My Republic + Static IP + Plex = Double Nat? :(

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › My Republic + Static IP + Plex = Double Nat? :(

1 | 2

michaelmurfy

meow
13580 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#2107205 13-Oct-2018 11:29

noroad:

Shapenz: I can’t PM you the result page for some reason but I can confirm IP Chicken shows the same external IP address

OK, well there is no CGNAT involved then.

I can tell you now - there is. I can see multiple people from Geekzone logging in via the same IP. It is CGNAT with a configuration issue it seems.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

Spyware

3818 posts

Uber Geek
+1 received by user: 1366

Lifetime subscriber

#2107211 13-Oct-2018 11:39

100.64.0.0/10

100.64.0.0–100.127.255.255

noroad

1025 posts

Uber Geek
+1 received by user: 675

Trusted

#2107225 13-Oct-2018 12:14

michaelmurfy:

noroad:

Shapenz: I can’t PM you the result page for some reason but I can confirm IP Chicken shows the same external IP address

OK, well there is no CGNAT involved then.

I can tell you now - there is. I can see multiple people from Geekzone logging in via the same IP. It is CGNAT with a configuration issue it seems.

So, the MR is CGNATing the path to geekzone (domestic) but not to ipchicken, well that's bad!

k1w1k1d

1713 posts

Uber Geek
+1 received by user: 1312

#2107228 13-Oct-2018 12:36

MyRepublic in Chch.

IP Chicken address: 101.100.131.xxx

ASUS router WAN address: 10.11.140.xxx

So CGNAT used here.

michaelmurfy

meow
13580 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#2107236 13-Oct-2018 12:53

noroad:

So, the MR is CGNATing the path to geekzone (domestic) but not to ipchicken, well that's bad!

No, not even that.

I suspect the OP has been given a "static IP" from the CG-NAT pool or has dropped back to CG-NAT during the move. There is no static IP here.

noroad

1025 posts

Uber Geek
+1 received by user: 675

Trusted

#2107240 13-Oct-2018 13:01

michaelmurfy:

noroad:

So, the MR is CGNATing the path to geekzone (domestic) but not to ipchicken, well that's bad!

No, not even that.

I suspect the OP has been given a "static IP" from the CG-NAT pool or has dropped back to CG-NAT during the move. There is no static IP here.

The OP confirmed that the external 101 (not 100) address on his router matched the one on ipchicken, so that network path is not being natted.

Mighty Ape

Shop now at Mighty Ape (affiliate link).

michaelmurfy

meow
13580 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#2107243 13-Oct-2018 13:07

noroad:

The OP confirmed that the external 101 (not 100) address on his router matched the one on ipchicken, so that network path is not being natted.

What I am saying is that external 101 IP address is indeed CG-NAT.

inetnum: 101.100.128.0 - 101.100.131.255
netname: CGNAT_PURE_MYR_NZ
descr: CGNAT Pure Bundle MyRepublic NZ
country: NZ
admin-c: MNZL2-AP
tech-c: MNZL2-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-MYREPNZ-NZ
mnt-irt: IRT-MYREPNZ-NZ
last-modified: 2016-05-25T10:00:52Z
source: APNIC

That, and there are about 30 users on here all logging in with the same IP address. Smells like proper CG-NAT to me with a configuration issue to hand this IP out to the OP as a "Static IP".

noroad

1025 posts

Uber Geek
+1 received by user: 675

Trusted

#2107252 13-Oct-2018 13:29

michaelmurfy:

noroad:

The OP confirmed that the external 101 (not 100) address on his router matched the one on ipchicken, so that network path is not being natted.

What I am saying is that external 101 IP address is indeed CG-NAT.

inetnum: 101.100.128.0 - 101.100.131.255
netname: CGNAT_PURE_MYR_NZ
descr: CGNAT Pure Bundle MyRepublic NZ
country: NZ
admin-c: MNZL2-AP
tech-c: MNZL2-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-MYREPNZ-NZ
mnt-irt: IRT-MYREPNZ-NZ
last-modified: 2016-05-25T10:00:52Z
source: APNIC

That, and there are about 30 users on here all logging in with the same IP address. Smells like proper CG-NAT to me with a configuration issue to hand this IP out to the OP as a "Static IP".

I understand that you are saying the IP is from a range MR has indicated will be used for cgnat, but that does not mean that they are actually using all those IP's in a cgnat pool. If the OP is getting a public IP (like the 101) on his external interface but it is being translated to another public IP still then that is messed up. He has said however that that public ip is being identified by ipchicken as being the IP it sees, so that path in particular is not being natted even if the whois for it indicates its from a pool designated for use with cgnat. Apnic records are rarely updated by ISP's in my experience (and being guilty of being said person not updating them).

Shapenz

518 posts

Ultimate Geek
+1 received by user: 70

#2107255 13-Oct-2018 13:34

Sorry guys my fault for misunderstanding the question.

Ipchicken shows the same external address as Plex reports.

The DHCP allocated WAN address in the router is completely different (10.11......)

Sorry to lead you astray @noroad

I’ve seen the info through to MR to sort out anyway so hopefully they can fix their muck up.

Thanks for all the help!

RunningMan

9186 posts

Uber Geek
+1 received by user: 4840

#2107261 13-Oct-2018 14:01

Shapenz: [snip]
The DHCP allocated WAN address in the router is completely different (10.11......)

So that confirms it, you don't have a public IP address.

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#2107306 13-Oct-2018 15:42

Helps to double check your getting your ip from the right place :)

I was considering asking if amplify did something silly like pulling from a site.

Just to be clear plex does call out to check the external ip. That's why it was the same.

Myrp really should use the cgnat range on your wan interface though...

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Geekzone

Want to support Geekzone and browse the site without the ads? Subscribe to Geekzone now (monthly, annual and lifetime options).

noroad

1025 posts

Uber Geek
+1 received by user: 675

Trusted

#2107320 13-Oct-2018 16:08

Myrp really should use the cgnat range on your wan interface though...

Yea, it's pretty bad form using RFC1918 addresses on CGNAT services instead of the dedicated 100.64.0.0/10 range. That is really asking for hard to diagnose conflicts for no good reason.

Shapenz

518 posts

Ultimate Geek
+1 received by user: 70

#2110523 18-Oct-2018 15:04

All sorted now - took a couple of days and a bit of mucking around running tests and plugging / un-plugging things as suggested - but it's all fixed now.

They said "Seems to have been a DDoS on the old IP address" - kinda weird that it happened at the same time as I moved houses but who am I to question the internet......

vulcannz

436 posts

Ultimate Geek
+1 received by user: 136
Inactive user

#2110564 18-Oct-2018 16:19

I'm surprised they didn't blame it on a solar flare.

1 | 2