I have just switch ISP from Aussie Broadband to Superloop here in South Australia. ARC worked near perfectly with ABB once I had opted out of CGNAT.
Superloop also use CGNAT but have IPv6 implemented, before I call them up and opt out of CGNAT I wanted to try to set up ARC using IPv6. I created a firewall rule on my ASUS RT-AX88U for ARC using the IPv6 address on the Roon ARC settings page, this gave me "Ready. Roon ARC can securely access your Roon Server" on the ARC settings page. But ARC will not work on my iPhone 12 Pro, on the ARC Connection Status page I have a red light against Roon Server and it tells me I have a Port Forwarding Issue.
Describe your network setup
NBN Fibre To The Premises => ASUS RT-AX88U Router => Ethernet to my ROCK Server.
IPv6 firewall pinhole without an IPv4 port forwarding solution as well will only work if the device running ARC is also on an IPv6 network.
If you.went around to a friend’s house and they provided you with WiFi supporting IPv6, you would probably find that ARC worked fine.
I don’t know what the situation is in Australia but here in the UK the mobile providers do not provide IPv6. Nor do the vast majority of public WiFi providers.
Consequently, IPv6 only Roon Server access is of little use in most situations.
If you want ARC to work when the remote device is connected via a IPv4 only network, then you will have either opt out of CG-NAT or set up Tailscale .
However, you don’t need to open the port for ‘BOTH’ UDP and TCP… Only TCP is required for ARC.
The fact that you know IPv4 is not working because of CG-NAT but Roon is reporting ‘ready’ in the Roon ARC settings page tells you that the IPv6 firewall is correctly, or at least adequately, configured.
The IPv6 config looks ok but yeah, you might be running into the issue @Wade_Oram mentioned. Tailscale is probably a good choice if they can’t fix the issue from the ISP side. I’ll also consult with the team to see if we have any additional info for this specific ISP.