What this page covers
Compare router WAN status with the public address shown by a trusted service, without publishing either value.
Step-by-step workflow
- Read the router WAN address and connection type privately.
- Check whether the provider or router identifies CGNAT/shared addressing.
- Test local service access separately from Internet access.
- Prefer provider-supported public IPv4, IPv6 firewall policy or VPN/relay options.
Decision table
| Check | What it tells you | Safe next action |
|---|---|---|
| WAN and public address differ | An upstream translation layer may exist | Ask the provider about the service |
| Local service works | The application and LAN may be fine | Do not open extra ports blindly |
| IPv6 is available | Inbound model may differ | Use an explicit IPv6 firewall policy |
Limits and verification
Do not expose a service merely to test it. Public IPv4 availability and IPv6 behavior are provider-specific.
Official sources
- IETF RFC 7857 — Updates to NAT terminology (NAT terminology)
- CISA — Securing Home Network Devices (home-network safety guidance)
Related Router Portal guides
Router security guide · Router login troubleshooting
Keep in mind: Firmware, operating-system menus, ISP policies and regional radio rules can change. Confirm the current official source and exact device before applying a setting.
Our networking steps are lab-tested against standard RFC 1918 private networking protocols across Windows 11 (24H2), macOS Sequoia (15.1), iOS 18, and Android 15. We verify physical device labels and firmware release documentation before publishing gateway instructions. Router Portal is strictly read-only and never requests, intercepts, or logs router passwords.