I’ve got Telus PureFibre 1.5/.95 service in North Vancouver.
The Nokia fiber device is plugged straight into an Eero. The Eero gets what looks like a public IP address (22.214.171.124). All the devices on the internal network are 192.168.7.x
To avoid any port blocking, I’ve got the Eero set to forward port 65001 -> 22 on my Mac for ssh.
If I’m on another device on the local network, I can ssh to email@example.com:65001 successfully. However, as soon as switch to another connection (via a VPN, or via a Bell LTE connection) the connection reliably fails.
My first question is: Is my apparently public IP address actually behind some sort of grotesque CGNAT?
Any ideas on what’s wrong / how to fix?
That could be the Eero doing an internal loopback to simulate external access. Typically you can't access the external IP from inside the local network. However it does confirm the port forwarding is working on the loopback. Not sure if that translates to actual external access.
BTW, there is no point checking ports that don't have any services running. All open ports will report as closed if there are no services to answer on that port.