topic Re: Static IP address for remote access in Internet Accounts & Plans

Static IP address for remote access

Ell — Thu, 02 Feb 2023 23:58:02 GMT

Hi AGL neighbourhood / other AGL customers

Before signing up with AGL a sales rep said Static IP addresses were available for 7.50p/m. I changed to AGL and asked for a static IP, tech support said yes, will be added to bill and take effect within the "next few hours", didn't happen. I asked again 4 days later, "within 24 hours". 3 days after second call, still nothing. I need the static IP address for a remotely accessible photo/media server.

My question is, am I being lead on? Do you even support static IP addresses?

P.S please just disable the "live chat" it is not "live" in the slightest

Re: Static IP address for remote access

David_AGL — Thu, 02 Feb 2023 23:28:22 GMT

Hi @Ell ,

We certainly do support static IP addresses, but as to what the hold up has been in this instance, I have no idea. It sounds frustrating.

Rather than use the live chat or wait on the phones, we do have a Messaging service you can access via the AGL app or by logging in to your My Account page. Response times vary by issue and the wait time is currently around 24 hours, but you might find it more convenient than the other options, and the conversation history will be saved, so there's an ongoing record of your repeated contact with support about this issue.

Re: Static IP address for remote access

Ell — Thu, 02 Feb 2023 23:48:41 GMT

Thanks for the tip, however I have tried the messaging service within the AGL app but after 27 hours I received the old restart your router or call the 13 number for support. I did jump on the phone this morning after my original post and the technician escalated the issue for me (whether that means anything I will soon find out). Anyway, cheers for the response, it was nice getting a response from an AGL rep that isn't copy paste. Thanks David

Re: Static IP address for remote access

Nuella — Sun, 29 Oct 2023 03:20:05 GMT

I have requested for a static IP address since friday. And it still not working. They said they already upgraded my plan to have static IP address but until now it is not working.

Re: Static IP address for remote access

David_AGL — Thu, 02 Nov 2023 02:37:57 GMT

Hi @Nuella , when you say it's not working, what do you mean? Are you not seeing a static IP, or are you not able to connect at all?

Re: Static IP address for remote access

NeilC — Fri, 03 Nov 2023 05:29:56 GMT

Hi,

why waste $7.50 a month when you can set up your router to use Dynamic DNS.

Check that your router supports Dynamic DNS (most do).

https://www.noip.com/ to create the account.

Then enter the account details into your router.

NoIP will send a message every month if you do not take up a paid account, otherwise it will $US1.99 a month

Re: Static IP address for remote access

willuzn — Sat, 04 Nov 2023 13:04:18 GMT

Replying here because AGL tech support doesn't have a clue and frankly neither do many people posting here.

Firstly, some important information. AGL uses CGNAT (Carrier Grade Network Address Translation). To put it in simple terms, imagine you share a house with 4 other people. As far as the world is concerned, all 5 of you have the same address and when mail comes to your house it is up to someone to sort it to make sure that the right mail gets to the right person. CGNAT is effectively the same thing your internet address (IP) is shared among tens if not hundreds of AGL internet subscribers and AGL has a sorting machine (router) which sorts internet traffic so that it reaches the right place. Now imagine mail comes just addressed to the house, there is no way to know who it should go to and the router isn't going to let everyone see it (imagine it had important details in there).

This means that no amount of dynamic dns, port forwarding or firewall rules on the users end will ever get outside traffic into your home network. You need AGL to turn off CGNAT - but don't mention this they won't have a clue what you are talking about. Instead you need to ask for a static IP - this isn't the same thing but AGL charges $7.50 for this service. When you ask for a static IP, tech support will assume you are running a business and try to get you on a business plan. No, I'm not running a business, there are many services today that need outside traffic to be able to come into the home e.g. google home, security cameras, etc.

You don't need to believe me, go into your router and if you look at the "supposed" address that AGL provides you. It will be in the 10.X.X.X private IP pool - this is akin to your internet address being "Unit 5"; that's great but Unit 5 of what address?

Here are some tips when talking to tech support:

1. Don't mention CGNAT - they have no clue what you are talking about.

2. Ask for a static IP.

3. Tell them that you are not running a business (otherwise you will pay costly business internet rates).

Now, once you get your static IP, AGL tech support still has no idea how their product works.

Normally, your static IP is configured from your internet providers end using a protocol known as DHCP. In basic terms, you home router goes "Hello AGL, I'm John Smith and I need an address" and AGL responds "Okay John Smith, I see you have a static IP, your address is 123.456.789.000".

However, for whatever reason this is not how it works with AGL. Once your static IP gets provisioned (you'll either get a text or an email), your internet will go down and you won't have a clue why. Calling up tech support will be fruitless the only thing they know how to do is to turn off your static IP (which will give you your internet back).

Basically, you need to manually put your static IP address into your home router (good luck with that if you aren't using an AGL provided device they can't help you with instructions) - this is akin to the conversation going "Hello AGL, I'm John Smith and I know my address is 123.456.789.000". You will also need to manually configure your DNS servers in your router.

