Port forwarding Chorus 300 ONT + Deco

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Port forwarding Chorus 300 ONT + Deco

ryrynz

14 posts

Geek

#306459 24-Jul-2023 18:47

Someone familiar with the Chrous ONT and port forwarding able to assist?

The Deco is connected to the Chorus ONT. The Deco is in Router mode using IPTV/VLAN.

I get a 100.xx.xx.xxx IP address (Dynamic IP) but https://whatismyipaddress.com/ gives me a 161 address.
So apparently the Deco isn't getting an external IP? Is the ONT set as a router by default?

I have to use upnp otherwise I don't get the green tick for the port being open on uTorrent

and any Port forwarding I try doesn't seem to work but weirdly on the Vodafone Ultrahub I had zero problems however the HG659 and the Deco aren't playing ball.

Do I need to connect up the ONT directly to a PC login and check it's networking options? What should it be set to?

RunningMan

9184 posts

Uber Geek
+1 received by user: 4834

#3107663 24-Jul-2023 18:49

Presumably this issue is your ISP is using CG-NAT for IPv4.

EDIT: What ISP are you using?

Linux

12173 posts

Uber Geek
+1 received by user: 8469

Trusted

Lifetime subscriber

#3107669 24-Jul-2023 19:20

CG-NAT related and not related to Chorus

cyril7

9073 posts

Uber Geek
+1 received by user: 2499

ID Verified

Trusted

Subscriber

#3107688 24-Jul-2023 19:44

Hi the chorus ont is a purely layer2 device and has no partition in port forwarding. Clearly you have no idea

Sounds like you're ISP is offering a CG-NAT solution therefore port forwarding is not an option.

.
Cyril

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3107693 24-Jul-2023 20:04

The ONT is not in ant involved in port forwarding.

If your ISP uses CGNAT then port forward won't work.

What ISP are you using?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

muppet

2642 posts

Uber Geek
+1 received by user: 1660

Trusted

#3107696 24-Jul-2023 20:13

Seems the previous posters are big fans of redundancy. So allow me to be the fifth person to tell you that CGNat will cause you problems with port forwarding.

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3107697 24-Jul-2023 20:20

And don't forget the ONT has nothing to do with it. Was this mentioned before?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

HP

Shop now for HP laptops and other devices (affiliate link).

RunningMan

9184 posts

Uber Geek
+1 received by user: 4834

#3107698 24-Jul-2023 20:21

Oh, it might be CG-NAT. Surprised that nobody has mentioned it yet.

ryrynz

14 posts

Geek

#3107990 25-Jul-2023 18:03

Thanks guys, I think it might be CG-NAT, If someone else can confirm that would be appreciated :)

I'm using 2degrees but previously I was using Vodafone. I'm aware Vodafone does not use CG-NAT but I had port forwarding issues there for some reason..

Any way around it besides uPnP? or requesting IPv6/Static IP (which I think costs extra?)

Linux

12173 posts

Uber Geek
+1 received by user: 8469

Trusted

Lifetime subscriber

#3107993 25-Jul-2023 18:10

Request a static IP address but that does cost $10 per month

SomeoneSomewhere

1882 posts

Uber Geek
+1 received by user: 1086

Lifetime subscriber

#3107995 25-Jul-2023 18:16

2Degrees now uses a CG-NAT address for all connections unless you pay for static IP. I believe all 2Degrees connections have IPv6 included, but that's only going to help if the incoming connections are from something that also has IPv6 access.

ryrynz

14 posts

Geek

#3108001 25-Jul-2023 18:32

Ideally I want to be able to offer full download speeds from my Synology NAS, would setting up a VPN get around Quickconnect's limited speed or does that require ports being opened as well?

Dell

Shop now for Dell laptops and other devices (affiliate link).

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#3108046 25-Jul-2023 18:36

As I’ve said multiple times on here look into Tailscale. Works no problems (and quick) behind CG-NAT. There is an official package for the Synology you can install. Tailscale is free and very good.

You don’t actually need a static IP here for your use-case.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

ryrynz

14 posts

Geek

#3108198 26-Jul-2023 11:16

I read about that on Reddit where someone recommended it. If I remember rightly though it requires installation on the pcs connected to it? I don't want others ideally to have to install stuff.

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3108210 26-Jul-2023 11:42

Here is another option if you want to access your NAS from outside:

Use one of your domains on Cloudflare
Install Cloudflared on your Synology
use Cloudflare Zero Trust Access to configure tunnels pointing to subdomains without the need of port forwarding
use Cloudflare Zero Trust Access to create groups to allow only certain people to get to those subdomains

This works with browser-based services only. It won't do anything for your torrents.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

ryrynz

14 posts

Geek

#3108531 26-Jul-2023 17:13

Nice thanks, I'll give it a shot. I'll keep UPnP enabled for torrents.