starlink port forwarding

How to Port Forward on Starlink and Bypass CGNAT

7 Mins Read

PureVPNPort ForwardingHow to Port Forward on Starlink and Bypass CGNAT

Port Forwarding on CGNAT gateways is not as easy as it seems to be. However, in this blog post, we’ll explain how CGNAT-enabled routers, like Starlink, can cause a problem in Port Forwarding and how you can get around this ISP-driven firewall without hassle.

Starlink port forwarding is not a hassle anymore!

What is Port Forwarding?

If you want to host a server, enable remote access, or enhance your online gaming experience, try forwarding ports of your router. Port forwarding is a networking method that guides traffic to a particular device, for example, a gaming console or your PC, within a private network. 

It allows you to direct incoming data from servers to your device. For example, the port for hosting a web is 80, and if you want a stable internet connection and low latency, you will port forward port 80 by configuring your router administration page.

One of the main reasons Port Forwarding can be a problem on Starlink is that many ISPs use Carrier-Grade NAT (CGNAT) to conserve IP addresses. Your ISP assigns a single IP address to multiple customers, and those customers rely on the same IP address.

The Starlink router and app do not support direct configuration for static IP assignments or port forwarding due to the use of CGNAT. However, users can employ third-party routers that support these features to set up static IPs and manage port forwarding effectively

Step #1: Log Into Your Router

Open the app and log in using the credentials provided with your router or that you set up during the initial router configuration.

Step #2: Navigate to Settings

Look for a settings or configuration option, often represented by a gear icon. Locate the section where you can manage LAN or network settings.

Step #3: Assign a Static IP

Choose the device from the list of connected devices for which you need to set a static IP, and change the IP settings from dynamic (DHCP) to static. Once done, Input the static IP address you want to assign.

Step #4: Go to the Port Forwarding Section 

Navigate to advanced settings and find the Port Forwarding option. Do not confuse this with Port Triggering as both serve different purposes.

Step #5: Set a Port Forwarding Rule

Just do the following:

  • Enter a name for the service or application, such as PS5 Gaming.
  • Specify the port number or range that needs to be forwarded.
  • Enter the static IP address assigned earlier to the device that will receive the traffic.
  • Select the appropriate protocol, whether it is TCP, UDP, or both.
  • Save to apply changes.

Step #6: Test Port Forwarding 

To verify that your ports are forwarded correctly, use an online tool designed to check ports. If the test indicates that your ports are closed, it is worth double-checking your settings.

Starlink offers two IPv4 configurations: “default” and “public.” The default setting uses Carrier-Grade NAT (CGNAT) with private addresses, while NAT translates between private and public IPs. All Starlink routers support IPv6, assigning IPv6 addresses to compatible devices.

For Priority and Mobile Priority plans, a public IPv4 option is available. This IP is accessible from anywhere on the internet and is reserved even when the system is off, though moving or software updates may change it. Standard and Mobile plans do not offer public IPv4. Starlink routers don’t support port forwarding or firewall rules for IPv4 or IPv6.

Each Starlink system gets one IPv4 address and a /56 IPv6 prefix. The default CGNAT setup blocks inbound traffic, so customers needing it should use third-party routers or consider the public IPv4 option. Outbound traffic for TCP/25 and TCP/445 is blocked for security reasons.

As Starlink grows, users may see updates like routable public IPs and changes to CGNAT setups.

What is CGNAT?

Most ISPs use CGNAT (Carrier-Grade Network Address Translation) to prevent bandwidth issues and IP exhaustion. ISPs also perform CGNAT to assign a single IP address to multiple users. But, the only caveat is that you can’t open ports on a router behind CGNAT. 

Starlink’s use of CGNAT presents specific challenges for its users, such as:

  • Port Forwarding Limitations: Sharing a single public IP address among multiple users under CGNAT complicates port forwarding efforts. This makes it difficult to remotely access devices or set up home servers, as direct access to individual devices on your network is obstructed.
  • Online Gaming Complications: CGNAT can negatively impact online gaming experiences by introducing connectivity issues and increased latency. Games that require direct connections to other players may suffer from high ping times and frequent disconnections.
  • Difficulty Hosting Servers: Hosting web, file, or game servers becomes impossible under CGNAT because it does not support incoming connections. As such, external users are unable to initiate contact with servers located behind CGNAT, isolating your services from direct internet access.
  • VoIP Service Disruptions: CGNAT can interfere with VoIP services, leading to connection delays and potential packet loss. As VoIP services depend heavily on direct IP communications, the presence of CGNAT can severely degrade both the quality and reliability of VoIP calls.

If you want to port forward on Starlink without CGNAT limitations, using PureVPN is an effective solution. Here is a quick guide to help you get started:

  1. Log into the PureVPN Member Area.
  2. Click the Subscriptions tab.
  3. Select Configure next to Port Forwarding.
  4. Choose Enable specific ports and input the ports you need to forward.
  5. Click Apply Settings to confirm your configuration.
  6. Connect to a Port Forwarding-supported server in the PureVPN app, and you are all set!

To determine if your starlink connection is under CGNAT, you can use any of the following methods:

Method 1: Check the Router’s WAN IP Address

  1. Open a web browser and enter your router’s IP address into the address bar.
  2. Enter your username and password to access the dashboard.
  3. Navigate to the status screen on the dashboard.
  4. Find the section labeled as ‘WAN IP’ or a similar term, which might vary based on the router model.
  5. Examine the IP address assigned to the router’s WAN interface.
  6. If this IP address falls within the range of 100.64.0.1 to 100.127.255.254, your connection is likely behind CGNAT. This IP range is designated for CGNAT usage.

