Reliance JioFiber: Port Forwarding NOT SUPPORTED

The JioFiber router web interface presents option for port forwarding however it does not work in practice.
The page accepts and saves all the configuration changes you do. Yet you won't be able to connect to the port from outside.

The router also has a DMZ and UPnP options and those do not work either.
Customer care is unable to help ("We have no information about this at the moment")

The IP address as seen from outside is different than what the router shows as its WAN IP. So the router is not directly exposed to the internet. It is behind a NAT/Firewall.

The IP the router sees is 100.XX.XX.XX
IP as seen by sites like whatismyip.com is 49.XX.XX.XX

As far as I know 100.XX.XX.XX is a public IP but trying to access that IP from outside does not work either. So the router is sitting behind a firewall.

This is a major limitation if you want to run any kind of server. So developers and gamers beware.
If you want to make your DVR internet accessible, you can't.

With JioFi (dongle) you could use internet accessible IPv6 address to eliminate need of port forwarding but the Jio Fiber router only allocates local IPv6 addresses. Even if IPv6 worked like JioFi, it would not solve problem for IPv4 connections. So there is no alternative at the moment. You can use a VPN, but it slows you down and has other limitations.

I was planning to discontinue my old ISP but due to this limitation, I might have to discontinue JioFiber instead.
 
Last edited:
Messages
33
Location
Mumbai
ISP
Jiofibre
Hey, I just thought of adding something. You may install softether VPN server on any home PC (Raspberry Pi should work, I haven't tested). Then install softether VPN client software on your remote PC (doesn't work with android/iOS). They use UDP hole punching to traverse through NAT firewalls and absolutely no port forwarding is required. They do use a 3rd server to establish that connection but once the connection is established, it is a direct connection between the home network and remote PC. So, latency and bandwidth are great. Use the DDNS they provide. Also, if this fails, they also have a free Azure server to relay your connections (they say this connection is totally end to end encrypted, but I don't use this.). Connect into your local network and use whatever you want (SSH, plex server, CCTV) on your home network as you would at home.

Yes there are lots of good solutions now available and for free. The thing is not everyone has the time to evaluate which is best for their needs when a simple tried and tested RDP solution with port forwarding works well. (Security is always and afterthought :) )

Now that we know that JIOFibre IPV6 works there is no real need to do any port forwards . All systems will get an IPV6 routable address and can be easily connected to from outside.

Though now this does raise the question by opening the firewall to allow all traffic , are we compromising security as every device now will be reachable from anywhere if the IPV6 address is known.
 

ankushmalik1120

I got banned!
Messages
29
Location
Rohtak
ISP
Jio Fiber
You can tweak firewall rules to only expose one ipv6 address to outside internet but the device itself needs to be secure too else it can act as a door to network if compromised.

There's also DMZ ipv6 host feature which may help make it more secure but I'm not much knowledgeable about it.
 
Messages
33
Location
Mumbai
ISP
Jiofibre
You can tweak firewall rules to only expose one ipv6 address to outside internet but the device itself needs to be secure too else it can act as a door to network if compromised.

There's also DMZ ipv6 host feature which may help make it more secure but I'm not much knowledgeable about it.

Thanks Ankush,
Yes for people who are aware of security risks ,we can do so but for others who may not be aware and just want to rdp from outside this now would be as simple as allowing the firewall to always allow instead of a few devices and inadvertently put all their devices at risk. Perhaps i guess the very reason the firewall was set by default to block ipv6.

i hope others who have watched this thread and are thinking of allowing all traffic on ipv6 be aware of the security risks and explore with caution as well as secure their devices.
 
Messages
305
Location
Guwahati
ISP
JioFiber
I can confirm now that IPv6 on jio fibre does work.
The reason this did not work for me before was that I had set the IPv6 firewall rule to disable during my tests on forgot to turn it on.

I have allowed IPv6 in the firewall and the rule is enabled but it is still not reachable from outside. What could be the reason?