changes minimal, verify SIP ALG is off, and validate the end-to-end path so users can move in and out of the office without touching VPN settings. Best regards, Gabriel

@adamm329

Hello, I have hands-on experience with the **Cudy P2 5G, DrayTek Vigor 2915, and Yeastar S20** and can handle this production environment without requiring device training. I’ll work exclusively through AnyDesk/UltraViewer, take complete configuration backups before changes, resolve the VPS/Caddy 443 conflict, optimize DrayTek IPsec/IKEv2 split tunneling, stabilize Linkus VoIP, verify Yeastar codecs, and review WireGuard MTU/MSS, PersistentKeepalive, DMZ, and SIP ALG settings. I’ll provide a fixed final price and document all changes. Best regards, Adam

@roksolianas

⭐⭐⭐⭐⭐ I have hands-on experience with production VoIP and network environments, including VPNs, WireGuard, SIP, PBX systems, CGNAT, routing, and remote-access troubleshooting. I can work remotely through AnyDesk or UltraViewer, take full configuration backups before changes, resolve the VPS/Caddy port 443 conflict, optimize DrayTek Smart VPN split tunneling, improve Linkus connectivity and audio stability, and verify MTU/MSS, PersistentKeepalive, DMZ, and SIP ALG settings. I understand this is a live production environment and will follow your exact scope and backup requirements carefully without unnecessary changes.

@Kredbird

As an experienced AI Automation Engineer and Full-Stack Web & Mobile Developer, I've built a comprehensive skill set that aligns perfectly with your project requirements. I have deep hands-on experience with the DrayTek Vigor 2915, Cudy P2 5G Router, and Yeastar S20 PBX devices, which gives me the edge needed to troubleshoot and optimize your site-to-site network. Understanding your core automation goals explicitly, I'll ensure a seamless, automated experience for your end-users. From configuring the VPN to performing any necessary tweaks on WireGuard, I'll guarantee that everything runs smoothly so you can focus on what matters most: your live production business. Lastly, the no-nonsense rules of your project fit perfectly with my professional dedication and approach. As someone who places high value on efficiency and security, I completely understand and appreciate the need for remote-only access and mandatory backups. Combining my rich experienced in Docker and Linux skills, I'm confident that I can deliver a robust solution to not just fix the issues at hand but also enhance your entire infrastructure with efficiency and automation. When you hire me for this project, you're hiring peace of mind and guaranteed results. Let's get started!

@hx88xn

Hi, saw your post about untangling the DrayTek plus Yeastar VoIP setup between KSA and Egypt over 5G CGNAT. The hard part is the port 443 clash between Caddy and the DrayTek GUI, so Linkus can register through the VPS while Smart VPN still does clean split tunneling both ways. Can you confirm AnyDesk access to the VPS, DrayTek and Yeastar so I can pull backups first? I have untangled similar Caddy or reverse proxy port collisions and DrayTek IPsec split tunnel setups without touching working WireGuard links. Happy to start with the port 443 fix and backups as the first milestone. Regards, Hassan

@novatech2210

Just fixed a 5G‑CGNAT VPN on a DrayTek Vigor 2915 behind a Cudy P2 for a live Saudi office. I’ll eliminate the port‑443 clash, re‑wire the WireGuard MTU, set a pure split‑tunnel IKEv2 on the DrayTek, and re‑point the Yeastar S20 ports through the Contabo VPS so Linkus can auto‑switch to the DDNS IP. I’ll lock down the Cudy DMZ, disable SIP‑ALG, enforce Opus codecs, and tweak persistent keep‑alive for zero‑lag VoIP. I’ve completed similar projects with DrayTek, Yeastar and 5G routers, all remotely via AnyDesk/UltraViewer, and received multiple 5‑star reviews on complex network automations. Let’s chat for a free quick consult – no strings attached. Chris | Lead Developer | Novatech

@UzairPatell

Since our DrayTek is behind a 5G CGNAT, we will configure the Caddy reverse proxy to route incoming traffic directly to the Yeastar S20 using WireGuard, ensuring seamless connectivity without manual intervention. We've got the exact skill set this project calls for, ready to go. Our expertise in VoIP and secure network configurations will ensure a fully automated experience for your users. We understand the importance of maintaining a live production environment without disruptions. We noticed the need to resolve the port 443 conflict that currently affects your SSL VPN and the Yeastar PBX ports, which we can address effectively. Our experience with DrayTek, Cudy, and Yeastar devices guarantees a smooth implementation, backed by previous successful projects. How do you envision the testing process for the Smart VPN once the reconfiguration is complete? Happy to talk specifics whenever suits you, and if it doesn't end up being us, you'll still leave with some solid direction. Regards, Uzair.