Check if you're behind CGNAT (if yes, host a Tailscale exit node):
- Compare the IP shown on this page with the WAN IP in your main router's admin page. If they are
different, you are behind CGNAT.
To access your router's admin page, enter your default gateway IP address into a web browser.
To find your default gateway (router) IP address:
Windows:
- Type "control panel" into the Windows search box and hit Enter.
- Select Network, then Internet, and click on Network and Sharing Center.
- Click on Ethernet, then Details. Finally, find the router's IP address listed next to the IPv4 Default Gateway.
- Copy-paste this IP into your web browser to access the router's admin page, then locate the WAN/Internet IP (NOT the LAN IP)
MacOS:
- Click the Apple icon and select System Settings.
- Select Network, then choose WiFi.
- Select your network connection and click Details.
- Click the TCP/IP tab to find your gateway IP address listed next to Router.
- Copy-paste this IP into your web browser to access the router's admin page, then locate the WAN/Internet IP (NOT the LAN IP)
If you have a Netgear Router:
- Try typing www.routerlogin.net into your web browser to access the router's admin page.
CGNAT (Carrier-Grade NAT) is used by ISPs to share a single public IP among multiple users. If you're behind CGNAT, your VPN server will not work properly because it cannot receive inbound traffic.