Home Internet Static IP

hanjin66 wrote:

I call Tmobile the other day, their representative told me their engineers are actively working on a solution to get static IP for tmobile 5G home internet, I dont know if that’s true or not, but I hope we can get static IP soon

Well almost a year has passed and no results. Time to go to Verizon or AT& T

@zookybear:

t-mobile small business internet throttles ALL streaming services

WOW...that is just so...wildly unacceptable. I don't even know what to say.

I probably haven’t noticed because

1. I’ve had this all set up for less than a week so far.
2. I’m in a rural mountain town, so I’m getting a few tens of Mbps upload/download at most through my T-Mobile connection, even with a high-gain antenna booster pointed directly at the (LTE-only) T-Mobile cell tower that I can see with the naked eye…
3. I’m loadbalancing across 4 ISP connections (2x Rise Broadband, 1x Starlink, 1x T-Mobile) using my TP-Link ER605 multi-WAN router, so not all streams go over the T-Mobile connection.

I vaguely recall a flyer plastered to the counter in the T-Mobile store that said something about how they had some commitment to not do anything of the sort, but I didn’t read the verbiage carefully, nor did I snap a photo.

Ugh.

T-Mobile has been quite the unpleasant experience for the last several months of just trying to get into a usable state, and if it weren’t so dirt cheap, I probably would boycott them.

ArthurZey wrote:

DTV says it is a T mobile problem  and when I called T Mobile they claim it is a DTV problem, that they need to find a better way to track my location……

@scottyj: I basically concur with @Jrinehart76. Yes, it's definitely a DirecTV problem in terms of how they're attempting to "secure" legitimate access to their service. But T-Mobile isn't exactly making it easier, either. My static IP address from T-Mobile resolves to Bellevue, WA, which is about 1000 miles (and a whole timezone) off from where I am in Colorado.

Because of my need to access various network services at my home while I'm away, it's important that I have publicly accessible IPv4 addresses. (I don't actually care if they're static or dynamic, but I need durable port forwarding.) So with my Starlink connection, which, like the conventional T-Mobile 5G Home Internet, uses CGNAT and only a public IPv6 address, I need to make sure that individual connection is always VPNed. So I bought a static IPv4 address from my VPN provider so that I could get all the right ports forwarded, and I have a VPN router sitting between my multi-WAN router and my Starlink equipment. My static IP address from my VPN has GeoIP resolution closer to my actual home than my T-Mobile-assigned static IPv4 address.

My multi-WAN router establishes connections over whichever link (Startlink, T-Mobile, etc) is least saturated and has sufficient bandwidth. So sometimes, my video streams to these services go out over the VPNed Starlink connection. (The reason that all outbound connections--and not just inbound connections--need to go over the VPN IP address is related to how my Dynamic DNS client updates my public hostname with the IP address of whatever link is up.)

The irony for me is that Hulu, Disney+, and Netflix all block streams when they detect that I've happened to connect to them over the VPNed Starlink connection, all claiming that VPNs obscure my location and violate their terms of service. Reading their terms of service, that's not actually true, but more to the point, T-Mobile is more severely obscuring my location than my VPN is...not that any of this matters, since there are no content license differences between Colorado and any other state in the US. So I have to find my own workarounds to sus violation of their terms of service.

The obvious solution here would be to have their apps on my phone report their location based on GPS, which would give them accurate information to within a few meters at worst, rather than 1000 miles off. And they could even correlate the app on my phone with apps on TVs and such by looking at whether the devices are on the same network. And voilà--you know where your users are without worrying about whether VPNs are obscuring someone's location.

Ugh. Whatever.

@Jrinehart76:

to use IP Passthrough, first change the LAN settings of the Inseego to a subnet not found on your own router. I set my Inseego to 192.168.12.1/24 subnet (because I had the Nokia trashcan before) and my own equipment is on the 192.168.1.1/24 subnet. Once that was set, I then enabled IP Passthrough and I am still able to access the webGUI.

 

So yes, every segment is on a different subnet. My T-Mobile gateway is on 192.168.20.0/24, and my multi-WAN router is on 192.168.47.0/24. (And behind that, my Ubiquiti networking equipment is on 10.10.32.0/20.)

I have it on good authority from my colleagues who know more about network performance than I do that the fact of additional NATting is a drop in the bucket in terms of added latency compare to the mere fact of there being an additional device needing to forward/route packets at all. So I'm not that fussed about using IP Passthrough, since the DMZ solution works just fine.

That said, I’m curious about your recommendation, since I’m fuzzy on the technical details of network routing:

If I do IP Passthrough, it will assign my public T-Mobile IPv4 address to the WAN port of my ER605 multi-WAN router. So from the ER605's perspective, that port's IP address will be that public IPv4 address, not 192.168.20.10 (which I had configured statically to be on the Inseego FX2000's subnet).

What you’re saying suggests to me that the Inseego FX2000’s 192.168.20.0/24 subnet still somehow remains active, and that its 192.168.20.1 address remains accessible. Is that right?

