Access OpenVPN server behind T-mobile Home Internet
Currently, I am testing T-Mobile 5G Home Internet. Here is what I found while I am doing testing: 1. CG-NAT, I am getting 192.168.12 IP on my router WAN 2. NAT444, NAT after NAT, even whatismyip.com gives me a public ip which is the tower public ip, not my modem/gateway Ip. 3. On my Asus router, I turn on IPv6, so I have a public IPv6 My setup: 1. Internet <-> T-Mobile (modem/gateway 192.168.12.) <-> Asus router (192.168.1.0/24) 2. I have Ipv6 on my router, which is a public 2607:fb91:82ae:1493 3. I have OpenVPN server setup on the router. (I tested by access 192.168.12.x from my internal network which works, but it doesn't work when I use the public IPv6 Ip) 4. I have firewall disabled to make sure things work first Goals: 1. I can access my internal network from a public location, so I can get files on my harddrive (attach to the router USB port) 2. Access other web which has region check and I was oversea Questions: 1. How may I OpenVPN into my router from public so I can access my network resource? 2. Any other suggestions?
Solving CGNAT problems?
AFAICT my T-Mobile Internet router connects to a CGNAT DMZ, and every time I connect to a networkservice I do so from what appears to that service to be a different IP4 address. There seem to be exceptions, however, for some known protocols - I've had an SSH session up for several consecutive days. So one CAN obtain a static IP address for things like VPNs and SSH, but the protocol has to be well-known. Therefore, questions: Is there an IPV4 packet flag that says "this session needs a static IP address" to routers along the way? Routers are already reading the port assignments in order to determine "oh, that's SSH, better make this static." Is there a packet flag one can set? If I turned off IPV4 and just used IPV6 would the CGNAT DMZ provide a static address, since I wouldn't need to be sharing IPV4 addresses any more?
Isn't T-Mobile Fiber violating their own TOS with CGNAT
You are not permitted to use your Device or the Service in a way that we determine: Operates servers for commercial purposes, uses applications which automatically consume unreasonable amounts of available network capacity, or otherwise uses the Service or Device for purposes other than the personal residential use; That implies personal use is allowed, but CGNAT makes it so you can’t host a personal website, Minecraft server, etc. all personal non-commercial uses.