starlink port forwarding

How to Port Forward on Starlink and Bypass CGNAT

6 Mins Read

PUREVPNPort ForwardingHow to Port Forward on Starlink and Bypass CGNAT

Port Forwarding on CGNAT gateways is not as easy as it seems to be. However, in this blog post, we’ll explain how CGNAT-enabled routers, like Starlink, can cause a problem in Port Forwarding and how you can get around this ISP-driven firewall without hassle.

Starlink port forwarding is not a hassle anymore!

What is Port Forwarding?

If you want to host a server, enable remote access, or enhance your online gaming experience, try forwarding ports of your router. Port forwarding is a networking method that guides traffic to a particular device, for example, a gaming console or your PC, within a private network. 

It allows you to direct incoming data from servers to your device. For example, the port for hosting a web is 80, and if you want a stable internet connection and low latency, you will port forward port 80 by configuring your router administration page.

One of the main reasons Port Forwarding can be a problem on Starlink is that many ISPs use Carrier-Grade NAT (CGNAT) to conserve IP addresses. Your ISP assigns a single IP address to multiple customers, and those customers rely on the same IP address.

You can check whether your Starlink router uses CGNAT or not by looking at your WAN IP address or through the Starlink application.

  1. To check your WAN IP, go to your router’s setup page on the browser.
  2. Search 192.168.100.1 or open cmd to check your router’s IP address by typing ipconfig.
  3. Enter your router’s login details.
  4. Next, locate the Network section.
  5. Your WAN IP will be provided in the information.
  6. Now, you have to check if your IP is 100.64.0.0 to 100.127.255.255.
  7. If yes, then your Starlink router is CGNAT enabled.

The Starlink router and app do not support direct configuration for static IP assignments or port forwarding due to the use of CGNAT. However, users can employ third-party routers that support these features to set up static IPs and manage port forwarding effectively

Step #1: Log Into Your Router

Open the app and log in using the credentials provided with your router or that you set up during the initial router configuration.

Step #2: Navigate to Settings

Look for a settings or configuration option, often represented by a gear icon. Locate the section where you can manage LAN or network settings.

Step #3: Assign a Static IP

Choose the device from the list of connected devices for which you need to set a static IP, and change the IP settings from dynamic (DHCP) to static. Once done, Input the static IP address you want to assign.

Step #4: Go to the Port Forwarding Section 

Navigate to advanced settings and find the Port Forwarding option. Do not confuse this with Port Triggering as both serve different purposes.

Step #5: Set a Port Forwarding Rule

Just do the following:

  • Enter a name for the service or application, such as PS5 Gaming.
  • Specify the port number or range that needs to be forwarded.
  • Enter the static IP address assigned earlier to the device that will receive the traffic.
  • Select the appropriate protocol, whether it is TCP, UDP, or both.
  • Save to apply changes.

Step #6: Test Port Forwarding 

To verify that your ports are forwarded correctly, use an online tool designed to check ports. If the test indicates that your ports are closed, it is worth double-checking your settings.

Starlink offers two IPv4 configurations: “default” and “public.” The default setting uses Carrier-Grade NAT (CGNAT) with private addresses, while NAT translates between private and public IPs. All Starlink routers support IPv6, assigning IPv6 addresses to compatible devices.

For Priority and Mobile Priority plans, a public IPv4 option is available. This IP is accessible from anywhere on the internet and is reserved even when the system is off, though moving or software updates may change it. Standard and Mobile plans do not offer public IPv4. Starlink routers don’t support port forwarding or firewall rules for IPv4 or IPv6.

Each Starlink system gets one IPv4 address and a /56 IPv6 prefix. The default CGNAT setup blocks inbound traffic, so customers needing it should use third-party routers or consider the public IPv4 option. Outbound traffic for TCP/25 and TCP/445 is blocked for security reasons.

As Starlink grows, users may see updates like routable public IPs and changes to CGNAT setups.

What is CGNAT?

Most ISPs use CGNAT (Carrier-Grade Network Address Translation) to prevent bandwidth issues and IP exhaustion. ISPs also perform CGNAT to assign a single IP address to multiple users. But, the only caveat is that you can’t open ports on a router behind CGNAT. 

How can PureVPN help get around CGNAT?

You can use the PureVPN port forwarding add-on to make this process easier. This add-on will bypass CGNAT and allow you to set up port forwarding for your devices. Here’s how:

  1. Login to the PureVPN member area.
  2. Click the subscription tab.
  3. Click Configure.
  4. Apply your desired port settings.
  5. Click Apply settings.

