I have a PC behind a router with a dynamic IP address that I want to configure for wake-on-LAN.
How do I send the magic packet to the PC? Do I configure my router to forward UDP port 6 to the PC? How would I send the packet from another PC on the network? How about a PC outside the network?
Is this even possible?
Update: here is a pertinent configuration screen from my router. Any hope?
It sounds like some reading-up on WOL is probably in order first. Some additional reading about Ethernet, ARP, and UDP/IP is probably in order, too.
The WOL behavior in a client is triggered by a "magic packet". The magic packet can be encapsulated in any type of transport (UDP over IP, IPX, etc). The magic packet byte sequence just needs to be in the payload of a packet that the NIC to be woken-up will receive.
Sending WOL requests on the LAN is easy. Get a utility to make magic packets (like mc-wol for Windows) and fire away.
Sending WOL requests from the Internet is more problematic. You're on the right track w/ port-forwarding a UDP port from the Internet to the LAN, but there are other concerns.
You have a problem with unicast WOL requests from the Internet as follows: The MAC address of your WOL client computer won't be in the router's ARP table because, as the WOL client is powered-off, such an ARP entry would have aged out. When your router receives an IP packet port-forwarded to the WOL client's IP address while the WOL client is powered-off and its MAC address is aged out of the ARP table the router will not be able to deliver the packet to the client. You will need a router with static ARP capability to make this work.
The broadcast route is even less likely. Since you likely don't have a public subnet behind your router, but rather are using NAT to share a single public IP address on your LAN, there's no way to remotely address a packet to the subnet-broadcast address of your LAN subnet such that the router (if it could forward directed broadcasts) would generate a layer 2 broadcast with the WOL packet to allow the WOL client to "see" it.
WOL on your LAN will be easy. WOL across the Internet isn't so simple.
Static ARP is completely unnecessary
You've got the first part right. To get the WOL packet into the network, forward the packet coming from a specific port to the broadcast address of the local network (255.255.255.255) or whatever subnet range you want WOL access to be enabled on.
The Destination MAC address of the packet should be set to ethernet broadcast or FF:FF:FF:FF:FF:FF. The ethernet type of the packet should be 0x0842 (Wake On Lan).
So, where does the MAC of the computer being woken up go?
In the magic packet itself. WOL packets were only really intended to be sent across a local network. They're blind to any protocol above the link layer. To get around this limitation, they broadcast (ethernet broadcast not IP broadcast) to all the computers on the network and each computer reads the magic packet to see if they're the one being called on.
The contents of the magic packet contain 16 copies of the MAC address of the computer being woken up.
The frame structure is as follows:
Where:
If you want to test that the packets coming across are in the right format, use the following filter in Wireshark:
Basically, the WOL application needs to be capable of creating a packet that spoofs the Ethernet Destination address. There are tools online that can do such a thing but I'm not familiar with them.
Note: The reason I know so much about this is because I'm the author of the WOL parser for SharpPcap (pcap wrapper in C#). If there is sufficient demand, I could extend my console application to include packet sending (it currently only sniffs) and make it available as an OSS project.
Update: @Evan Anderson made a good point that I forgot to mention. Broadcasting incoming packets on a LAN is generally a bad idea. This solution will work but it's only a hack to circumvent the limitations of the Wake On Lan protocol.
The technique I've outlined will work for any computer on the LAN the way WOL was designed but could potentially open your network up to be used for as an attack (Smurf/Fraggle/Papasmurf) amplifier if someone were to send a specially crafted packet to the WOL port.
Evan Anderson's approach is technically more secure but is limited to unicast.
Rather than repeat why you are going to have problems I'll simply describe how I overcame those problems Evan has already explained.
My firewall/router is Linux based, which means I'm able to run commands on it. To wake up machines on the LAN I first SSH into the firewall and then run a Perl script which creates the magic packet and sends it out to the LAN. The MAC address of the target can be either passed as a command line parameter or hard coded, as appropriate.
Of course if you are unable to execute commands on your router you will need to find an alternative means.
As Evan and John already covered, WoL over the internet is unlikely to work.
You need some sort of device inside of the firewall that can send the packets on your behalf. We use a web application hosted on our intranet. Sounds like that's not an option, so there's really only three other options that come to mind:
I recently found that port forwarding a UDP port to
x.x.x.255worked on one router, but not another.I added a static ARP entry on the router through telnet
arp add x.x.x.y FF:FF:FF:FF:FF:FFfor an unused internal IPx.x.x.ytoFF:FF:FF:FF:FF:FF(the broadcast MAC) as noted here and port forwarded the WOL UDP port to that unused IP instead, that works for me for WOL from the Internet.This is what I did on my raspberry pi which I use for an openvpn server
Some (cisco) routers are able to forward directed UDP broadcast.
Linux kernel since circa version 5.0 is able to do this. You just need to specify a parameter for particular network interface:
(Note: it seems the option net.ipv4.conf.all.bc_forwarding doesn't work)
And you need to do DNAT with iptables on the router, if your PC is behind NAT.