IPv4 and IPv6 addresses in FTTH tmobile and orange, CG-NAT, ONT, PPPoE sessions

marcinfx585 8553 37

Treść została przetłumaczona

Zobacz oryginalną wersję tematu

Reply | New topic

#31 21387701 11 Jan 2025 11:48

IC_Current IC_Current

Network and Internet specialist

» | Helpful post? (0)

Post #31
21387701 11 Jan 2025 11:48

soulafein83 wrote:
set up IPv6 with me
.
On this neutered pseudo-blowout of an internet connection;
soulafein83 wrote:
from T-Mobile
.
???

Besides, Matter and the rest work on IPv4 too, after all

Helpful post? Buy me a coffee.
ADVERTISEMENT
#32 21387992 11 Jan 2025 14:57

soulafein83 soulafein83

Level 9

» | Helpful post? (0)

Post #32
21387992 11 Jan 2025 14:57

IC_Current wrote:

soulafein83 wrote:
set up IPv6 with me
.
On this neutered pseudo-blowout of an internet connection;
soulafein83 wrote:
from T-Mobile
.
???

Besides, Matter and the rest, after all, also work on IPv4

Hey. This is not an answer to the question. I just wanted to know how exactly to set up IPv6 and how to check if I have IPv6. I need IPv6 for Matter because that is the requirement of the Home Assistant plugin.
So, if I may ask, please write in simple words if it can be done.
ADVERTISEMENT
#33 21388018 11 Jan 2025 15:17

Erbit Erbit

Level 38

» | Helpful post? (0)

Post #33
21388018 11 Jan 2025 15:17

lfldp wrote:
They get some paid installation orders and it is up to them to perform this service.
.
More precisely, the operator outsources such an installation to an external company, i.e. they are not employees of the principal (full-time). They only get paid if they complete the order. If he "forgets" to take the ONT, he will say anything to complete the order without the ONT. That's the secret.
#34 21388235 11 Jan 2025 17:22

IC_Current IC_Current

Network and Internet specialist

» | Helpful post? (0)

Post #34
21388235 11 Jan 2025 17:22

soulafein83 wrote:
I just wanted to know how exactly to set up IPv6 and how to check if I have IPv6.
.
You got the answer. The link from TM is a hollow and neuter for viewing pjs.
There is NO IPv6. There is NO public IPv4.

At most you can set up a VPN to some IPv6 tunnel broker.

Helpful post? Buy me a coffee.
ADVERTISEMENT
#35 21388248 11 Jan 2025 17:27

soulafein83 soulafein83

Level 9

» | Helpful post? (0)

Post #35
21388248 11 Jan 2025 17:27

IC_Current wrote:

soulafein83 wrote:
I just wanted to know how exactly to set up IPv6 and how to check that I have IPv6.
.
You got the answer. The link from TM is a hollow and neuter for viewing pjs.
There is NO IPv6. There is NO public IPv4.

Ok thanks. That being said - my contract with T-Mobile ends in a month. I have the option to change my internet provider to INEA - do you happen to know if changing to this provider will change anything for me on the above topic (I want to stay on my Deco mesh)?

Second thing - according to the specs Matter needs IPv6 local to work properly, although it also supports IPv4.
In the MatterHub (addon to Home Assistants) documentation it states:
"Therefore it is strongly recommended to activate IPv6 for your local area network. If your current network relies on IPv4, it should be no problem to run both in parallel. Some routers already have that activated by default.
In addition, the matter protocol relies on a stable communication over TCP and UDP on port 5353 for mDNS and the configured Matter-port of your bridge. Make sure that there is no firewall or VLAN setup in place blocking the communication between the bridge and your controller."

Maybe I'm misunderstanding something, but I have not been able to connect this MatterHub to e.g. Google Home, hence my question about IPv6.
#36 21388265 11 Jan 2025 17:34

IC_Current IC_Current

Network and Internet specialist

» | Helpful post? (0)

Post #36
21388265 11 Jan 2025 17:34

I don't know about Inea. Not my regions. Public IPv6 and IPv4 is available in Orange in full dualstack (you can fasten two PPPoE sessions simultaneously) on their equipment. Only at start-up it is necessary to embrace ONT with the technician.

