Forum Discussion

niugiovanni's avatar
niugiovanni
Newbie Caller
2 years ago

T-Mobile Fiber CGNAT & IPV6 Questions (How Do I Get Support?)

I was just connected to T-Mobile Fiber this weekend and I’m trialing it out.    It looks like their fiber service also uses CGNAT (Why?!) which is killing some self hosted appliances that I need for work.

I’m trying to figure out if I can access externally via IPV6 but there aren’t any resources online yet.

I’m also trying to find out if I can pay for static IPs or business service but there isn’t any information about that yet, either.

Making this tons easier is that T-Mobile only offer chat support.  The support system says it’s open Mon-Sun until 9p EST.  Funny enough, after two days of trying to connect I only get the message that no support reps are available.

Does anyone know of any way I can speak with techs for the fiber service?

  • jdub06's avatar
    jdub06
    Network Novice

    pm me if you havent figured this out yet. I have a pretty easy solution. 

  • I want to know the same thing, looks like they are violating their own TOS in my opinion.

     

    You are not permitted to use your Device or the Service in a way that we determine:

    • Operates servers for commercial purposes, uses applications which automatically consume unreasonable amounts of available network capacity, or otherwise uses the Service or Device for purposes other than the personal residential use;

    That implies personal use is allowed, but CGNAT makes it so you can’t host a personal website, Minecraft server, etc. all personal non-commercial uses.

  • Update:

    One of the chat reps told me they don't offer static IP addresses.  So that's off the table.

    None of the chat reps know anything about the IPV6 settings so I can't get a prefix delegate id from them.

    This is frustrating and I'm about done with it.  Who wants an Internet service that restricts your usage?

    • jdub06's avatar
      jdub06
      Network Novice

      whos router are you using? find a 0-8 year old computer, stick in a second network card or buy a intel dual port network card and load opnsense.

      OPNsense® a true open source security platform and more - OPNsense® is a true open source firewall and more

      This turns a normal pc into an enterprise grade router. From there i think the only catch was setting ipv6 on lan to "Follow wan", i also seem to remember i set /48 for the prefix delegation but its been a while. The most important part were firewall rules between lan and wan but mostly it just worked.  everything on the network had a global (albeit dynamic) ipv6 address. 

      I also wanted wireguard (vpn) on the same box and the catch there was that wireguard seemed to only listen on the lan side for ipv6. so i had to do a floating firewall rule to let the correct port through to the firewall itself from wan to lan.

      if anyone is interested reply here. I dont have tmobile fiber at my new place (yet...wait listed) but i can still vpn back to the old place and check settings. I helped a landlord set it up at one of his by the room rental properties.