Double NAT to cellular - Pepwave MAX Transit

Hi,

I have checked other post related to double NAT and even tried changing some setting but still didn’t solve the issue.

I have a Pepwave MAX Transit, MAX-TST-LTEA-W, Firmware 8.1.2 build 5114 with one LTE SIM card, no LAN connection.

Why do I think is a double NAT Issue? The first IPs are all private IPs when I do traceroute, see below.
traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 52 byte packets
1 192.168.50.1 (192.168.50.1) 53.345 ms 3.388 ms 3.246 ms
2 172.26.96.161 (172.26.96.161) 158.264 ms 189.080 ms 199.746 ms
3 172.16.157.164 (172.16.157.164) 171.108 ms
172.16.157.188 (172.16.157.188) 215.483 ms
172.16.157.164 (172.16.157.164) 188.896 ms
4 * * *
5 12.83.180.82 (12.83.180.82) 216.516 ms 337.542 ms 322.772 ms
6 sffca22crs.ip.att.net (12.122.3.70) 242.348 ms 178.541 ms 204.941 ms
7 12.122.163.61 (12.122.163.61) 166.537 ms 199.571 ms 166.672 ms
8 12.255.10.232 (12.255.10.232) 178.892 ms
12.255.10.234 (12.255.10.234) 191.352 ms
12.255.10.230 (12.255.10.230) 269.641 ms
9 * * *
10 dns.google (8.8.8.8) 323.607 ms 192.829 ms 166.186 ms

whereas if I connect to a my phone instead I will get
traceroute 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 52 byte packets
1 172.20.10.1 (172.20.10.1) 4.962 ms 7.950 ms 3.190 ms
2 75.XX.XX.XX
3 10.XX.XX.XXX
… etc

Currently the “routing mode” is set to NAT.

Following other posts I did change the routing mode to “IP Forwarding” which did not work. I have also tried selecting “IP Passthrough”, which did not work either.

I dont compleatly understand the options provided by “IP Forwarding” (i.e. “Apply NAT on Remote PepVPN peers’ outgoing Internet traffic” vs “Use default LAN IP address for internal services traffic”
) nor I knwow if I need to define a static route when configuring “IP Passthrough”.

I have looked for documentation to but no luck… So any help is very much apreciated!

Thanks!

Are you trying to connect to the Pepwave going through a cellular connection? If so,this is completely normal and cellular carriers deploy CGNAT. Here is a relevant thread:

1 Like