<p>In discussion with @lenlord it seems that his ISP's router does not perform NAT so that his home router has (dynamically) assigned public IP address.</p>

<p>After reading some forum posts and contacting the ISP I found out that some ISPs (and mine is one of them) do indeed hide households behind their NAT (NAT 1 in picture, so called CG-NAT), but that they can remove this NAT for free on demand.</p>

<p>Remove this NAT on the ISP's router is needed to operate bitcoin node with incoming connections.</p>

CC BY-SA 3.0
2018-01-31T07:53:34.710Z
It is common elsewhere in the world for NAT2 to be only a switch rather than a router in a home setup if it is used at all. It is also just as common there for the customer to have full access to NAT1 which is commonly a wi-fi enabled ADSL/VDSL modem router.
Willtech
CC BY-SA 4.0
2018-07-07T05:13:16.327Z
Further, many can [use Tor](https://bitcoin.stackexchange.com/questions/70069/how-can-i-setup-bitcoin-to-be-anonymous-with-tor) without port forwarding and this will allow also incoming connections when correctly configured.
Willtech
CC BY-SA 3.0
2017-10-30T16:27:08.307Z
2017-10-30T16:27:08.307Z
croraf
<p>Whatever is between your computer and your public IP has to be forwarded.</p>

CC BY-SA 3.0
2017-10-31T21:18:35.983Z
2017-10-31T21:18:35.983Z
Luke Mlsna
<p>Follow up question on <a href="https://bitcoin.stackexchange.com/questions/61546/what-is-the-nat-traversal-technique-used-by-bitcoin">What is the NAT traversal technique used by bitcoin</a>.</p>

<p>The network architecture described here <a href="https://superuser.com/questions/1109859/2-routers-connected-in-series-and-port-forwarding">https://superuser.com/questions/1109859/2-routers-connected-in-series-and-port-forwarding</a> is something that I (probably) have in my home (and probably 99% of other people):</p>

<pre><code>Internet &gt; ISP router (NAT 1) &gt; My home router (NAT 2) &gt; My Node
</code></pre>

<p>So my Node is hidden behind 2 NATs. Therefore I should forward ports on both routers to allow incoming connections to my Node.</p>

<p>But people have no access to NAT 1 and can only port-forward NAT 2, and must probably contact ISP to port-forward NAT 1.</p>

<p>How do people run their nodes with incoming connections enabled when this issue is present?</p>

<p>EDIT: In discussion with lenlord it seems that his ISP's router does not perform NAT and that his home router has (dynamically) assigned public Internet address. Is this the standard configuration ISP's provide for homes.</p>

<p>EDIT2: After contacting the ISP and reading some forum posts I found out that I'm indeed behind their NAT (NAT 1 in picture, so called CG-NAT), but that they can remove it for me for free.</p>

CC BY-SA 3.0
2017-10-30T14:30:30.593Z
is the ISP router installed at your place? You should have access and be able to configure it. Typically, I set the ISP router to operate in bridge mode and just let my router do all the NAT.
rny
CC BY-SA 3.0
2017-10-30T14:37:26.693Z
I have my home router in my home but there should also be a router that ISP controls that many homes are connected to (and operates as NAT, so ISP does not need to have 100 public addresses for 100 homes in my building).
croraf
CC BY-SA 3.0
2017-10-30T14:47:04.807Z
that's the first time i've encountered such an arrangement. I guess you'll have to ring up your ISP then.
rny
<nodes><peers><network>
Should port forwarding for running bitcoin be done also on the ISP's router?
croraf
# Should port forwarding for running bitcoin be done also on the ISP's router?

(Asked by: username_0 on 2017-10-30)

Follow up question on [What is the NAT traversal technique used by bitcoin](https://bitcoin.stackexchange.com/questions/61546/what-is-the-nat-traversal-technique-used-by-bitcoin).

The network architecture described here <https://superuser.com/questions/1109859/2-routers-connected-in-series-and-port-forwarding> is something that I (probably) have in my home (and probably 99% of other people):

```
Internet > ISP router (NAT 1) > My home router (NAT 2) > My Node

```

So my Node is hidden behind 2 NATs. Therefore I should forward ports on both routers to allow incoming connections to my Node.

But people have no access to NAT 1 and can only port-forward NAT 2, and must probably contact ISP to port-forward NAT 1.

How do people run their nodes with incoming connections enabled when this issue is present?

EDIT: In discussion with lenlord it seems that his ISP's router does not perform NAT and that his home router has (dynamically) assigned public Internet address. Is this the standard configuration ISP's provide for homes.

EDIT2: After contacting the ISP and reading some forum posts I found out that I'm indeed behind their NAT (NAT 1 in picture, so called CG-NAT), but that they can remove it for me for free.

**Tags:** nodes, peers, network

> **Comments:**
> **username_1**: is the ISP router installed at your place? You should have access and be able to configure it. Typically, I set the ISP router to operate in bridge mode and just let my router do all the NAT.  
> **username_0**: I have my home router in my home but there should also be a router that ISP controls that many homes are connected to (and operates as NAT, so ISP does not need to have 100 public addresses for 100 homes in my building).  
> **username_1**: that's the first time i've encountered such an arrangement. I guess you'll have to ring up your ISP then.  

---

## 2 answers

### Answer by username_0 on 2017-10-30. Score: 1

In discussion with @lenlord it seems that his ISP's router does not perform NAT so that his home router has (dynamically) assigned public IP address.

After reading some forum posts and contacting the ISP I found out that some ISPs (and mine is one of them) do indeed hide households behind their NAT (NAT 1 in picture, so called CG-NAT), but that they can remove this NAT for free on demand.

Remove this NAT on the ISP's router is needed to operate bitcoin node with incoming connections.

> **Comments:**
> **username_2**: It is common elsewhere in the world for NAT2 to be only a switch rather than a router in a home setup if it is used at all. It is also just as common there for the customer to have full access to NAT1 which is commonly a wi-fi enabled ADSL/VDSL modem router.  
> **username_2**: Further, many can [use Tor](https://bitcoin.stackexchange.com/questions/70069/how-can-i-setup-bitcoin-to-be-anonymous-with-tor) without port forwarding and this will allow also incoming connections when correctly configured.  

---

### Answer by username_3 on 2017-10-31. Score: 1

Whatever is between your computer and your public IP has to be forwarded.


---

