Tata Sky -- CGNAT? DHCP or PPPoE?

JB701

Амогус Сус
Messages
1,723
Location
Delhi
ISP
TriplePlay/Excitel
In order to do a VPN tunnel, you'll need a port open (not possible on cgnat ipv4) . Maybe you could create a IPv6 tunnel but that'll need both networks to support IPv6.

ZT Creates a direct connection after a minute.
 
Messages
8
Location
Mumbai
ISP
Tata Sky Broadband
I have done some more research into this and it seems that we can create a Peer-2-Peer VPN connection as long as one of the sites has a public IP address.
So the client can be behind the CGNAT but can still call the Server which has a public WAN IP available.

However if both the sites are behind CGNAT, then you have to look at another option like Zerotier or a VPS serving OpenVPN server etc.
 
Messages
455
Location
Lucknow
ISP
BSNL
I have done some more research into this and it seems that we can create a Peer-2-Peer VPN connection as long as one of the sites has a public IP address.
So the client can be behind the CGNAT but can still call the Server which has a public WAN IP available.

However if both the sites are behind CGNAT, then you have to look at another option like Zerotier or a VPS serving OpenVPN server etc.
Yup, as long as one end has a public ip you are good. Simply setup the vpn client behind CGNAT and point it to your public WAN address.
It is fairly easy to setup with pfsense wizards (which i use), should be straightforward with opnsense too.
There is no need to go with VPS or zero tier.
 
Messages
8
Location
Mumbai
ISP
Tata Sky Broadband
There's TailScale as well, which is a bit more refined and has a nicer UI (compared to ZeroTier) Uses Wireguard under the hoods.
Had never heard of TailScale -- will check them out if only for curiosity.

I will be using OpenVPN to connect my parent's house to mine for now. Once kernel space wireguard modules are more stable in FreeBSD, I might switch over to a Wireguard VPN in a couple of years.