Method 2: Compare WAN IP and Public IP Address

  1. Follow the steps from Method 1 to find and note down the WAN IP address from your router’s dashboard.
  2. Open a new tab in your web browser
  3. Search for “what is my IP address” and press Enter.
  4. Remember the public IP address displayed by the search results.
  5. If the WAN IP and the public IP address are different, it indicates that your ISP is using CGNAT.
  6. If they match, your connection likely has a direct public IP address, meaning it is not behind CGNAT.

Related Guide: How to Check if your ISPs perform CGNAT

Commonly, Starlink routers block sending and receiving email ports as they intend to send spam and cause security issues. Below are the ports blocked by Starlink:

  • SMTP Port 25
  • POP3 Port 110
  • SMTP over SSL Port 465
  • SMTP submission Port 587
  • IMAP Port 143

Can I Improve My Gaming After Bypassing CGNAT? 

Yes, your gaming can improve by overcoming CGNAT. If you are thinking, how? It is because CGNAT can slow your traffic flow by increasing steps for delivering it through the internet. 

It also makes it difficult for other game devices to connect to your server. By bypassing CGNAT, you can enhance your gaming connectivity and experience a stable internet connection for better traffic flow.

Host a server with a Dedicated IP and Port Forwarding add-on

You need a dedicated IP with a Port Forwarding add-on if you wish to host a game server, get your IP whitelisted, or want your friends to connect to your at-home devices. A Dedicated IP allows you to create servers and allow external IP addresses to connect to your server without any IP mapping issues.

Why pick PureVPN?  

With PureVPN’s effective service, you can open up ports with a few simple clicks. Got issues with CGNAT? No problem! PureVPN’s dedicated IP and Port Forwarding add-on bundle provide a one-click solution to bypass CGNAT. 

  • With about 6,000 dedicated servers worldwide in more than 78+ locations, PureVPN ensures that you are securely connected. 
  • With features like Split tunneling, IP masking, and Dedicated IP addresses, you can stay hidden on the internet.
  • Round-the-clock customer support and a 31-day money-back guarantee.

Frequently Asked Questions

Can we change Starlink IP address?

No. You can not change a Starlink IP address. However, you can use a VPN to hide your your IP address, split tunneling software, or a server with a dedicated IP address.  

What is Starlink IP address?

As Starlink uses CGNAT so you do have an individual IP address. Instead you share one address with several other users.

What are the common issues with Starlink Port Forwarding?

The main reasons Port Forwarding can be a problem on Starlink is that many ISPs use Carrier-Grade NAT (CGNAT) to conserve IP addresses. Your ISP assigns a single IP address to multiple customers, and those customers rely on the same IP address. 

Does Starlink block port forwarding?

Starlink does not support traditional port forwarding due to the use of CGNAT. However, users can work around this limitation by using VPN services that offer port forwarding capabilities, such as PureVPN.

Does Starlink use CGNAT?

Yes, Starlink uses CGNAT to efficiently manage its IP address allocation, sharing public IP addresses among multiple users. This method helps Starlink conserve the limited number of IPv4 addresses available, which is crucial given its wide user base. 

How do I bypass CGNAT on Starlink?

PureVPN’s Dedicated IP and Port Forwarding add-on provides a static IP address and the ability to configure port forwarding. This is effective in getting around CGNAT configurations like those used by Starlink, as it allows for specific ports to be forwarded to and from the internet, facilitating connections that require direct access such as hosting services or gaming servers.

Does Starlink use IPV4 or IPv6?

Starlink uses both IPv4 and IPv6 addresses. It provides IPv4 addresses under a CGNAT policy and offers IPv6 addresses to network clients if their router supports IPv6. However, full IPv6 support is still in beta testing and available only in certain areas with compatible third-party routers, as the Starlink router itself does not support IPv6.

What is the CGNAT range for Starlink?

Starlink typically employs the CGNAT IP address range 100.64.0.0/10 for its default IPv4 configuration. This is a common practice for managing the limited availability of IPv4 addresses, allowing multiple Starlink clients to share a single public IP address for connecting to the internet.

What is the best Starlink CGNAT workaround?

To bypass Starlink’s CGNAT limitations, using a port forwarding VPN like PureVPN is recommended for enabling incoming connections. Alternatively, subscribing to Starlink’s public IP option or setting up Dynamic DNS on a third-party router are effective methods to maintain consistent network access.

Why is Starlink CGNAT port forwarding not working with a VPN?

If Starlink CGNAT port forwarding isn’t working with a VPN, common reasons include incompatible VPN settings, firewall restrictions blocking required ports, or incorrect router configurations. To resolve this, adjust the VPN settings or consult with your VPN provider to confirm its compatibility with Starlink’s network setup.

Can you use 3rd party routers with Starlink?

Yes, you can use a third-party router with Starlink by switching the Starlink router to “bypass mode.” This mode disables its Wi-Fi functions, allowing you to connect your own router via Ethernet. Many users do this to enable port forwarding, a feature not supported by the default Starlink router. However, this may limit some features in the Starlink app and router compatibility is not guaranteed by Starlink.

author

Sameed

date

January 17, 2025

time

1 week ago

6-Feet Tall Tech writer.

Have Your Say!!

Join 3 million+ users to embrace internet freedom

Signup for PureVPN to get complete online security and privacy with a hidden IP address and encrypted internet traffic.