Access OpenVPN server behind T-mobile Home Internet
Currently, I am testing T-Mobile 5G Home Internet. Here is what I found while I am doing testing: 1. CG-NAT, I am getting 192.168.12 IP on my router WAN 2. NAT444, NAT after NAT, even whatismyip.com gives me a public ip which is the tower public ip, not my modem/gateway Ip. 3. On my Asus router, I turn on IPv6, so I have a public IPv6 My setup: 1. Internet <-> T-Mobile (modem/gateway 192.168.12.) <-> Asus router (192.168.1.0/24) 2. I have Ipv6 on my router, which is a public 2607:fb91:82ae:1493 3. I have OpenVPN server setup on the router. (I tested by access 192.168.12.x from my internal network which works, but it doesn't work when I use the public IPv6 Ip) 4. I have firewall disabled to make sure things work first Goals: 1. I can access my internal network from a public location, so I can get files on my harddrive (attach to the router USB port) 2. Access other web which has region check and I was oversea Questions: 1. How may I OpenVPN into my router from public so I can access my network resource? 2. Any other suggestions?
Unstable Hotspot and MMS Issue
Hi All. I am having a strange and annoying issue. I have an unlocked Samsung S21. When I use the APN provided by T-Mobile, I have a very unstable phone hotspot. I turn on the hotspot; sometimes it connects, sometimes it doesn't. If it connects, it disconnects quickly. I have to turn on and off airplane mode multiple times to get it to work. I found a work around by creating a new APN for the phone. I changed the APN Protocol to IPv4/IPv6 and the APN roaming protocal: to IPv4/IPv6. With those settings, the phone hotspot works. Great right? Almost. Unfortunately, with those settings, I can no longer send group MMS. And to make matters stranger, my wife has an identical phone without hotspot issues. Can you help please? -Thanks! Name: T-Mobile APN: Fast.t-mobile.com Proxy: <Not set> Port: <Not set> Username: <Not set> Password: <Not set> Server: <Not set> MMSC:http://mms.msg.eng.t-mobile.com/mms/wapenc MMS proxy: <Not set> MMS port: <Not set> MCC: 310 MNC: 260 Authentication Type: <Not set> APN Type: default,supl,mms APN Protocol: IPv4/IPv6 APN roaming protocol: IPv4/IPv6 Turn APN on/off: Grayed out Bearer: Unspecified Mobile virtual network operator type:GID Mobile virtual network operator value:544DHome internet service IPv6 traffic is all filtered even when using a Netgear LTE router. No port forwarding. Plz fix!
My background is in IT / networking and I started using Tmo Home Internet for the past 2 weeks. The router being shipped today to customers is missing very important features for power users - it actually broke my ability to remotely access my home via direct-connection using public IPv6 and IPv4 that I used on comcast. Contacting support for help is pretty much useless, although I have raised a few tickets regarding the major issues affecting me since switching ISPs, namely: Unable to ping my IPv6 WAN address given by T-mobile (to remotely monitor my internet connection) Unable to remotely access my home via my VPN server which listens to connections on the WAN IPv6 address (again, T-mobile is filtering ALL my incoming traffic - comcast, att fiber, other major players in the market don't do this filtering to endpoints except for spam port 25) Connecting to a VPN server hosted on the internet is unreliable and unstable. T-mobile does not offer IPv6 Prefix Delegation (comcast has it, att fiber does too) I've spent the majority of my time trying to figure out ways to make this work. Most folks out there are blaming the Nokia router firmware which is really locked down by T-mobile, so being the IT engineer I pretend to be I purchased a Netgear LAX20 which is T-mobile and AT&T certified - I swapped SIMs for my Home internet service and tested both. Even with a router that I fully control, with firewall disabled and allowing WAN icmp/ping responses T-mobile seems to continue to filter traffic (even pings!) incoming towards my service equipment…to make a fair comparison I got an AT&T SIM card and repeated the tests. On AT&T I can ping and access my device remotely when it is on the AT&T LTE network on the same Netgear LAX20. Decided to post here to vent and share some findings, as this is somewhat frustrating that other LTE carriers that do not offer 'home internet' service do allow you to control and manage your network as you see fit while the new "home internet" service does not give you any control at all. Those users who wish to be able to remotely manage their smart home should perhaps stay away for now until T-mobile decides to do the right thing which is for "home internet" service subscribers to have different security network rules than cellphones on the network. T-mobile please fix your business model for this new service, starting with adding the ability to request zero network filtering for home internet subscribers and the ability to get IPv6 prefix delegated.