In this configuration, I totally don’t get what the network configuration is of the Inseego FX2000 and which of its ports have what IP address attached to them.

I'm also confused about how, from a routing tables perspective, traffic to 192.168.20.1 would know to go out over the link whose IP address is 162.191.x.y (my T-Mobile-assigned IPv4 address). As I'm thinking about it, I wonder if that's a non-issue when there's only one path, but in my case, since I have 4 WAN links a connection could go over, maybe I have to create a static route on my ER605 that traffic destined to 192.168.20.0/24 needs to have its next hop be over the WAN port that the Inseego FX2000 is connected to.

Thoughts?

You are right. In pass-through mode, the router is MOSTLY bridging the WAN to the LAN as a layer-2 network switch. This allows your personal (non-T-Mobile) router to broadcast THROUGH the Inseego, to T-Mobile, a request for an automatic (static or otherwise) IP, and to get that IP. 

But then, if your personal router has a public WAN IP (which is assigned a T-Mobile default gateway located in T-Mobile's network center to forward all packets to that are not destined for your home LAN... basically to "the cloud")... then you may wonder why the packets intended FOR your Inseego wouldn't slip through your Inseego, reaching T-Mobile's internet gateway, which in turn would drop the packets just because the destination IP is a private (non-internet-routable) IP?

Remember, I said it is... MOSTLY... a layer-2 switch? Well, it also doubles as a layer-3 IP device attached to (and listening on) that little switch.  And it intercepts packets with its own IP as the destination, during passthrough. So even though the packet was being sent to the internet gateway in T-Mobile's building, the router breaks the rule and "opens someone else's mail". It would be like if you were writing a letter to a friend (who happens to work for the post office as a mail carrier) but you put the wrong house address. Normally, it wouldn't make it to the correct recipient, if you put the wrong address on the envelope, but this mail carrier checks every mail piece for his name, and if the name is his, he opens the mail and reads it, instead of delivering it to the house address written on the envelope. This is why he always gets his mail, by virtue of being the delivery middle man, no matter what address you write on the envelope. The Inseego in pass through mode has a rule, "transparently pass all packets between the WAN and LAN ports... UNLESS the destination IP happens to be my IP zof 192.168.1.1 (or whatever it's set to).. I'm going to steal those packets and pluck those out of the stream and not forward those through to the cell tower."

This a joke.  How can you call it home internet and have roaming IP addresses.  @Tmobile and Hulu need to put your heads together and fix this.  I had to have Hulu reset last night and now again today?  

ArthurZey and others:

I'm in a dilemma. I activated Small Business Internet in store earlier this week and was given the Sagemcom gateway. The service is great, speeds are beyond expectations and I am ready to cancel Spectrum internet-- if it only wasn't for the ever-changing IP address. Thanks to your write-up I pretty much know how to go about it, except that no one seems to be able to get me the Inseego gateway. The store doesn't carry it and insists that I need to return my current gateway first before they can order the Inseego as a replacement. Business Care has no way of ordering it and neither does T-Force (all of them are sending me to the store). I am hesitant to do this only to end up with the paid service but no gateway. Plus there is some (mis?)information out there that the Small Business Internet cannot get the static IP, it needs to be switched to Business Internet by virtue of canceling and re-ordering the service. I am at a loss with so much bad and conflicting information from people who should actually know what they're talking about. 

My questions to you are: how did you swap out your internet gateway? Did you also have to return the old one first? Second, can you confirm that you in fact have the Small Business Internet service and have static IP activated on it?

Many thanks!!

I need way around the wandering IP address. I don't understand all the tech talk. Do I just need a router? I want to be able to watch Local live sports. I have the t-mobile home internet. HELP!!!!!

I've had to change my ip address 4 times today and still missed all my live shows on hulu something better change soon or I'm just going to be done with it

I went to what is my IP address, on the web it shows I have a IPv4 and IPv6. My IPv6 changes every day or two but the IPv4 has stay the same. I have been up for 14 days I have a home security system that uses the IPv4. Has T mobile fixed the IPv4??? 

One this I don’t understand is why I can’t ping the IPv4  it comes back “timeout, no answer” Anyone know why?

So long as their system behaves more like a free VPN service (potentially multiple clients using the same forward facing v4 address), this will be a challenge for them to address.

Some VPN services like WIndscribe offer it for a premium fee... can even pay extra to assign up to 10 ports to forward as well.

May be some proxies out there that can do a static IP as well... for a fee, of course.

I must assume some users are talking about the external NAT interface IP address and maybe some are referring to the internal IP addresses. If the lease for the IP address were longer that would help reduce frequent disruptions. I really don't see the need for short lease times unless the scope is not large enough to properly service the expected number of hosts provisioned on the segment. When a client/host is rebooted it will make a request for the same IP address from the server. If it is still disponible the DHCP server should respond with the offer. OK, so this makes the assumption that the host is not presenting a different MAC to IP mapping when it makes the request. If you can't set static IP addresses at least longer address lease times seems like a reasonable workaround.