2degrees: Changes to IP Addresses (CGNAT)

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › 2degrees: Changes to IP Addresses (CGNAT)

1 | ... | 26 | 27 | 28 | 29 | 30 | 31 | 32

9 posts

Wannabe Geek

#2631320 6-Jan-2021 18:31

Jiriteach:

gasman:

I switched to 2degrees fibre a couple of months ago and was never told about the CGNAT they now use, despite making it very clear that I worked in IT and work from home. I only found out when I tried to setup remote access to my PC that things were not the same as with my old Vodafone connection. I tried a couple of times to get them to take me off CGNAT because they didn't disclose it at the time of signing me up. The first time I inquired, the call centre agent was really helpful but their manager blocked their attempt to give me a static IP for free. The second time I tried it was an immediate "no" and my only option now is to pay the $10 a month for a static IP. Seems like they don't do any freebies anymore.

Remote access to your PC? How so? There are a couple of ways to work around things via proxying access else something like Ngrok - https://ngrok.com/. Really depends on requirements.

If you use RealVNC - you can access via the cloud which does not require ports to be opened etc.

Yes I am looking to VPN to my home network and also access my test VoIP systems from time to time. I have full TeamViewer licensing to access my desktop but can't do much else when needing to initiate an inbound connection to my public IPv4.

brendawine

9 posts

Wannabe Geek
+1 received by user: 1

#2636880 17-Jan-2021 13:08

sbiddle:

CG-NAT connections are now the norm (and have been for some time) for a large number of RSP's because for 99.9% of users there is no need for a public IP address.

That's not really true. To the best of my knowledge 2degrees is the only one putting people on CG NAT currently rather than a dynamic ip. I think the real problem is they do not make this very clear nor the impact of it. To suddenly one day wake up and not have plex or my security camera working was really annoying to isolate.

joemate

59 posts

Master Geek
+1 received by user: 22

ID Verified

#2636881 17-Jan-2021 13:11

Opening plex to the whole world could be a security risk. The same applies to the surveillance system, but this is another discussion.

brendawine

9 posts

Wannabe Geek
+1 received by user: 1

#2636882 17-Jan-2021 13:15

joemate:

Opening plex to the whole world could be a security risk. The same applies to the surveillance system, but this is another discussion.

There is no way to use Plex with CGNAT due to the way it authenticates tokens and connects users to the server.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#2636884 17-Jan-2021 13:17

brendawine:

sbiddle:

CG-NAT connections are now the norm (and have been for some time) for a large number of RSP's because for 99.9% of users there is no need for a public IP address.

That's not really true. To the best of my knowledge 2degrees is the only one putting people on CG NAT currently rather than a dynamic ip. I think the real problem is they do not make this very clear nor the impact of it. To suddenly one day wake up and not have plex or my security camera working was really annoying to isolate.

Incorrect. There are a number of RSP's now using CG-NAT by default. 2degrees certainly wasn't the first, and won't be the last.

You should under no circumstances ever have a CCTV camera exposed to the Internet directly via a port forward, so on the flipside the positive impact of such changes is really significant - the 2degrees move saw an immediate reduction in the number of such devices showing in NZ on databases such as Shodan, and a number of cameras in NZ also disappeared from insecam.

The reasons why they didn't advise everybody before the move were made pretty clear - it would have hogged support channels with people querying the move when the simply reality is that it doesn't affect literally 99% of people.

nevolex

7 posts

Wannabe Geek
+1 received by user: 2

#2660013 19-Feb-2021 23:42

How about 2degrees mobile network, I use 2degrees as a backup link for my primary ISP and obviously, VPN server doesn't want to work over it.

I wonder if 2degrees offers static ip for their 4g network or an ipv6 address.... So far 2degrees mobile network has been pretty average...