Helpful post? Buy me a coffee.
ADVERTISEMENT
#37 21388267 11 Jan 2025 17:35

soulafein83 soulafein83

Level 9

» | Helpful post? (0)

Post #37
21388267 11 Jan 2025 17:35

IC_Current wrote:
I don't know about Inea. Not my regions. Public IPv6 and IPv4 are available in Orange in full dualstack (you can zip two PPPoE sessions simultaneously) on their equipment. Only at start-up it is necessary to embrace ONT with the technician.

I have written one more question above - I promise last .
#38 21388268 11 Jan 2025 17:38

IC_Current IC_Current

Network and Internet specialist

» | Helpful post? (0)

Post #38
21388268 11 Jan 2025 17:38

I am not familiar with this Matter or what principle it communicates with. If the system components on the LAN are to communicate via IPv6, then it is sufficient to use ULC addresses. However, if the communication is to leave the local network, then you already need global addresses from the operator.

Helpful post? Buy me a coffee.
Create an account, log in and become active in a forum and ads will not appear. You will receive points by participating in discussions.
Join this discussion.

Install the application

Reply | New topic

Report a violation of the law

Topic summary

T-Mobile FTTH connections on Orange infrastructure typically provide IPv4 addresses behind CG-NAT, similar to LTE networks, with public IPv4 addresses available optionally, sometimes for a fee or upon request. Customers receive PPPoE credentials (username and password) at contract signing, enabling configuration of sessions for IPv4 and IPv6. The ONT device is generally provided by T-Mobile technicians if requested in advance; refusal to install without ONT is possible, but may depend on region and technician discretion. Orange does not officially provide ONTs to individual customers unless specifically arranged. IPv6 is native and public on these networks, with no NAT applied to IPv6 addresses, though firewall rules may restrict inbound traffic. Orange uses NAT64 and CLAT for IPv6 on LTE/5G mobile networks. Dual PPPoE sessions can be configured to obtain separate public IPv4 and IPv6 addresses, but hardware acceleration for PPPoE/NAT may be lacking on some routers, impacting throughput. Public IPv4 addresses are scarce and often come with static assignment. Operators pre-configure ONT/router devices, limiting local technician configuration. Geolocation of IP addresses depends on geoIP databases but generally aligns with Orange Polska or TP-Net ASNs. Some users report vulnerabilities in operator-supplied devices and prefer to use their own ONT and routers. IPv6 support is important for modern protocols like Matter, with local IPv6 sufficient for LAN communication but global IPv6 needed for external access. Alternative providers like INEA may offer ONT and public IP configurations differing from T-Mobile and Orange. Overall, the network setup involves CG-NAT for IPv4 by default, native public IPv6, PPPoE authentication, and operator-controlled ONT provisioning with regional variability.
Summary generated by the language model.

FAQ

TL;DR: Dual PPPoE cuts IPv4 throughput to 40 % before ramp-up, “public IPv4 is free if you ask” [Elektroda, IC_Current, #20713591; kashmiri, #20945505]. T-Mobile FTTH ships CG-NAT; Orange FTTH offers /64–/48 IPv6 plus DS-Lite.

Why it matters: Selecting the right session type or hardware request saves speed, public reachability and future upgrade pain.

Quick Facts

• T-Mobile default address: private IPv4 behind CG-NAT; no IPv6 [IC_Current, #20713591].
• Orange PPPoE / ipv6 session: /64–/48 IPv6 + DS-Lite IPv4 [IC_Current, #20713591].
• Public IPv4 surcharge: 0–≈10 PLN month, static when issued [IC_Current, #20713591; kashmiri, #20945505].
• External ONT: must be requested before hand-over; refusal rate varies by region [Adam-T, #21011239; liver21, #21042755].
• Two concurrent sessions can drop initial speed to 40 % and recover to ~80 % later [IC_Current, #20713591].

