Reliance JioFiber: Port Forwarding NOT SUPPORTED

The JioFiber router web interface presents option for port forwarding however it does not work in practice.
The page accepts and saves all the configuration changes you do. Yet you won't be able to connect to the port from outside.

The router also has a DMZ and UPnP options and those do not work either.
Customer care is unable to help ("We have no information about this at the moment")

The IP address as seen from outside is different than what the router shows as its WAN IP. So the router is not directly exposed to the internet. It is behind a NAT/Firewall.

The IP the router sees is 100.XX.XX.XX
IP as seen by sites like whatismyip.com is 49.XX.XX.XX

As far as I know 100.XX.XX.XX is a public IP but trying to access that IP from outside does not work either. So the router is sitting behind a firewall.

This is a major limitation if you want to run any kind of server. So developers and gamers beware.
If you want to make your DVR internet accessible, you can't.

With JioFi (dongle) you could use internet accessible IPv6 address to eliminate need of port forwarding but the Jio Fiber router only allocates local IPv6 addresses. Even if IPv6 worked like JioFi, it would not solve problem for IPv4 connections. So there is no alternative at the moment. You can use a VPN, but it slows you down and has other limitations.

I was planning to discontinue my old ISP but due to this limitation, I might have to discontinue JioFiber instead.

 

[keithcardozo]

Thanks Ankush,
On my router the ipv6 is pingable till the jio rourter , i can access the router webpage on ipv6 only via the jio network. If i use airtel which also has ipv6 the router page is not accessible.
Secondly there is a dhcp v6 on this router and my devices then get these addresses which are not accessible outside the jio network.
If you mean creating a firewall rule on the jio router to allow all traffic ?
As what i see is the default is to accept all connections on ipv6 .
Can you share a screen shot of the the fire wall rule you created?
Also from which ISP have you tested this with?
Thanks
Keith

 

[sanke3]

The Static IP that Jio gives is mapped at their backend and is not configured on the jio router - Bridge bode will never work as by doing so , Jio looses the ability to have control. please read my review , I have explained in detail.

Excellent writeup buddy. The whole time reading your review, I kept thinking “Wow Jio FTTH is actually trash”. For my office, I need 10 port forwards so Jio is out of question. MTNL FTTH here in Mumbai is still on Dynamic IPv4 and IPv6 plus apart from few random p0rn sites blocked, everything else works. If some website is blocked, I have this urgency to unblock it even if I won’t ever visit that site.

 

[ankushmalik1120]

Thanks Ankush,
On my router the ipv6 is pingable till the jio rourter , i can access the router webpage on ipv6 only via the jio network. If i use airtel which also has ipv6 the router page is not accessible.
Secondly there is a dhcp v6 on this router and my devices then get these addresses which are not accessible outside the jio network.
If you mean creating a firewall rule on the jio router to allow all traffic ?
As what i see is the default is to accept all connections on ipv6 .
Can you share a screen shot of the the fire wall rule you created?
Also from which ISP have you tested this with?
Thanks
Keith

Go to router page. Then security > firewall > ipv6 rules and add rule to allow all incoming connections.

To test I pinged my ipv6 using IPv6 Ping | IPv6 Now
And checked on IPv6 test - IPv6/4 connectivity and speed test which shows reachable.

 

[keithcardozo]

Thanks Sanke3,
I also mentioned in my write up about zerotier
It gives me the same flexibility and i can connect to my entire home network from outside jio network without any port forwards and all my over 50 devices including rasberrypie, IOT devices like arduino etc.
Plus it’s end to end encrypted.
The initial setup maybe a bit steep for some but its really worth the effort.
Just curious are you having cameras that you need 10 forwards?

 

[keithcardozo]

Go to router page. Then security > firewall > ipv6 rules and add rule to allow all incoming connections.

To test I pinged my ipv6 using IPv6 Ping | IPv6 Now
And checked on IPv6 test - IPv6/4 connectivity and speed test which shows reachable.

Thanks,
Did you test the ping ipv6 from a different isp? Like airtel or mtnl ?
Pings work fine from jio network but Its not a proper test.
Host a webpage using eitheg IIS OR apache
and test only from outside Jio network.

PS: I did create a firewall rule as well like your screen shot .
While it all works on jio network , it fails to work using airtel or mtnl
I can host ipv6 sites on airtel and connect to them via eithet jio or mtnl and those work fine.

If you can test the same from a different ISP then we can conclude something.
Thanks

 

[sanke3]

Thanks Sanke3,
I also mentioned in my write up about zerotier
It gives me the same flexibility and i can connect to my entire home network from outside jio network without any port forwards and all my over 50 devices including rasberrypie, IOT devices like arduino etc.
Plus it’s end to end encrypted.
The initial setup maybe a bit steep for some but its really worth the effort.
Just curious are you having cameras that you need 10 forwards?

No. I have just 1 NVR connected to 16 cameras. But I need access to all my office PCs. Remote Desktop is free but needs port forwards.

 

---

[keithcardozo]

Go to router page. Then security > firewall > ipv6 rules and add rule to allow all incoming connections.

To test I pinged my ipv6 using IPv6 Ping | IPv6 Now
And checked on IPv6 test - IPv6/4 connectivity and speed test which shows reachable.

Just to add Ankush , the approach you used for testing IPv6 iam assuming is from the same JIO fibre connection correct ?
If that is the case then that not a correct test.
The only way to test is outside the JIO network from a different ISP - either MTNL or Airtel whcih have ipv6
Also doing a ping test only does not 100% guarantee that one can browse a website., as ICMP protocols are sometimes allowed but the http and other protocols are blocked.

If you have a 4g service either Airtel , MTNL ( I know these have IPV6) then it will be easy to test from outside the JIO Network)

Thanks again

 

[keithcardozo]

No. I have just 1 NVR connected to 16 cameras. But I need access to all my office PCs. Remote Desktop is free but needs port forwards.

Then the solution of using Zerotier will be the most suited for you as its free for 100 devices
You just need to install the Zerotier client on all the PC's thats it
and from you home pc as well the zerotier client needs to be installed. (Just follow the steps on thier website to join the private network and to authorize all your devices on their web interface- this is a one time setup)
You will then see all your office PCs on a private lP address and can connect to all via RDP
Try it - its free and without the hassle of port forwarding- and you get a direct connection without the data being relayed.

 

[GKannan]

No. I have just 1 NVR connected to 16 cameras. But I need access to all my office PCs. Remote Desktop is free but needs port forwards.

Port forwarding RDP is a bad security practice. Checkout Remote computer access over the internet using RDP, what could go wrong??

I would suggest a VPN or RDP gateway like Apache Gaucamole for accessing PCs remotely.

 

[Smh]

Just to add Ankush , the approach you used for testing IPv6 iam assuming is from the same JIO fibre connection correct ?
If that is the case then that not a correct test.
The only way to test is outside the JIO network from a different ISP - either MTNL or Airtel whcih have ipv6
Also doing a ping test only does not 100% guarantee that one can browse a website., as ICMP protocols are sometimes allowed but the http and other protocols are blocked.

If you have a 4g service either Airtel , MTNL ( I know these have IPV6) then it will be easy to test from outside the JIO Network)

Thanks again

Hmm he tested ping and reachability from the linked site servers.