What are the default IPs/endpoints for SmartCheck?
We have some IoT SIMs that require an allowlist for traffic.
Thanks!
I did a packet capture on the Cellular WAN while SmartCheck was failing and it’s trying to query DNS via 10.105.16.254 but that’s not a routable address?
I always thought that smartcheck would ping google.com. If would need to query DNS to get the IP to ping google.com with. IPs that end in .254 are always suspiciously a infrastructure device like the IoT network gateway perhaps? 10.105.16.254 is certainly private in that it falls within the CGNAT range.
I suspect your ISP is redirecting DNS queries to their own devices…
Hi, in the screenshot below I noticed this ATT assigned IP on my MAX-BR1 is 10.156.224.59 and InControl Detected IP is 12.153.230.185
I think they do some sort of NAT and it’s pinging via private IP.
For anyone else that may run into this, it tries to ping www.google.com
We had already added google.com to the allowlist, but it specifically needed www.google.com to be added.
1 Like
Yes this is Carrier Grade NAT. There is a specific range designated for this purpose between 100.64.0.0 and 100.127.255.255 so whenever you see an IP in this range you know you are using NAT and can expect inbound traffic to be blocked.