Webafrica - Double natting

yusufm786 said:
Hi guys

I use a dynamic DNS to allow me to access my CCTV system remotely. In the last few weeks, something seems to have changed on the webafrica network, because I can no longer access the required port (8xxx). A simple port scan on my external IP address (based on my dyndns) shows the port is closed, and webafrica insists they don't close any ports

Their tech support is also impossible to get a hold of, and when I do they give me silly suggestions like "restart your router" then they close the ticket

How do I resolve this? It is super urgent

Thanks
Click to expand...
You've been hit with CGN (Carrier-Grade NAT). You have 3 options... setting up a VPN to home, chaning ISPs or contacting WA and requesting a public IP.
 
Thanks for the response. Amazing that webAfrica could not tell me this. Let's see if they are smart enough to be able to give me a public IP or if they insist I need to restart my router to resolve it
 
yusufm786 said:
Hi guys

I use a dynamic DNS to allow me to access my CCTV system remotely. In the last few weeks, something seems to have changed on the webafrica network, because I can no longer access the required port (8xxx). A simple port scan on my external IP address (based on my dyndns) shows the port is closed, and webafrica insists they don't close any ports

Their tech support is also impossible to get a hold of, and when I do they give me silly suggestions like "restart your router" then they close the ticket

How do I resolve this? It is super urgent

Thanks
Click to expand...
Issue already discussed here: https://mybroadband.co.za/forum/threads/webafrica-double-natting.1096052/
 
yusufm786 said:
Thanks for the response. Amazing that webAfrica could not tell me this. Let's see if they are smart enough to be able to give me a public IP or if they insist I need to restart my router to resolve it
Click to expand...
Does anyone else that uses Webafrica have any communication from them informing them of the Carrier Grade Natting change ?
 
Is there any reason these ISP's who have no free IPv4 available cannot simply also give clients access to IPv6 ?

One of the biggest succcess stories of CDN's is not the added security layer or speed it allows locally but that it fast tracked the usability of IPv6 in a few years what previously could not be obtained in over 2 decades.

Pretty much 90% of the internet is behind some sort of CDN now and all these CDN's support IPv6 natively and giving an IPv6 address for each client would allow them to at least have some normality when dealing with direct access like IP cameras etc.
 
John Tempus said:
Is there any reason these ISP's who have no free IPv4 available cannot simply also give clients access to IPv6 ?

One of the biggest succcess stories of CDN's is not the added security layer or speed it allows locally but that it fast tracked the usability of IPv6 in a few years what previously could not be obtained in over 2 decades.

Pretty much 90% of the internet is behind some sort of CDN now and all these CDN's support IPv6 natively and giving an IPv6 address for each client would allow them to at least have some normality when dealing with direct access like IP cameras etc.
Click to expand...

There’s no reason. Just a lack of will to support it. Implementation over L2 networks (Vuma aerial, FF, MFN, Octotel etc) is pretty easy on the ISP side of the ISP wants to roll it out.

Openserve’s implementation works too. Vuma trenched has been promised for years, to date, silence. ISPs shouldn’t have to find workarounds to make this work on their network.

Let’s face it, with Afrinic only handing out a max of a /22 (1024) IPv4 addresses at each request (and full allocation fees still apply), it’s not feasible for ISPs to continue buying IPv4 space. CG Nat will become a reality. When well implemented with proper port forwarding tables and a little communication with clients, it’s manageable. Run that with dual stack IPv6 and very soon you won’t even notice you’re behind CGNAT. But it takes a little will from service providers. There’s no reason mobile networks can’t implement v6 yet (to make accessing your DVR at home a little easier once your ISP hands you a v6 address).
 
Been searching the forums and posted in vumareach group as well I use NO-Ip and could not understand why my cameras were down remotely. I knew I didn't change anything now I'm sitting with cameras I can't access remotely plus noticed the default wifi name appear as well.

This really inconvenience those who use features in the router has anyone tried swapping out there router yet?
 
Ashez7 said:
Been searching the forums and posted in vumareach group as well I use NO-Ip and could not understand why my cameras were down remotely. I knew I didn't change anything now I'm sitting with cameras I can't access remotely plus noticed the default wifi name appear as well.

This really inconvenience those who use features in the router has anyone tried swapping out there router yet?
Click to expand...

Swapping the router out will not resolve the issue. The CGN is applied on a network level. You would need to make contact Webafrica and ask if they can provide you with a public IP instead of a natted one.
 
AfriNatic said:
Swapping the router out will not resolve the issue. The CGN is applied on a network level. You would need to make contact Webafrica and ask if they can provide you with a public IP instead of a natted one.
Click to expand...

Thanks Afrinatic I'm beginning to think I should of gone with Afrihost! I will give them a shout.
 
Ashez7 said:
Thanks Afrinatic I'm beginning to think I should of gone with Afrihost! I will give them a shout.
Click to expand...
Everyone is moving to CGNAT due to v4 exhaustion, there is technically nothing wrong with it. We will probably implement the same but with an option to have a public if you need it.
 
Ashez7 said:
Thanks Afrinatic I'm beginning to think I should of gone with Afrihost! I will give them a shout.
Click to expand...

At Afrihost we have already put quite a number of clients behind a CGNat and we do give clients a public IP on a case by case basis.

Connectivity has boomed. Vuma Reach offers amazing prices and this has put extreme strain on our available IP resources. We are trying to manage our IP resources as best we can.
 
WebAfrica Helper said:
Hello to all :)
,
Yup, we have indeed begun using CGNAT on our network and while it won’t affect all users, all of the time, it may affect some. This is because our IP addresses are handed out randomly and we currently use a mix of both normal public IPs and CGNAT IPs.

As already alluded to by @AfriNatic :notworthy:, the reason for CGNAT being used is simply due to exhaustion of IPv4 address space, this is not unique to Webafrica or South Africa – ISPs around the world have been pushed to use CGNAT for some time now.

In essence, the world has run out of IPv4 addresses, it is becoming almost impossible to purchase more IP addresses in the v4 space :unsure:and given that there has (for whatever reason) been very little uptake on IPv6 space, which was actually designed to address issues of this nature, ISPs have been left with no option but to use CGNAT while IPv6 grows in popularity.

Most customers will not feel any difference between being on CGNAT vs having a normal public IP. The only time this would be noticeable would be in cases where you’re hosting content behind your router and you want this content to be freely available online. For example, CCTV cameras.

Webafrica is happy to help any customer who specifically cannot use CGNAT due to these reasons and we have an option to turn CGNAT off for your profile.

While we're working to make a toggle option available on our Customer Zone, in the meantime this would need to be performed on an Adhoc request basis. :)

Please DM us should you be on CGNAT and wish to be turned off and we'll take care of it for you.

Hope the above addresses all concerns around CGNAT, please feel free to let know via DM if you require any further help

Regards,

Webafrica
Click to expand...

Thank you Webafrica, I will DM you shortly much appreciated! This will help those who also need to use CCTV and RDP especially!
 
AfriNatic said:
Swapping the router out will not resolve the issue. The CGN is applied on a network level. You would need to make contact Webafrica and ask if they can provide you with a public IP instead of a natted one.
Click to expand...
i think this is a combination of the CGNAT but him also being locked out of the vumareach router...
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X