Can't get port forwarding to work for Roon ARC

[Bram_van_Dijk]

Roon Server Machine

Roon ROCK on a NUC7i5

Networking Gear & Setup Details

The NUC with Roon ROCK is connected to the ISP-provided modem with a cat6 patchcable.
The ISP-modem is a Genexis Platinum-7840

1. Who is your internet service provider?

Caiway in the Netherlands.

2. Please list the make and model of your modem and router?

The ISP-modem is a Genexis Platinum-7840

3. Do you have any additional network hardware, like additional routers or managed switches?

There is another router, but ROCK is directly plugged into the modem of my ISP.

4. Does your network have any VPNs, proxy servers, or enterprise-grade security?

No, nothing special about my network.

Connected Audio Devices

Is use a raspberryPi-based streamer.

Description of Issue -

What is the exact port forwarding error message you see in the Roon Settings → ARC tab?

The message i get is:
{
“ipv4_connectivity”: {“status”:“NetworkError”,“status_code”:504,“error”:“error: Error: ETIMEDOUT, response code: undefined, body: undefined connected? undefined”},
“external_ip”: {“actual_external_ip”:“62.aaa.bbb.ccc”,“actual_external_ipv6”:“null”,“router_external_ip”:“100.ddd.eee.fff”},
“status”: “status”: MultipleNatFound
,
“natpmp_autoconfig”: {“status”:“NotFound”},
“upnp_autoconfig”: {“server_ip”:“192.168.1.254”,“found_upnp”:true}
}

So the MultipleNatFound suggests my ISP uses CG-NAT. And they did, but after contacting them, they gave me a dynamic IP and they tell me that they removed the CG NAT from my connection. So they claim that they have done their part, but Roon doesn’t agree.

I installed tailscale and that does the job. But I still would prefer if port forwarding works, because:

1. tailscale eats a lot of battery on my phone.
2. it is too complicated to let my wife and children make use of RoonARC this way.

My modem gives these numbers:
Verbinding

Actief

IPv4-adres

100.87.73.aaa

Netmask

255.255.192.bbb

Gateway

100.87.64.ccc

DNS

62.45.70.ddd

62.45.71.eee

Calling my ISP they claim that the IPv4 is a dynamic public ip even though it begins with 100.

[Wade_Oram]

If your router is being issued the 100.87.73.aaa ip address, it is likely that it is still on a CG-NAT connection since ip address from 100.64.0.0 to 100.127.255.255 are reserved for CG-NAT.

Before anything else, it may be worth rebooting your router just in case it is holding on to a DHCP lease from before your ISP made the configuration change.

If, after that, you still appear to have a MultipleNatFound issue and you still appear to have a CG-NAT WAN side ip address, then you will need to contact them again.

If your WAN side ip address changes such that it does not fall in the 100.64.00 to 100.127.255.255 range, then it is likely (but not guaranteed) that you have been given a public ip address which will allow port forwarding.

You can always tell if you have CG-NAT by comparing your router’s WAN side ip address with the ip address reported by whatismyipaddress.com or similar websites that report the ipaddress that you appear to be visiting from.

Once, you are sure that your connection is not through CG-NAT, if you continue to get the MultipleNatFound error, then it is likely that you have a second router (e.g. a misconfigured Mesh WifI node).

[noris]

Hi @Bram_van_Dijk ,

Welcome to the forum. Since your ROCK is plugged directly into the modem, this is a CGNAT situation. I would suggest trying the steps @Wade_Oram mentioned, let us know how this goes.

[Bram_van_Dijk]

Thanks. I checked with whatismyipaddress and no surprises there, it is not the 100.etc so there is still some form of cg nat. I’ll have to contact my ISP again, but they will then tell me they switched off cg nat for me, so I’m not sure how far this will bring me.

[connor]

Hi @Bram_van_Dijk,

Unfortunately, there’s little we can do to your provider still assigns an IP address in the shared address space. If this provider supports dual-stack, another possibility would be to configure end-to-end IPv6 to bypass NAT entirely. Otherwise, you’re at the mercy of Caiway and their willingness to provide a dedicated external IPv4 address.

[Suedkiez (Just a fellow user like you)]

Or use the Tailscale solution but you would have to reinstall the ROCK with UEFI