KVD21 DHCP/iPv6 Prefix Delegation and PFSense
Hi, It seems the KVD21 Gatewayis a great device for basic Internet users. It is wise and understandable. Unfortunately, It has no options for DHCP or iPv6 Prefix Delegation. Is there any other T-Mobile gateway available with more options? At least controlling the DHCP or iPv6 Prefix Delegation? I understand the Core network of T-Mobile is running over pure iPv6 and it is amazing! But iPv6 Prefix Delegation should be available so we can technically get more freedom to use PFSense or other open-source gateways. I am interested in PFSesne because I have more control over my traffic to block the Ads/Tracker/malicious addresses on my network. The reason I am asking this question is that Part of my question is asked in community and there is no answer from T-Mobile! https://community.t-mobile.com/other-devices-11/ipv6-prefix-delegation-44058 https://community.t-mobile.com/troubleshooting-38/prefix-delegation-41507 Thank youSolving CGNAT problems?
AFAICT my T-Mobile Internet router connects to a CGNAT DMZ, and every time I connect to a networkservice I do so from what appears to that service to be a different IP4 address. There seem to be exceptions, however, for some known protocols - I've had an SSH session up for several consecutive days. So one CAN obtain a static IP address for things like VPNs and SSH, but the protocol has to be well-known. Therefore, questions: Is there an IPV4 packet flag that says "this session needs a static IP address" to routers along the way? Routers are already reading the port assignments in order to determine "oh, that's SSH, better make this static." Is there a packet flag one can set? If I turned off IPV4 and just used IPV6 would the CGNAT DMZ provide a static address, since I wouldn't need to be sharing IPV4 addresses any more?
T-Mobile Home Internet Slow IPv4
Hi all, I'm having a terrible experience lately using the T-MobileTM-RTL0102. More with IPv4 than IPv6 For example, when pinging bing.com on Windows >ping bing.com -4 Pinging bing.com [204.79.197.200] with 32 bytes of data: Reply from 204.79.197.200: bytes=32 time=333ms TTL=117 Reply from 204.79.197.200: bytes=32 time=222ms TTL=117 Reply from 204.79.197.200: bytes=32 time=227ms TTL=117 Reply from 204.79.197.200: bytes=32 time=509ms TTL=117 Ping statistics for 204.79.197.200: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 222ms, Maximum = 509ms, Average = 322ms and with IPv6, not as bad: >ping bing.com -6 Pinging bing.com [2620:1ec:c11::200] with 32 bytes of data: Reply from 2620:1ec:c11::200: time=50ms Reply from 2620:1ec:c11::200: time=85ms Reply from 2620:1ec:c11::200: time=93ms Reply from 2620:1ec:c11::200: time=72ms Ping statistics for 2620:1ec:c11::200: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 50ms, Maximum = 93ms, Average = 75ms When I use my iPhone as hotspot, I get reasonable ping and have reasonable experience. It is not just ping, it's IPv4 site. If I can't access the site with IPv6, it will use IPv4 and the experience is horrible. This oddly started when I began to use alternate DNS 8.8.4.4, 1.1.1.1, 9.9.9.9 with my internal Asus router and/or the T-Mobile router and DNS over TLS (DoT). I'm not quite sure when but it was within the last few days and that has been my only major configuration changes. I'm not using the 5G router as the one wasn't able to work in my area due to it trying to use multiple towers that were further away than closes causing worse experience than closest one. I did contact T-Mobile twice today and after a power off and back on, it improved a bit but was not as good as a week ago. Any advice appreciated to get this working like a good ISP should be. Thanks, Jason
