I have a new modem supplied by you fibre and a eero pro 6 router
I’m struggling with multiple Nat not allowing Roon ARC to see my server.
Any ideas ?
I have a new modem supplied by you fibre and a eero pro 6 router
I’m struggling with multiple Nat not allowing Roon ARC to see my server.
Any ideas ?
Try the Tailscale option
Hey @Andrew_Podmore,
You have a few options, and tailscale is certainly one of them! Here’s some additional troubleshooting steps you can run through as well:
Here’s more info on tailscale as well :
Let me know if you have any additional questions along the way!
I’m running a innuos zen mk3 as a Roon core, can’t see how to install tailscale on this server
I see I will have to obtain install and configure a subnet router between my innuos zen and my EERO router, this could be in the form or a raspberry PI or apparently even an old apple TV will work / can be configured.
This is a little bit network engineer / specialist for me so will need to decide if I want to really pursue this in order to use roon ARC.
I expect with these full fibre roll outs going great guns this modem / router / multi nat / firewall will become more of an issue for folks ongoing.
Did not expect to use up many hours and a couple of wasted autumn days chasing this particular ghost. I’m always happy to give it a go but I feel ive wasted enough time now.
If any other bright sparks have suggestions then answers on a postcard - otherwise I would suggest people think twice before going for the you fibre / EERO router solution if you really want relatively easy access to your roon core and remote music availability on roon ARC.
The new internet package had tremendous speed but not ideal for roon ARC access.
You fibre use CG-NAT by default so with this in place, the Tailscale option is the only one available to you.
There is, an alternative, but it involves first requesting a static ip address from You Fibre - I believe this is a chargable option and will cost an additional £5 per month.
Then, and only then, you will be able to set up port forwarding.
There are potentially three ways of doing this.
If the YouFibre router is connected to an ONT on the wall by ethernet, then you can just connect your own router directly to the ONT. You will then be able to use either uPnP or a manual port forwarding rule on the Eero to get ARC working. This will not be possible if you have one of the ONT/Router combined devices that You Fibre sometime install.
If the You Fibre supplied router has a Bridge Mode of operation then you can set this and the proceed to set up port forwarding on the Eero as in case 1 above.
If neither of the above are possible, then you can use manual port forwarding on the You Fibre router to forward TCP connections on the ARC port to the WAN ip address of the EERO router (not the ip address you use to access the Eero WebUI). Then configure the Eero router to forward TCP connections on the ARC port to the ip address Roon Server.
I had a similar problem with a fibre modem and a WiFi router wired to the modem. Fortunately, I was able to disable CGNAT on the provider side by enabling their Dynamic DNS feature. I then configured the modem to pass unrestricted traffic to the MAC address of the router. Modem and router are on different subnets. Only after this was I able to configure Open VPN on the router.
Thanks wade
Thanks Marian
We have instructions for Tailscale with Linux machines in this article. I don’t have any hands on experience with the server machine you are using. Can you tell us a bit more about what’s blocking you from installing tailscale?
Thanks for the info, I will email innous to ask - how and if it’s possible to install tailscale on the server. Best
Why not just use port forwarding? Simple, works fine. Just don’t use the Roon default port
It does not work fine when you ISP is using CG-NAT - which YouFibre do by default.
With CG-NAT in place, port forwarding will never work. @Marian suggested that, with YouFibre, CG-NAT can be avoided by using a customer configuration option. If that is not possible, then the ISP (YouFibre in this case) may give you a public ip address on request. If this is not possible either, then Tailscale (Wireguard or similar VPN solution) is the only remaining option.
To be clear, it wasn’t YouFibre in my case, so I don’t know if that’s possible, but it’s worth inquiring.
I beg to differ. I use spectrum which uses cg-nat and I port forward no problem for ARC. I use my own internal mesh network with port forwarding on and ARC has worked without any issues
Hi @Andrew_Podmore,
Are you still having an issue or can this thread be closed?
The issue is as yet unresolved. Mainly due to a lack of tech communication and support from you fibre, so conjecture and any more suggestions might add to the mix.
The router - an eero, has a useful online portal however - if one selects bridge mode all port forwarding options dissapear, ( as do many other ootions ) and ive had no help yet regards and possible access to the modem. Of course the fibre optic installion invloves a router and a modem, hence double nat. Multiple nat is stopping remote roon access, and port forwarding to try and offer this access to my innuos zen roon core up address is seemingly not possible, roon arc simply can not get past multiple nat, I’ve discounted tailscale due to complexity, and innuos have replied to my email regards tailscale cannot be directly installed like it can on some of the latest roon nucleus servers, so it would invlove installing a remote node as discussed between server and router, it may be that a static IP address provided at cost by you fibre is the answer ?
As has been suggested.
So I’m still battling - if any other non tailscale using roon users have gone with you fibre / or intend to go with you fibre for a new fast fibre optic installation it would be interesting to see how they fare and how this issue develops, I’m sure I’m not the first and won’t be the last …
At least this record of the outstanding unresolved issue ( for me ) can remain available for others to read. For reference
You should be able to disable NAT on the modem, so that the router gets exposed directly to traffic (and make sure nothing connects directly to modem). That would take care of one NAT. Then you only need to worry about cgNAT, if that’s indeed an issue.
It may be I will need to employ a network specialist - yes I could access my old adsl talk talk router and make the correct settings for port forwarding, that was easy, but this is above my pay grade, clearly that’s why im on here looking for help.
My previous message was just a brief overview of the process so far. Its prompted another email to you fibre. I will investigate how I may access the modem, so far ive only accessed the router.
I think ive taken this as far on here as I can so I will ask the moderator to close off the discussion.