In order SSH or HTTP into your ER1000 router remotely, you must first ensure you have a IP address that is reachable from the outside world. Most cellular carriers provide you with a private IP address on their network. That IP address is not reachable from the outside world. Contact your cellular provider to obtain a public facing IP address then test the IP by bringing the router online and trying to Ping the IP from outside the network.
A WAN connected to another internet service provider normally has an reachable public IP address, so the forwarding rules would apply and allow access to your device over the WAN.
Steps for port forwarding:
1. Log into your ER1000 Router using the LAN connection by entering the the default IP address is 192.168.45.1 in your browsers web address bar.
2. Enter your username and password to log in. Default Username is root and default password is password.
3. Click on the Networking tab and select Firewall.
4. Click "ADD NEW PORT" to create your port forwarding rule.
5. Enter a Description of the forwarding rule in the first box labled "description"
6. Enter a port number you would like to use from the remote location outside the network to forward the request to. Something like 9000 would be fine.
7. This next step is important for http: and SSH connections, Enter the loopback IP address of the router in the "Destination IP" field, generally 127.0.0.1 .
8. Finally, add the internal port you would like to be forwarded to. For SSH , the default port is port 22 .
9. If you have additional ports to forward, you may click "add new port" to add additional forwarding rules.
Once you review the entries, you may now click "Change" Once you click change, you will need to click the blue apply button that appears at the top right of the navigation bar.
note: it may be necessary to reboot the router for some port forwarding rules to take effect.