If you get this far, you have probably spent about 4 hours over 2 days over the telephone with tech support like I did. Unfortunately for me, there's some kind of incompatibility between my router and this bizarre way that AGL is set up. It works for around 15 minutes and then I need to restart my router for it to work for another 15 minutes. It's frustrating, their tech support has no clue about basic internet networking concepts and if your anything like me you will leave AGL internet 4 days after you signed up with them.

Re: Static IP address for remote access

NeilC — Sat, 18 Nov 2023 04:42:42 GMT

@willuzn

DHCP stands for Dynamic Host Connection Protocol.

This means that you send out a DHCP request and the host at the other ends sends back your DHCP Address and your DNS entries (normally 2).

This data is only valid for the length of time that it is available for after that time the address expires and you need to renew your DHCP ADDRESS and DNS ADRESSES AGAIN.

Now you can RECONFIGURE the DNS SERVER to respond to the DHCP REQUEST with the details of a STATIC IP ADDRESS and the Domains DNS Server Addresses, however AGL's Supplier may not do this even though its standard practice because if they try and configure the DNS server to use a duplicate IP number it will tell the operator configuring the DHCP server of the issue.

Now the reason that Service providers provide a BRAND and TYPE of BRAND router is so that their help desk operators can quickly respond to your queries regarding set-up. They also assume that if you are bringing your own router is that you have a router that you know how to setup. For instance I use FritzBox and can easily log in and change its settings.

However behind that I have a second router that blocks unwanted traffic into my home network.

On average I have been having around 50 attempts a day by hackers trying to get into my Fritzbox every day, I have one IP address that has tried 42 times today alone.

Re: Static IP address for remote access

lawleo — Tue, 02 Jan 2024 06:09:24 GMT

very similar experience. I wish I read your message earlier before switching to AGL..

Re: Static IP address for remote access

Salonpas — Mon, 26 Feb 2024 02:19:16 GMT

Regarding to this CGNAT issues, I just had this issue successfully solved via Live Chat with AGL support team. I have the same trouble when switch to AGL NBN then my CCTV and NAS server stop working over internet when I was outside, because DDNS service setup in my router can only get the WAN IPv4 from AGL Private Local IPv4 address via their CGNAT will look like 10.15.xx.xxx while the Global IPv4 address is 203.xxx.xxx.xxx which impossible to direct to my NAS server and CCTV. What I tried via the Live Chat is to asked for supervisor or someone can understand what are CGNAT and Global IP address when the current support team have no clue about that. They then transfer me to another support team named Glenn. I explained again the situation then he only asked me “so what you need is the Public IP address, right?”, I said “Yes” then after like 15 mins he responded “I have just assigned. Please power cycle your modem and NBN box. Anything else I can assist with today?” Then he left the chat not even waiting for me to power cycle my modem. I had to power cycle twice in 10 mins time then surprisingly I got the normal Global IPv4 address from the WAN IP in my router and my NAS & CCTV back to live 😱🥳

So maybe I have a lucky day or AGL is slowly upgrading to get rid of their CGNAT due to so many complains about it or something else I don’t know but the result after 3 hours via Live Chat is great that keeping me staying with AGL NBN for now. At least I don’t need to pay for Static IP or weeks waiting for this stupid CGNAT issue 😅

Good luck guys 🤗🤗🤗

Re: Static IP address for remote access

lawleo — Mon, 26 Feb 2024 06:26:34 GMT

I can finally got my public IP. This time Mohammed help me resolve the problem very quickly. Thank you @Salonpas for your tips.

Re: Static IP address for remote access

andy1966 — Sun, 22 Sep 2024 10:07:50 GMT

Did you mean static IP address rather than public IP address? Every network has a public IP address.

Re: Static IP address for remote access

Sheena_AGL — Tue, 24 Sep 2024 22:30:51 GMT

Hi @andy1966 Sometimes a public IP can resolve the issue as well, we try to offer a public IP as getting a static IP can cost more.
But a Static IP will resolve the issue if the public IP doesn't work.

Thank you, Sheena
AGL Telecommunications

Re: Static IP address for remote access

andy1966 — Tue, 24 Sep 2024 23:21:47 GMT

Hi Sheena,

Since dynamic and static IP addresses are both public IP addresses, and that every computer connected to the Internet has either one or the other, what kind of public IP address are you referring to (that you say AGL offers)?

Andy

Re: Static IP address for remote access

lawleo — Thu, 26 Sep 2024 08:41:40 GMT

AGL give me a class C IP(s) which is 10.x.x.x, so I can't vpn to my home network from outside. I need class B IP (either static or dynamic IP) to do that.

Re: Static IP address for remote access

Sheena_AGL — Thu, 26 Sep 2024 23:19:26 GMT

Hi @andy1966 @lawleo
The Public IP is also known as dynamic IP, however we have to make changes from our end to be able to enable the public IP (Dynamic IP).
Static IP will be different to a Public IP as the static IP will start with 10.x.x.x for the IP, the public IP will start with 20.x.x.x.x
Thank you, Sheena
AGL Telecommunications

Re: Static IP address for remote access

europlus — Thu, 10 Apr 2025 02:36:18 GMT

This is an important point re: static vs public IPs.