AliExpress

Shop now on AliExpress (affiliate link).

ripdog

548 posts

Ultimate Geek
+1 received by user: 373
Inactive user

#2660015 19-Feb-2021 23:48

*Highly* doubt anyone would want to give you a static IP for a mobile network. Hell, doubt anyone'd even give you a public IP, pretty sure all mobile ISPs use CG-NAT.

sorceror

163 posts

Master Geek
+1 received by user: 47

#2660021 20-Feb-2021 00:59

ripdog:

*Highly* doubt anyone would want to give you a static IP for a mobile network. Hell, doubt anyone'd even give you a public IP, pretty sure all mobile ISPs use CG-NAT.

well you're in for a surprise - change your APN name from "internet" to "direct" (on 2degrees) and you'll get a routable public address.

static IPs on mobile networks are also common for business purposes - maybe if you ask nicely you could get one as a residential user.

c0ld

234 posts

Master Geek
+1 received by user: 69

#2660033 20-Feb-2021 06:03

2degrees offer this as part of a private apn product on one of their corporate plans designed for a minimum of a couple of hundred users. Think $thousands for initial setup then ongoing costs for the apn as well as the individual plan costs. Never heard of it being offered to smaller business / residential. The amount of work that goes into initial setup would make it too prohibitive for smaller user numbers on a private apn.

nevolex

7 posts

Wannabe Geek
+1 received by user: 2

#2660040 20-Feb-2021 08:27

sorceror:

ripdog:

*Highly* doubt anyone would want to give you a static IP for a mobile network. Hell, doubt anyone'd even give you a public IP, pretty sure all mobile ISPs use CG-NAT.

well you're in for a surprise - change your APN name from "internet" to "direct" (on 2degrees) and you'll get a routable public address.

static IPs on mobile networks are also common for business purposes - maybe if you ask nicely you could get one as a residential user.

I was indeed surprised, changed the APN to "direct" and got a direct IP without CGNat, seems working just fine, I will keep this configuration, as it works must be allowed then and most people don't need it anyway, so maybe that's why 2d is fine with it as well.

Also emailed them about the normal ip either v4 or v6

ps: tested if vpn works now in case of the failover to 2d and it does as well

Thank you, everyone!

c0ld

234 posts

Master Geek
+1 received by user: 69

#2660043 20-Feb-2021 08:37

Awesome news that worked for you :)

And apologies, my previous comment around the private APN was purely to solve the static IP requirement (rather than the public / IPv6 part). I should have made that clearer.

Geekzone support

Support Geekzone with one-off or recurring donations Donate via PressPatron.

nevolex

7 posts

Wannabe Geek
+1 received by user: 2

#2660047 20-Feb-2021 09:46

c0ld: Awesome news that worked for you :)

And apologies, my previous comment around the private APN was purely to solve the static IP requirement (rather than the public / IPv6 part). I should have made that clearer.

Thank you c0ld, all works now, I am fine with the changing puiblic ip address as I have a ddns anyway to pick the changed IP and vpn is set to use a domain name regardless of the ip behind as long as it's not double nat'd for port forwarding purposes, have a good weekend :))

michaelmurfy

meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator

ID Verified

Trusted

Lifetime subscriber

#2660175 20-Feb-2021 18:57

@nevolex just remember. With you having a public IP opens you up to the whole internet. If for example you get any inbound traffic or even a DDOS this will count on your data use even if you’re not using it.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

nevolex

7 posts

Wannabe Geek
+1 received by user: 2

#2660364 20-Feb-2021 23:48

michaelmurfy: @nevolex just remember. With you having a public IP opens you up to the whole internet. If for example you get any inbound traffic or even a DDOS this will count on your data use even if you’re not using it.

Thank you, michaelmurfy

I will keep an eye on it, hopefully, nothing bad will happen

sorceror

163 posts

Master Geek
+1 received by user: 47

#2662403 24-Feb-2021 23:57

c0ld: 2degrees offer this as part of a private apn product on one of their corporate plans designed for a minimum of a couple of hundred users. Think $thousands for initial setup then ongoing costs for the apn as well as the individual plan costs. Never heard of it being offered to smaller business / residential. The amount of work that goes into initial setup would make it too prohibitive for smaller user numbers on a private apn.

yes if you're building new or complex APNs, but i would be very surprised if 2degrees don't already have an APN created that could just deliver a static public IP address to a subscriber.

not that it matters anyway, they still aren't going to offer it to joe public.

1 | ... | 26 | 27 | 28 | 29 | 30 | 31 | 32