How to Port Forward on Starlink and Bypass CGNAT

Starlink continues to capture imaginations all over the world. The promise of universal internet access is closer than ever, thanks to the high-speed internet that’s beamed by satellites. However, Starlink still comes with some issues that may hamper its adoption across the globe. The biggest problem that internet users might face with Starlink is the use of carrier-grade NAT (CGNAT).

Simply put, your internet connection is not fully open, and won’t be able to do port forwarding thanks to a double NAT connection or your ISP performing CGNAT on your connection.

What is Port Forwarding?

Port forwarding is a networking technique that allows you to open specific ports on a router, redirecting incoming traffic to designated devices or services. Common uses include:

• Hosting websites or gaming servers
• Remote desktop access
• CCTV monitoring

Why is Port Forwarding a problem on the Starlink router?

One of the main reasons Port Forwarding on Starlink can be problematic is that many ISPs use Carrier-Grade NAT (CGNAT) to conserve IP addresses. Your ISP assigns a single IP address to several users, all relying on that IP address.

Forward Starlink Ports

What is CGNAT?

CGNAT stands for Carrier Grade Network Address Translation. Most ISPs, including Starlink, use CGNAT to conserve their IPv4 pool. The IPv4 protocol only supports 4 billion IP addresses. ISPs perform CGNAT to assign a single IP address to multiple users, saving their depleted IP pool.

How to enable Port Forwarding on the Starlink router

Direct port forwarding on the Starlink router is not possible due to CGNAT; however, you can use a third-party router to achieve this. Here’s how:

Step 1: Connect Your Third-Party Router

• Connect the WAN port of your third-party router to the Starlink router.
• Configure the third-party router to obtain an IP address from the Starlink router via DHCP.

Step 2: Access Your Third-Party Router’s Settings

1. Open a web browser and enter your third-party router’s IP address.
2. Log in using the provided credentials.

Step 3: Assign a Static IP to Your Device

1. Identify the device (e.g., gaming console) needing a static IP.
2. In your router settings, find DHCP or LAN settings.
3. Assign a static IP address to that device’s MAC address.

Step 4: Configure Port Forwarding

1. Navigate to the port forwarding or virtual server section of your router’s settings.
2. Create a new rule:
   • Enter a name for the service (e.g., PS5 Gaming).
   • Specify the port number or range.
   • Enter the static IP assigned earlier.
   • Select the appropriate protocol (TCP, UDP, or both).
3. Save changes.

Step 5: Test Port Forwarding

• Attempt to access your application or service from an external network to confirm successful port forwarding.

Bypass CGNAT on Starlink

To make this process easier, use the PureVPN port forwarding add-on. This add-on will allow you to bypass CGNAT and configure port forwarding for your devices. Here’s how it’s done:

• Sign up for PureVPN.
• Login to the PureVPN member area.
• Click the subscription tab.
• Click Configure.
• Apply your desired port settings (scroll below).
• Click Apply settings.

Bypass Starlink CGNAT

How do I know if CGNAT is enabled on Starlink?

You can determine if CGNAT is enabled on your Starlink connection by checking your public IP address. If CGNAT is used, the public IP address assigned to your device will be shared with other Starlink users. You can check your public IP address by visiting a website that displays your IP information, such as whatismyip.com. If your public IP address changes frequently, it indicates that CGNAT is enabled on your Starlink connection.

To determine if your connection is behind CGNAT, follow these steps:

Method 1: Check the Router’s WAN IP Address

1. Open a web browser and enter your router’s IP address (typically 192.168.100.1).
2. Log in using your router’s credentials.
3. Navigate to the “Status” or “Internet” section.
4. Look for the “WAN IP Address.” If it falls within the range of 100.64.0.1 to 100.127.255.254, you are likely behind CGNAT.

Method 2: Compare WAN IP and Public IP Address

1. Follow steps 1 and 2 from Method 1 to find your WAN IP address.
2. Search online for “What is my IP address” to find your public IP.
3. If the WAN IP and public IP are different, you are likely behind CGNAT.

Fix Double NAT with Starlink

You can’t use a public IP address that can easily port forward on Starlink. However, you can resolve the Double NAT issue using a VPN service (like PureVPN) that offers a static and dedicated IP address.

You will have to set up your router to use the dedicated IP address that you use with your VPN. You will need to use this WAN IP address on your router to set up the WAN connection. If done right, you can bypass both the CGNAT restrictions and the Double NAT status.

Frequently Asked Questions

Does Starlink use CGNAT?

Yes, Starlink uses Carrier-Grade Network Address Translation (CGNAT) technology to share a single public IP address among multiple users. This allows the system to conserve public IP addresses, a limited resource, while still providing internet access to many users.

Does your Starlink Router have CGNAT?

It does. This is because Starlink provides CGNAT-enabled routers to assign IP addresses. By doing so, the Starlink router works with other ISPs.

How can I bypass CGNAT?

The simplest way to bypass CGNAT with Starlink is to use a VPN service. By doing so, you use a virtual and dedicated VPN tunnel between your internet-enabled device and a VPN server. You get another ISP address as a result.

Does CGNAT affect online gaming?

Absolutely. Modern online multiplayer games rely on incoming and outgoing connections to host, connect and communicate. CGNAT blocks incoming traffic by default. You must bypass CGNAT for the best online gaming experience, especially when using Starlink.