How to make 9160 FOTA to support downloading image from a private IP address?

[dongchi]

Since of the security issue, our 9160, are connecting to a private network (10.x.x.x) by the operator. While testing the FOTA function on this private network, the 9160 has to connected to a HTTP server with ip of 10.y.y.y.

The download client reported the error:   download_client: Server respond range not supported

Does this mean the private IP range is not supported?  Any config or modification I can do to get over it?
(The FOTA code has been tested on the public domain network and works fine)

Thanks!

[dejans]

Hi,

Since of the security issue, our 9160, are connecting to a private network (10.x.x.x) by the operator.

Can you provide additional information about the security issue you mentioned? Is operator forcing FOTA from the private network? If so, how? Can you please elaborate on your FOTA setup using private network?

Best regards,
Dejan

[dongchi]

Hi Dejan,

The 9160 will be connected to a specific APN assigned by the operator, all the network traffic will be routed to a local area network which is isolated from the Internet. That is, upon connection, the 9160 can see only the servers in the LAN (with IP range of 10.x.x.x). Accessing to the Internet is forbidden and not possible.

We managed to have the server admin to place the bin file for FOTA on their http server. A download link is provided which is something like http://10.x.x.x/yyy/fota_file.bin. The path has been tested with browser running in the same LAN so the URL is confirmed valid.

I understand this is not an usual use case for the FOTA. However, the collected sensor data is sensitive so the the operating organization works with the LTE provider to ensure the sensor data will not be sent to elsewhere. I am not aware of how this is done on the operator side. 

From the error message, it looks like the underlying library code filter out the private IP range. I am wondering if there is a config setting or some patch that can bypass the checking and let the download client to just download the bin file.

Thank you

[dongchi]

BTW, I might mis-understand the error message "Server respond range not supported"