Remote control of Gerootte Toon - port forwarding or VPN

A rooted Toon has a built-in web interface that lets you control it locally. If you want to do this outside your home network - on the road or in the office - there are two routes: port forwarding (fast, slightly more risky) or VPN (the neat solution).

This article explains both options and walks through the configuration step by step.

First: do you have a fixed IP address?

Many internet connections are given a dynamic IP - that address can change every few days. For remote access, you need a stable address, or solve it with a DynDNS service (such as DuckDNS or No-IP) that automatically updates your public IP.

Exception: Caiway or Delta customers are behind Carrier Grade NAT. Port forwarding will not work then, even with DynDNS. Request a fixed IP from your provider, or go directly to the VPN option below.

Option 1 - VPN (recommended)

If your router supports a VPN server (Synology, pfSense, MikroTik, OpenWrt), this is the best approach. You don't open a port to the internet - you connect your phone or laptop to your home network via VPN first, and then just reach the Toon on its internal IP.

Phone → VPN tunnel → home network → http://192.168.1.10/mobile

Advantages:

• No open port for the Toon
• Encrypted traffic
• Access to your entire home network

On a MikroTik, you can set up WireGuard or L2TP/IPsec. On a Synology, the VPN Server app is a quick option.

Option 2 - Port forwarding

If you don't have a VPN capability, you can set up port forwarding on your router. You then forward incoming traffic on a specific port to the Toon.

Step 1 - Find your Show's internal IP

On the Show itself: Settings → Internet → IP address

Write down this address, e.g. 192.168.1.10. Preferably make the address static (reserve it in your router based on MAC address) so that it does not change after a reboot.

Step 2 - Set up port forwarding on your router

Log in to your router (usually 192.168.1.1, 192.168.2.254 or 10.0.0.1 - the login details are on a sticker). Search for Port Forwarding, NAT or Firewall → Services.

Use a port between 30000-45000 instead of default port 80. This saves a lot of automatically scanned traffic.

Example:

Useful links if you can't figure it out:

• Port forwarding at Ziggo
• Port forwarding at KPN](https://community.kpn.com/thuisnetwerk-72/port-forwarding-upnp-wat-waarom-en-hoe-322560)
• For other routers: search on portforward [router model].

Step 3 - Setting up Mobile Login on the Toon

Open the home screen of the Tone. The TSC button is at the top left.

Tap the settings tile in the app menu.

Go to the TSC settings menu.

Scroll to the Mobile Login section.

Enter your username and password.

Then click Flush Firewall to make the change.

Step 4 - Testing

First locally (within your network):

http://192.168.1.10/mobile

Log in with the data from step 3. Does this work? Then turn off wifi on your phone and test via the public address:

http://<YOUR-PUBLIC-IP>:30030/mobile

Your public IP can be found at siekman.io/ip or via curl siekman.io/ip.

Safety advice

• Use a strong password for Mobile Login - this is directly on the internet
• Choose a non-standard port (not 80, 8080 or 8888)
• Consider whitelisting your IP if you have a (semi-)fixed IP
• Regularly check if the tone has had software updates
• The very best solution remains VPN

Summary