Home internet service IPv6 traffic is all filtered even when using a Netgear LTE router. No port forwarding. Plz fix!

Unfortunately it is a snafu with the 464 in general... was documented as far back as at least 2013 (RFC-6877):

https://tools.ietf.org/html/rfc6877

It gets noted right at the start in the introduction:

"1. Introduction

With the exhaustion of the unallocated IPv4 address pools, it will be difficult for many networks to assign IPv4 addresses to end users. This document describes an IPv4-over-IPv6 solution as one of the techniques for IPv4 service extension and encouragement of IPv6 deployment. 464XLAT is not a one-for-one replacement of full IPv4 functionality. The 464XLAT architecture only supports IPv4 in the client-server model, where the server has a global IPv4 address. This means it is not fit for IPv4 peer-to-peer communication or inbound IPv4 connections. 464XLAT builds on IPv6 transport and includes full any-to-any IPv6 communication."

Some potential to skirt around some issues this approach takes, but in all honesty there are better ways to set this up.

@Reblog I have been holding off with this observation and thought you might have some insight into the problem. I am responsible for posting documents/pictures, etc. from home to a remote server. Over the years I have used FTP to easily transfer these files. However, since I switched from a slow DSL connection to T-Mobile HI (ASKEY), I no longer can move the files. I used Windows 10 File Explorer in split screen mode (remote on one screen and local files on second) and simply clicked and dragged the files from one screen to the other. Now when I try to connect with T-Mobile HI, I get the following error message...any thoughts? I have permissions on the remote FTP server.

Could be tied into poor implementation of, or lack of  access to firewall configiration options.

Usually a section dedicated to managing passthrough for various protocols used by VPN's as well as file servers and such.

Even on routers that give you options for managing them, they don't always behave right.

grayhairedgrandpa wrote:

@ReblogI have been holding off with this observation and thought you might have some insight into the problem. I am responsible for posting documents/pictures, etc. from home to a remote server. Over the years I have used FTP to easily transfer these files. However, since I switched from a slow DSL connection to T-Mobile HI (ASKEY), I no longer can move the files. I used Windows 10 File Explorer in split screen mode (remote on one screen and local files on second) and simply clicked and dragged the files from one screen to the other. Now when I try to connect with T-Mobile HI, I get the following error message...any thoughts? I have permissions on the remote FTP server.

 

I suggest that you log into the ASKEY interface and check the ALG settings first and see that the FTP and TFTP are allowed.  Details if you need are in the user manual: https://www.t-mobile.com/isp/lte-wifi-gateway-digital-user-guide

There are other settings that could be preventing the FTP transfer but this would be first check.

Yes, I recognized it.

Has anyone figured out a work around I need port 443 and 80 open and forwarding it bridge mode!? 

Or heard when or if there will be a firmware update for this?

I have the new 5G modem btw 

In the meantime I’ve join this Community on Reddit
 

intel wrote:

My background is in IT / networking and I started using Tmo Home Internet for the past 2 weeks. The router being shipped today to customers is missing very important features for power users - it actually broke my ability to remotely access my home via direct-connection using public IPv6 and IPv4 that I used on comcast. 

Contacting support for help is pretty much useless, although I have raised a few tickets regarding the major issues affecting me since switching ISPs, namely:

• Unable to ping my IPv6 WAN address given by T-mobile (to remotely monitor my internet connection)
• Unable to remotely access my home via my VPN server which listens to connections on the WAN IPv6 address (again, T-mobile is filtering ALL my incoming traffic - comcast, att fiber, other major players in the market don’t do this filtering to endpoints except for spam port 25)
• Connecting to a VPN server hosted on the internet is unreliable and unstable.
• T-mobile does not offer IPv6 Prefix Delegation (comcast has it, att fiber does también)

I've spent the majority of my time trying to figure out ways to make this work. Most folks out there are blaming the Nokia router firmware which is really locked down by T-mobile, so being the IT engineer I pretend to be I purchased a Netgear LAX20 which is T-mobile and AT&T certified - I swapped SIMs for my Home internet service and tested both.

 

Even with a router that I fully control, with firewall disabled and allowing WAN icmp/ping responses T-mobile seems to continue to filter traffic (even pings!) incoming towards my service equipment… to make a fair comparison I got an AT&T SIM card and repeated the tests. On AT&T I can ping and access my device remotely when it is on the AT&T LTE network on the same Netgear LAX20. 

 

Decided to post here to vent and share some findings, as this is somewhat frustrating that other LTE carriers that do not offer 'home internet' service do allow you to control and manage your network as you see fit while the new "home internet" service does not give you any control at all. Those users who wish to be able to remotely manage their smart home should perhaps stay away for now until T-mobile decides to do the right thing which is for "home internet" service subscribers to have different security network rules than cellphones on the network.

T-mobile please fix your business model for this new service, starting with adding the ability to request zero network filtering for home internet subscribers and the ability to get IPv6 prefix delegated.

With the LAX20 did you try fast.t-mobile.com APN? I'm thinking it's the fbb.home APN. 

Thx

Jayke wrote:

T-Mobile come on its been months now. Why do we still not have basic things like prefix delegation and inbound ipv6. This would let us use a real router with things like a guest network, and fix a lot of online gaming and vpn issues.

IKR... QoS has been slowly improving in our market, which has kept me subscribing.  Even when signal dips as bad as -96db, been able to still get around 60 down, 10 up--sometimes even better (easily breaks 100/30 when signal is strong and not a lot of congestion).

It is proving itself to be a viable alternative to $pectrum here for smaller households that don't need a lot of bandwidth.  Some neighborhoods here still get capped at 100 mbps instead of their "national" standard of 200--but the base price is still $75/ month.  Yes, you may qualify for a $25 promo discount for 12 months your FiRST year, but after that you have to haggle annually, and each time the discount gets smaller.

But when it comes to things like remote access to media servers, cameras, or even something as basic/common as multiplayer gaming... the "filtering" or whatever is at play IS going to be a problem for many households.

Fortunately for TMO, I have gotten back into online RPG again which consumes most of my gaming time these days, so I am sticking with TMO a bit longer since I am not reliant on P2P and such to play.

But when the day comes that I go back to console games that will require port forwarding for party forming... this WILL push me off their network if they don't find a way to fix it.

uzun wrote:

T-Mobile does not work with most set top boxes or streaming internet devices, it does not work for most gaming sites via pc or console most of the time.  It's fast for uploads and downloads on sites that are compatible with it.  I wish they would fix it to be a general purpose internet but I have no idea who to contact to get anything done.

 

I have spoken to the advanced tech support people and they say limitations of the network mean it won’t really work as general purpose home internet unless major changes are made to the T-Mobile network itself on their end, and that they have no plans to do it in the near future.

 

 

What set top boxes or streaming devices are you using?  It works fine with my Roku, Apple TV, Fire Stick, Sony and Samsung TV's.

The lack of port forwarding was an issue for me.  But it was easily solvable with a $5 month VPN subscription.  I don't mind paying that since I am saving $60 a month over Comcast with much better speed and no data caps.

This post I found seems related and comments have been disabled. (link below) I have had my gateway for three days now and just attempting the gateway settings and noticed port forwarding is missing. It looks like this has been an issue for some time and there are no plans to address it. So we were sold home internet, but got a wifi hotspot. I am sad that my only option now is to return the unit to T-Mobile and pay triple what T-Mobile was offering to get the same speeds with Cox. :-(