To determine if your starlink connection is under CGNAT, you can use any of the following methods:

Method 1: Check the Router’s WAN IP Address

  1. Open a web browser and enter your router’s IP address into the address bar.
  2. Enter your username and password to access the dashboard.
  3. Navigate to the status screen on the dashboard.
  4. Find the section labeled as ‘WAN IP’ or a similar term, which might vary based on the router model.
  5. Examine the IP address assigned to the router’s WAN interface.
  6. If this IP address falls within the range of 100.64.0.1 to 100.127.255.254, your connection is likely behind CGNAT. This IP range is designated for CGNAT usage.

Method 2: Compare WAN IP and Public IP Address

  1. Follow the steps from Method 1 to find and note down the WAN IP address from your router’s dashboard.
  2. Open a new tab in your web browser
  3. Search for “what is my IP address” and press Enter.
  4. Remember the public IP address displayed by the search results.
  5. If the WAN IP and the public IP address are different, it indicates that your ISP is using CGNAT.
  6. If they match, your connection likely has a direct public IP address, meaning it is not behind CGNAT.

Related Guide: How to Check if your ISPs perform CGNAT

Commonly, Starlink routers block sending and receiving email ports as they intend to send spam and cause security issues. Below are the ports blocked by Starlink:

  • SMTP Port 25
  • POP3 Port 110
  • SMTP over SSL Port 465
  • SMTP submission Port 587
  • IMAP Port 143

Can I Improve My Gaming After Bypassing CGNAT? 

Yes, your gaming can improve by overcoming CGNAT. If you are thinking, how? It is because CGNAT can slow your traffic flow by increasing steps for delivering it through the internet. 

It also makes it difficult for other game devices to connect to your server. By bypassing CGNAT, you can enhance your gaming connectivity and experience a stable internet connection for better traffic flow.

Host a server with a Dedicated IP and Port Forwarding add-on

You need a dedicated IP with a Port Forwarding add-on if you wish to host a game server, get your IP whitelisted, or want your friends to connect to your at-home devices. A Dedicated IP allows you to create servers and allow external IP addresses to connect to your server without any IP mapping issues.

Why pick PureVPN?  

With PureVPN’s effective service, you can open up ports with a few simple clicks. Got issues with CGNAT? No problem! PureVPN’s dedicated IP and Port Forwarding add-on bundle provide a one-click solution to bypass CGNAT. 

  • With about 6,000 dedicated servers worldwide in more than 78+ locations, PureVPN ensures that you are securely connected. 
  • With features like Split tunneling, IP masking, and Dedicated IP addresses, you can stay hidden on the internet.
  • Round-the-clock customer support and a 31-day money-back guarantee.

Frequently Asked Questions

Can we change Starlink IP address?

No. You can not change a Starlink IP address. However, you can use a VPN to hide your your IP address, split tunneling software, or a server with a dedicated IP address.

What is Starlink IP address?

As Starlink uses CGNAT so you do have an individual IP address. Instead you share one address with several other users.

What are the common issues with Starlink Port Forwarding?

The main reasons Port Forwarding can be a problem on Starlink is that many ISPs use Carrier-Grade NAT (CGNAT) to conserve IP addresses. Your ISP assigns a single IP address to multiple customers, and those customers rely on the same IP address.

Does Starlink block port forwarding?

Starlink does not support traditional port forwarding due to the use of CGNAT. However, users can work around this limitation by using VPN services that offer port forwarding capabilities, such as PureVPN.

Does Starlink use CGNAT? 

Yes, Starlink uses CGNAT to efficiently manage its IP address allocation, sharing public IP addresses among multiple users. This method helps Starlink conserve the limited number of IPv4 addresses available, which is crucial given its wide user base.

How do I bypass CGNAT on Starlink?

PureVPN’s Dedicated IP and Port Forwarding add-on provides a static IP address and the ability to configure port forwarding. This is effective in getting around CGNAT configurations like those used by Starlink, as it allows for specific ports to be forwarded to and from the internet, facilitating connections that require direct access such as hosting services or gaming servers.

Does Starlink use IPV4 or IPv6?

Starlink uses both IPv4 and IPv6 addresses. It provides IPv4 addresses under a CGNAT policy and offers IPv6 addresses to network clients if their router supports IPv6. However, full IPv6 support is still in beta testing and available only in certain areas with compatible third-party routers, as the Starlink router itself does not support IPv6.

author

Sameed Ajax

date

September 25, 2024

time

2 weeks ago

6-Feet Tall Tech writer.

Have Your Say!!

Join 3 million+ users to embrace internet freedom

Signup for PureVPN to get complete online security and privacy with a hidden IP address and encrypted internet traffic.