Static IP Activation Process

[sannidhyz]

I want to get Static IP, because I have some self-hosted services that I want to safely expose to the internet. However, I have a couple of concerns before I apply for it.
Currently, I'm using the XZ000-G3 V1 as the ONT and dial PPPoE from my TP-Link Archer C6 V2. Internet access is important as my sister have long hours of meetings daily, so I need the transition to Static IP to be without any downtime. Will it be seamless, or I'll have no internet access for days until my request is successfully processed?
Should I mention to the Airtel Customer Care that I use my own ONT and Router, so they just need to provide me the static IP details and I'll configure the WAN config myself and I don't need any technician visit? Or, do I reintroduce the Nokia G-2425G-A in my network setup for the time being, and after they TR069 the WAN config for static IP, I copy them to my router? WAN Settings and even basic config like DNS and DHCP are locked out in that crap, so I guess the technician won't be visiting?

Right now, port forwarding works only on some higher ports like 8000, 9000, 9001, etc. and all lower ports are blocked as well as common ports like 80, 443, 853, 8080, 8443 are blocked. These ports don't work even in my TP-Link routers, so that must mean it's blocked from the ISP side itself. I expect static IP does have these ports configurable, so the user can decide if the router firewall should allow certain ports or not, without calling customer care. Yes, it's basic expectations from static IP, but it's Indian ISPs we're talking about, so I want to confirm that beforehand.

Lastly, about 2 years ago, when I requested static IP directly from the Airtel engineer in my locality, he gave me the mail id of a certain person, probably a backend engineer, but he never responded after multiple mails and I gave up. How do I request for Static IP now? And, in the future if I ever feel that it's causing me issues, can I revert back or cancel it?

 

[IfranAli]

@Rickysin Show your OMCI OLT output and VLAN output.

 

[hariselio]

@sannidhyz Ok i was not aware that you already tried the new VLAN. Actually myself in ALCL and was in bridge mode before i started using G3 v2, ODI SFP. Again this was couple of years before and still using ODI SFP. So far no issues.

 

[Rickysin]

well, last time when i asked local engineer he said its ALCL (4 years back), Cannot check which olt is currently present in my area.

as per the recent posts, as my setup is working so i might have Huawei one as north india is mostly huawei and Nokia OLT's.

 

[Rickysin]

apologies if i created any confusion

 

[tr1k0N4]

If you have a G7 working with 100 VLAN, then certainly a non-ALCL OLT, brdr‍

 

[IfranAli]

@Rickysin Just FYI, It was Huawei, as ALCL has no official support on G7 at all. VLAN 100 and 660 working on G7 + Internet working is definitely a Huawei OLT, and not ALCL. Also, local engineers will not know this, only O&M Ground Fiber Team/Tower Guys knows this information.

 

[sannidhyz]

@MrGordon no, like for remotely accessing internal services that are crucial, I always used Tailscale, that's been part of my setup for almost 3 years, and even now I would continue using Tailscale for that.

But, for exposing services that are widely used by my family members, friends and relatives, it's convenient to have a Static IP, although I have to be responsible for securing access to the services ofc.

Since, I requested for Static IP, a few years back, when they would ignore my mails and never responded, I gave up and used Cloudflare Tunnels since a long time. Now, that everyone is reporting success in getting a Static IP for themselves, I thought it's a good time to finish some unfinished business with them.

Cuz, it's not feasible that my parents will have to connect to Tailscale or Cloudflare Client (for private networks), just to access Vaultwarden to fill in the password field for login, or to open Immich to reminisce some memories

 

[sannidhyz]

@tr1k0N4 @IfranAli so, G3v1 would start working, if I annoy the Airtel peeps to disable bridge mode and setup route mode? They were already sweating their nerves to setup Static IP and gave up, idk what excuse should I give this time .

And, if disabling bridge mode doesn't save the G3's life, I'll have to again ask them to enable it.

 

[MrGordon]

@sannidhyz IIRC, you don't necessarily need any client to access something via the cloudflare tunnel. You could have a public endpoint which just proxies to your private endpoint through the tunnel. They handle the security/access aspect for you like putting in an auth layer which you would anyway need even if you use a static IP address.

I have an app setup which needs public access (client less) and it works beautifully. For stuff that needs to be private, I prefer tailscale/ native wireguard tunnels.

So to me static IP address has lost its appeal.

 

[IfranAli]

@sannidhyz Thing is, your G3v1 was detatching your LAN, as soon as PON was established. It pertains to a config, which even idk what, fking up your configuration process. Better to keep it at route mode for a month or 2, and see if G3v1 works or not.
Else, you can buy a DG-GR6011 from indiamart, which works like VSOL OR a Netlink V2801SG equivalent.