CGNAT?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › CGNAT?

snnet

1410 posts

Uber Geek

#242352 23-Oct-2018 22:34

Hi,

I have a customer who has been with slingshot for a few months and all of a sudden their CCTV and alarm system network interfaces have stopped working. Before I get a tirade of talk about security, everything done has been bolted down. This appears to have happened when filtering was switched on, but after requesting the filtering to be turned off there are still connectivity issues.

Dynamic DNS logs indicate the IP has not changed since 16 October despite apparent router reboots, is this normal? Not a static IP assigned to the account so I'm wondering if Slingshot are using CGNAT as well?

Equipment is contactable LAN side but not WAN side

Thanks in advance..

djtOtago

1153 posts

Uber Geek

#2112983 24-Oct-2018 00:05

see https://www.geekzone.co.nz/forums.asp?forumid=81&topicid=240940&page_no=1#2100784

and https://help.slingshot.co.nz/hc/en-us/articles/360005168434-Port-Filtering

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#2113026 24-Oct-2018 07:14

It's also probably worth taking the time to configure things securely. Port forwards using a standard web port to CCTV in particular is something that you never ever contemplate due to the massive security risks posed by so many brands of hardware.

You should only be accessing these systems via VPN.

snnet

1410 posts

Uber Geek

#2123568 11-Nov-2018 13:52

djtOtago:

see https://www.geekzone.co.nz/forums.asp?forumid=81&topicid=240940&page_no=1#2100784

and https://help.slingshot.co.nz/hc/en-us/articles/360005168434-Port-Filtering

Thanks for the info, turns out the gateway IP on affected devices with Static LAN IPs was misconfigured as it had been changed on the router by somebody to .254 instead of .1 as is the default for the Slingshot device. Everything working even with filtering on. As I'd said in the first post (regarding CCTV being locked down) I'd ensured this was the case already

Thanks