2degrees: Changes to IP Addresses (CGNAT)

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › 2degrees: Changes to IP Addresses (CGNAT)

1 | ... | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | ... | 32

7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

#2350474 8-Nov-2019 21:40

That's that question answered. Vf sure sign can't seem do to tunnel with a NAT IP. Guess I will need to plea too given lack of signal without

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#2350479 8-Nov-2019 21:58

Oblivian: That's that question answered. Vf sure sign can't seem do to tunnel with a NAT IP. Guess I will need to plea too given lack of signal without

works fine with NAT.

I've got one sitting behind CGNAT right now.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Oblivian

7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

#2350484 8-Nov-2019 22:09

Hrm. Well, sure doesn't seem to like the external range I've been dished out/appear from

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#2350485 8-Nov-2019 22:10

Oblivian: Hrm. Well, sure doesn't seem to like the external range I've been dished out/appear from

It opens a ipsec tunnel. So that's probably failing

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

kiwijunglist

2983 posts

Uber Geek
+1 received by user: 135

ID Verified

#2350491 8-Nov-2019 22:23

Hi hoping someone can help me with this.

I'm with 2 degrees. I run a lot of services under port 80/443. This week I lost access to my services from outside the network. It seems that those ports are now closed from incoming traffic?

I have all unifi gear and I think I am now behind a NAT which is blocking the ports? If I SSH into the USG and type show interfaces, I get the following:

admin@ubnt:~$ show interfaces
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface IP Address S/L Description
--------- ---------- --- -----------
eth0 - u/u WAN
eth0.10 - u/u WAN
eth1 192.168.1.1/24 u/u LAN
eth2 - A/D
lo 127.0.0.1/8 u/u
::1/128
pppoe2 100.66.50.xxx u/u

If I goto whatsmyip.com then my IP address is: 51.210.243.XX

Because 100.66.50.XXX =/= 51.210.243.XX does it now mean I am behind a NAT and that is blocking me from having open ports?

HTPC / Home automation (home assistant) enthusiast.

Oblivian

7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

#2350494 8-Nov-2019 22:32

kiwijunglist:

Because 100.66.50.XXX =/= 51.210.243.XX does it now mean I am behind a NAT and that is blocking me from having open ports?

Yes

100.66.50.xxx is Reserved internal addressing (similiar to what I posted earlier). Reserved for CG-NAT

Outbound traffic will go out one of their External facing IPs, while your router gets an internal one like a PC behind your own router.

Dell

Shop now for Dell laptops and other devices (affiliate link).

kiwijunglist

2983 posts

Uber Geek
+1 received by user: 135

ID Verified

#2350495 8-Nov-2019 22:35

So just to confirm I no longer can open ports on my router even though I don't mind having a dynamic IP address? (I use duckdns).

HTPC / Home automation (home assistant) enthusiast.

Oblivian

7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

#2350496 8-Nov-2019 22:38

kiwijunglist: So just to confirm I no longer can open ports on my router even though I don't mind having a dynamic IP address? (I use duckdns).

Correct. Your router has essentially shifted 1 step toward the internet. And you now have no control of inbound data unless requested first.

Un-requested Inbound traffic gets to the external address of 2D, and as no pinholes to your 100.66 exist, are dropped. (not what happens, but crude way of explaining)

kiwijunglist

2983 posts

Uber Geek
+1 received by user: 135

ID Verified

#2350499 8-Nov-2019 22:46

can i change to ipv6 with my USG and use that with duckdns?

HTPC / Home automation (home assistant) enthusiast.

Handle9

11927 posts

Uber Geek
+1 received by user: 9683

Trusted

Lifetime subscriber

#2350503 8-Nov-2019 23:24

JohnFlower:
GreensladeNZ:

Hold up, you guys got free static IPs? I had to pay! Should I call back?

Yeah, I got mine for free... I was surprised when I saw people saying they had to pay the monthly fee.

Edit: 2degrees have said they will review static ips case by case, so I assume there's factors like customer subscription duration etc.

Based on this thread it seems totally arbitrary and pretty badly communicated. I guess having a consistent policy for dealing with customers is just as hard as communicating with them.

This whole.process looks like a train smash.

kiwijunglist

2983 posts

Uber Geek
+1 received by user: 135

ID Verified

#2350504 8-Nov-2019 23:29

My main issue is I spent an entire evening trying different things thinking the problem was at my end. I also tried their tech support (tier 1) which was not useful and endured the wraith of my wife for ignoring her this evening. 2 Degrees are supposed to be ringing me tomorrow, but at least now that I have stumbled upon this thread I know what is wrong. I'll see what they say tomorrow, I've been thinking of moving our mobile over to spark / skinny for quite some time now so we might just move everything over to a different provider.

HTPC / Home automation (home assistant) enthusiast.

Dyson

Shop now for Dyson appliances (affiliate link).

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#2350508 9-Nov-2019 00:17

kiwijunglist:

I also tried their tech support (tier 1) which was not useful and endured the wraith of my wife for ignoring her this evening.

now this is the real crime here.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

kiwijunglist

2983 posts

Uber Geek
+1 received by user: 135

ID Verified

#2350676 9-Nov-2019 11:41

What are people considering switching to?

I had a look at the options for fixed IP plans including the fixed IP fee (either one off or monthly fee) with a 12 month term including the discount for 12 month term.

It looks like 2 degrees is the most expensive option for most people.

950/500 Speed

- BigPipe - $109/mo. ($327-45= $282 credit)

- Stuff- $90/mo ($270-50 = $220 credit)

- 2Degrees - $120/mo ($200 credit) --> However first year is only charged at $95/mo

100/20 Speed

- BigPipe - $79/mo ($237-45= $192 credit)

- Stuff - $80/mo ($240-50 = $190 credit)

- 2Degrees - $95/mo ($200 credit).

If you have a mobile phone plan with 2degrees already then it's $10/mo cheaper.

HTPC / Home automation (home assistant) enthusiast.

JohnFlower

51 posts

Master Geek
+1 received by user: 15

#2350924 10-Nov-2019 09:44

kiwijunglist:

What are people considering switching to?

[...]

Considering I got static ipv4 for free, I wont be switching any time soon.

If I was told to pay the monthly fee, I would go with bigpipe... 2 out of the 3 times I've had to call 2degrees support were a result of breaking changes on their end (CGNAT and pppoe username going snap.co.nz -> snap.net.nz). I don't need support. I need good communication.

BarTender

3629 posts

Uber Geek
+1 received by user: 2572

ID Verified

Trusted

Lifetime subscriber

#2351078 10-Nov-2019 11:16

I am quite enjoying some of the entitled tears in this thread with associated threats of moving to another ISP. They are quite frankly hilarious.

Firstly running services at home and exposing them via port forwarding to the internet puts you in the 0.1% or less of all broadband users.

If having a static IP is so important then pay for it, or if you manage to badger the helpdesk rep enough you may get it for free.

This is a *mass market* broadband service, the fact you are paying around $100 per month for it when the regulated wholesale input costs (LFC) are approximately half of the total cost speaks to how competitive the retail broadband market is in NZ.

The fact 2D are giving customers who complain a free Static IP I think is very good value, I probably wouldn't be that nice as they are running a business and trying to turn a profit.

If another provider can offer the service at a cheaper price then there isn't anything stopping you changing providers.

1 | ... | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | ... | 32