ISP wan side shows 192.168.0.x it should be a public address.

[computertechguy]

Client who recently switched to coax internet from DSL now has a vpn issue. The vpn wont setup, I tested the ports and they show closed. VPN worked just fine through DSL. Coax support says modem is in bridged mode, or passthrough mode.

I don't install many dhcp circuits but wouldn't the wan address of the router show a public ip address if it was bridged?

 

[Sky-Knight]

Generally, but there are a few ISPs that issue private addresses.

I find it far more likely your client has another router in the mix, or the cable modem is also a router and you're going to have go figure out how to fix it.

Cable Modems are bridges by default... But if you got one of those unholy combination cable modem / wifi routers the game has been changed.

 

[HCHTech]

Generally, but there are a few ISPs that issue private addresses.

Wow glad I'm don't have to deal with any of those. If that were the case here, though, it surely wouldn't be a /24 address, would it? @computertechguy, what is the subnet mask? If it's 255.255.255.0, @Sky-Knight is correct. The modem is probably a combo box and is either misconfigured or behind another router. You have some detective work to do.

 

[Sky-Knight]

@HCHTech, I know of one WISP in rural NM that hands out 192.168.0.0/24 on one of its segments... so yeah... it does happen. They sell "static" IPs, and "routable" IPs separately, and you have to buy BOTH if you want to serve anything. But even then you don't get the real address, they just forward everything on your public routable to your private static.

I support an Untangle on it, one of Nexgen's oldest and most loyal customers and you don't want to know how many times I've helped them call their ISP out on their own stupidity. It's kind of sad, but I know their Unifi setup better than they do, and I've never touched it.

Too bad I'm not near retirement, running a small WISP in a mountain community sounds like a great way to spend my retirement years. And given my exposure to my competition, it wouldn't take much to kick someone out of the market. Sadly, the large ISPs are sealing up those niche markets day by day... so not really worth it.