1. Does T-Mobile FTTH give me a public IP by default?

No. The supplied router receives a private 10.x/100.x address and sits behind carrier-grade NAT (CG-NAT). IPv6 is disabled. Outbound traffic shares a public address with many users [marcinfx585, #20713360; IC_Current, #20713591].

2. Can I obtain a public IPv4 from T-Mobile and what will it cost?

Yes. Call or write and quote that “net friends got it”; consultants can assign one static public IPv4. Users reported zero fee, while earlier tests mentioned ~10 PLN per month [IC_Current, #20713591; kashmiri, #20945505].

3. What addressing model does Orange FTTH provide?

Choose the PPPoE username suffix. 1) Add “/ipv6” to receive a /64 or /48 IPv6 prefix plus DS-Lite IPv4 via AFTR. 2) Omit the suffix to receive one native public IPv4 only, no IPv6 [IC_Current, #20713591].

4. How do I run dual PPPoE sessions on Orange for full Dual-Stack?

Start PPPoE session A with login ending “/ipv6”. 2. Open session B with the same login but without the suffix. 3. Verify both routes. Note: initial IPv4 throughput may drop to 40 % and ramp to ~700 Mbps on 1 Gbps lines [IC_Current, #20713591].

5. Why does speed fall with two sessions?

Hardware off-load often disables when routers handle dual PPPoE plus NAT, forcing CPU routing. “I don’t know whether it’s hardware limits or hub config” [IC_Current, #20713591]. Users see 40 % starting rate and partial recovery; high-end gear mitigates the issue.

6. How can I make the technician leave an external ONT?

Tell the installer in the confirmation call that the hand-over will be signed only if an independent ONT is supplied. Refuse the protocol if he arrives without one; another crew must then return with ONT, free of charge [liver21, #21042755]. Edge-case: some regions deny ONT, citing policy [Adam-T, #21011239].

7. Where do I find my T-Mobile PPPoE credentials?

They appear in the contract PDF and can be printed in-store if you decline email. Login follows 48998xxxxxxxx; the password is a 10-character mixed-case string [marcinfx585, #20746677].

8. How secure is CG-NAT compared with my own firewall?

CG-NAT hides unsolicited inbound IPv4, yet NAT itself is not a firewall. “NAT does not analyse the status of a TCP connection” [IC_Current, #20750400]. Spoofed packets to an existing mapping can still slip through; always enable a real, stateful firewall.

9. Does Orange mobile (LTE/5G) really use NAT64 for IPv6?

Orange hands out public IPv6 to every device; IPv4 reaches the internet via NAT64/CLAT inside IPv6. No NAT applies to the native IPv6 stream [IC_Current, #20737378; RIPE presentation, 2020].

10. How do I check whether my link has IPv6?

Browse to test-ipv6.com and review the score. If only IPv4 shows, your provider or router lacks native IPv6 [“Test-IPv6.com”].

11. How often does my CG-NAT IPv4 change and can I renew it?

Renew the PPPoE session; the address usually changes immediately. Automatic lease rotations vary from hours to days, depending on BRAS pools [marcinfx585, #20713720].

12. What geolocation problems can happen with DS-Lite or CG-NAT?

Geo-IP databases may place shared addresses in wrong cities. Orange prefixes report ASN “TP-Net”, but city-level accuracy depends on database updates [IC_Current, #20752425]. Streaming services might mis-localize content; request database correction if that occurs.

13. Is Matter over IPv4 sufficient or do I need IPv6?

Local Matter uses mDNS on UDP 5353. IPv6 simplifies multicast discovery, yet IPv4 works if the mesh allows broadcast and no VLAN blocks exist [MatterHub docs]. For external control you still need global reachability or a cloud relay.

14. What failure can occur if PPPoE hardware off-load is missing?

Low-cost ‘soap-box’ routers fall to CPU-only processing, capping gigabit lines to ≈400 Mbps; enabling off-load restores near-line-rate but often conflicts with dual sessions [IC_Current, #20713591].