IP addresses in the 10.x.x.x CGNAT/private range can absolutely technically be static or dynamic.

IP address in a public range like the 20.x.x.x one mentioned can absolutely technically be static or dynamic.

For easiest external access, that means you want a static, publicly routable, IP address in the 20.x.x.x range (or whatever range AGL is on in the future). But you’ll have to do router port forwarding (and perhaps other configuration) to allow access to “internal” services/devices.

Alternatively, if you don’t need public (i.e. devices you don’t control) access (i.e. you’re not running a mail server, or a public Minecraft server), but just want to access, say, your own media server or file server when remote, you can use solutions like WireGuard/Tailscale or ZeroTier (all available free for personal use) to create your own VPN.

These set up a discrete network of devices accessible to each other over another set of IP addresses (e.g. Tailscale uses 100.x.x.x) allowing you to directly connect between devices, even if one is on a publicly routable IP address network, while others are on the AGL 10.x.x.x dynamic private range (exactly my setup, I use Tailscale).

They have additional benefits.

Because only your own devices can see each other, you can avoid port forwarding rules on your router exposing ports to the wider Internet where that’s not necessary/advisable (port 22, anyone?)
Many Tailscale devices (I haven’t tried with WireGuard or ZeroTier) can act as an “exit node” for others through the VPN, i.e. basically what most people use commercial VPNs for – your local traffic seems to originate from the exit node’s network, and return traffic goes back to the exit node’s network, and the exit node forwards it to the remote device
You don’t have to worry about dynamic DNS (DDNS) for dynamic external network addresses, and you don’t have to worry about private addresses on individual devices/routers (my Tailscale traffic goes: computer ⇄ internal NAT on my router with DHCP reservation IP ⇄ external/CG NAT on AGL routers with dynamic IP ⇄ ☁️Internet☁️ ⇄ router on other network with publicly routable static IP address ⇄ internal NAT with DHCP (reserved and not) and static) ⇄ computer/server, but it feels like the computer and server could be next to each other on the same physical network
You can access non-Tailscale devices on other physical networks using their local IP address by having a Tailscale device “advertise subnet routes” – i.e. it acts as a router between the local network and the remote network. This allows me to print to my printer on another network using the same IP-based configuration I would use if I were physically co-located with the printer.

Note: Bonjour/mDNS does not work over Tailscale, so you need to address devices by IP address (local or Tailscale) or Tailscale MagicDNS hostname.

I chose Tailscale in the end as its configuration on all platforms is easier than what I’ve seen in a trial of ZeroTier, and what I read on the website of WireGuard (Tailscale is built on WireGuard). Anything I’ve said I do in Tailscale may be achievable with the other solutions.

I have Linux, macOS, iPadOS, iOS, tvOS and Home Assistant devices (16 in total, on 7 separate networks [plus mobile data]) all happily talking to each other over Tailscale, have reduced my port-forwarding setup dramatically, limited some services in their config only to the Tailscale subnet (Webmin on my Linux servers, for example), use an exit node on my “base” network to ensure certain streaming service/s don’t think I’m sharing my account with others when I have extended stays away from home (also useful for holiday homes, I guess), and have better functionality and security overall to boot (yes, I’m a fan).

Anyway, just my $0.02 worth!

Sean

PS I tried to include lots of links, but although they’re available in the editor, they aren’t allowed by policy on this site. You’ll have to google them.

Re: Static IP address for remote access

Nigel1500 — Fri, 28 Nov 2025 03:49:42 GMT

I asked for a Static IP address on Friday 21 November 2025 ... and again on Wednesday 26 November ... and again today. 3 times on the Chat. Today I was on the chat for over 30 minutes before any human acknowledged my presence, so I called on the support line. Why can't this just happen? Why must AGL delay and delay and delay?

Further, when enquiring about signing up I asked specifically about static IP addresses and port forwarding. I was told they were supported. I've burned about 6 hours of my time stuffing around with everything else, having trusted the sales rep. Now I've discovered AGL uses CGNAT. If I had known this before, I would have never signed up.

When is my Static IP address coming?

Re: Static IP address for remote access

europlus — Sat, 29 Nov 2025 06:03:42 GMT

I’m sorry to hear of the trouble you're having, I hope AGL gets their act together.

I would certainly stick to just phone, rather than chat.

Have you asked for a non-CGNAT static and public IP address?

I currently have one in the 203.n.n.n range (ranges may differ, I suspect).

My bill lists “AGL Static IP” for $7.50.

If you only want to access to/from your own devices, and all those can run a VPN system like TailScale or Zerotier, and you have the interest, you could just use those and save the money.

I’ve just used ZeroTier to access my strata’s modem used for the new solar install, and it’s on a Telstra SIM that gives it a 10.n.n.n CGNAT address, and that’s working fine without any static address or port forwarding.

Hope that’s of use.

Sean

Re: Static IP address for remote access

uccoffee — Mon, 01 Dec 2025 01:24:31 GMT

why stay with AGL nbn anyway ? was there a promotion that I am missing out ?