2 Public IP addresses? Could you explain it please?

|tera|

|tera|

Master of Messengers
Joined
Mar 31, 2006
Messages
25,903
Reaction score
2,952
Location
terra
So it seems my Telkom connection assigns 2 Public IPs.
Google reports a different IP than whatsmyip.
Other IP locators either detect the one Google shows, or the one that whatsmyip shows.

Is this normal?
I've never seen it before, or haven't noticed it until now.

My Google searches show that it is due my Router assigning an address for the LAN and WiFi.
So both are treated as a different connection.
I've changed my Router settings in the hope of using LAN as LAN, and not Internet facing.
It made no difference though.

Could you please help me explain why it happens?

Thank you :)
 
|tera| said:
So it seems my Telkom connection assigns 2 Public IPs.
Google reports a different IP than whatsmyip.
Other IP locators either detect the one Google shows, or the one that whatsmyip shows.

Is this normal?
I've never seen it before, or haven't noticed it until now.

My Google searches show that it is due my Router assigning an address for the LAN and WiFi.
So both are treated as a different connection.
I've changed my Router settings in the hope of using LAN as LAN, and not Internet facing.
It made no difference though.

Could you please help me explain why it happens?

Thank you :)
Click to expand...
Telkom Mobile?
 
|tera| said:
Yep. Telkom fixed LTE.
Click to expand...
Dynamic IP

Telkom Incoming Ports blocked - use 'unrestricted' APN

Hi! I used to connect to certain servers via IPSec (UDP 500 and 4500 outgoing) for a couple of years. This doesn't work anymore for about 1 week. Usually, my router (B315s-936) got a public IP address which is no longer the case. It gets now a CGN address (100.64.0.0/10). I couldn't test...
mybroadband.co.za mybroadband.co.za
 
It's most likely CGNAT. My guess is that you're being assigned a private IP address on your WAN interface of your router, and your outgoing traffic is being masqueraded through multiple different public IP addresses. Seen this happen plenty of times on Telkom Mobile. It's a pain because it breaks a lot of things, like online banking.
 
Not quite the same as assigning you 2 public IP's.

You are most likely assigned one IP which some traffic goes though. The 'internet' will see you coming from this IP.
If some of the traffic is routed through a transparent proxy then the address for this will be coming from the proxy IP.

You will need to check your router interfaces and see if they are assigning you one or 2 public IP's. If they assign 2 the routing could be very interesting. I doubt this is the case.
 
Thanks everyone. I appreciate your feedback.

DA-LION-619 said:
Dynamic IP

Telkom Incoming Ports blocked - use 'unrestricted' APN

Hi! I used to connect to certain servers via IPSec (UDP 500 and 4500 outgoing) for a couple of years. This doesn't work anymore for about 1 week. Usually, my router (B315s-936) got a public IP address which is no longer the case. It gets now a CGN address (100.64.0.0/10). I couldn't test...
mybroadband.co.za mybroadband.co.za
Click to expand...
Does this thread say I need to use the unrestricted APN?
I see it's a long read.

Edit: Seems changing to Unrestricted sorted it.
So it's CGNAT. Thanks everyone!
 
gregmcc said:
Not quite the same as assigning you 2 public IP's.

You are most likely assigned one IP which some traffic goes though. The 'internet' will see you coming from this IP.
If some of the traffic is routed through a transparent proxy then the address for this will be coming from the proxy IP.

You will need to check your router interfaces and see if they are assigning you one or 2 public IP's. If they assign 2 the routing could be very interesting. I doubt this is the case.
Click to expand...

Most LTE routers will never allow multiple IP addresses to be assigned to the WAN interface. I sincerely doubt that is the issue.
 
deweyzeph said:
Most LTE routers will never allow multiple IP addresses to be assigned to the WAN interface. I sincerely doubt that is the issue.
Click to expand...
See my edit above.
Unrestricted APN sorted it :)
Thanks again everyone.
 
Try this tool:

What Is My IP?

Check the IP address assigned to your device. Show my IP city, state, and country. What Is An IP Address? IPv4, IPv6, public IP explained.
www.whatismyip.com www.whatismyip.com

If it always shows your IP then there is no transparent proxy. If you see another IP listed other than the one assigned to your router then its being proxied.
 
gregmcc said:
Try this tool:

What Is My IP?

Check the IP address assigned to your device. Show my IP city, state, and country. What Is An IP Address? IPv4, IPv6, public IP explained.
www.whatismyip.com www.whatismyip.com

If it always shows your IP then there is no transparent proxy. If you see another IP listed other than the one assigned to your router then its being proxied.
Click to expand...
I used it last night. It displayed a different IP than Google.
Using it now on the unrestricted APN, it shows the same IP as Google.
So according to the posts here I believe it's CGNAT.
 
|tera| said:
I used it last night. It displayed a different IP than Google.
Using it now on the unrestricted APN, it shows the same IP as Google.
So according to the posts here I believe it's CGNAT.
Click to expand...

Yip, the unrestricted APN assigns you a proper public IP address to your WAN interface, so if using that APN fixes the problem then it's definitely CGNAT. Telkom's CGNAT implementation is messed up. I've seen it so bad that EVERY outgoing request used a different public IP address, essentially making the internet almost useless.
 
deweyzeph said:
Yip, the unrestricted APN assigns you a proper public IP address to your WAN interface, so if using that APN fixes the problem then it's definitely CGNAT. Telkom's CGNAT implementation is messed up. I've seen it so bad that EVERY outgoing request used a different public IP address, essentially making the internet almost useless.
Click to expand...
The Internet does feel almost useless at times. I find I get better speeds in downloading and uploading on the Telkominternet APN. Thus the reason I didn't use unrestricted. The security concern of unrestricted bothers me too. Sure, I've got a hardware firewall and software firewalls. But I'd prefer to manage ports etc. myself, without exposing the lot of them.
 
|tera| said:
The Internet does feel almost useless at times. I find I get better speeds in downloading and uploading on the Telkominternet APN. Thus the reason I didn't use unrestricted. The security concern of unrestricted bothers me too. Sure, I've got a hardware firewall and software firewalls. But I'd prefer to manage ports etc. myself, without exposing the lot of them.
Click to expand...

I agree with this, but if you think about it, most fixed line ISP's work the same as Telkom's unrestricted APN. The Telkom IP is still dynamic, which means at least you're a moving target if you do happen to become a target.

If you're on Vumatel Fibre for example, you're stuck with just the one unrestricted IP address until you change your ISP. What I hate about this more than anything else is that it doesn't matter whether you clear your browser, or reload your OS, you're gonna be tracked by marketers and other dodgy stuff.
 
I actually expect the unrestricted APN to be take away soon.

It's already showing signs of issues. I can only assume it's due to ipv4 exhaustion. Switching to the unrestricted APN might allocate you an IP from another region. Telkom has 3. North, East and South. If you are in Gauteng for example you might get an IP from East or South causing the traffic to terminate in that region. This is problematic if you access services like google that is located in JHB. Traffic will then go from JHB > CPT >JHB for example and if that service goes to an international destination via google transit it might go JHB > CPT > JHB > CPT > LON causing increased latency.

I would suggest only using the unrestricted APN if you having issues with ports being blocked otherwise it might not be a better solution if you worried about latency.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X