Sharing at the provider level

CGNAT allows an ISP to share a public IPv4 address among multiple subscribers. Another translation layer may sit in front of your home router. Ordinary browsing can work while connections initiated from outside encounter problems.

Which addresses to compare

Compare your router’s WAN address with the public IPv4 shown by a website. The 100.64.0.0/10 shared address space can be used in CGNAT deployments. A private or mismatched WAN address may indicate another NAT layer, but a single observation does not prove the full topology. Confirm with your ISP.

Remote-access options

Opening a port only on your router does not resolve the ISP’s NAT layer. Depending on your needs, consider a public IPv4 service, suitable IPv6 connectivity, or a secure outbound tunnel. IPv6 still requires firewall policy; obtaining a public address does not automatically provide safe access.

Comparing WAN and external addresses

If the router WAN page shows 100.64.10.20 while a lookup shows another IPv4, investigate provider-level translation. Send the addresses and test time to support. Do not confuse the WAN value with a LAN address. Before repeatedly changing port-forwarding rules, ask whether a public IPv4 or alternative access service is available.

Further reading

Shared address space — RFC 6598 ↗

Put it into practice

Inspect one public IP, or compare a list of addresses with the bulk lookup tool. Location results are approximate.

Single lookup ↗ Bulk lookup ↗