Dynamic public ipv4 address with 10 Gbit/s XGS-PON Anschluss

    • Hello,

    would it be possible to get a dynamic ipv4 address for IB3 on 10 Gbit/s XGS-PON Anschluss?

    If so,

    • how to set it in IB3 or
    • how to apply for it

    The public ipv4 address on my IB3 is rarely/almost never changed.

    Thank you very much.

    SG

    Show original language (German)

    Public IPv4 is actually independent of XGS-PON, but is a fundamental property of the connection/contract.

    If you already had a public IPv4 before switching to XGS-PON, it should actually have been retained.

    Have you ever tried whether you can switch on DynDNS on the IB3?

    If not, call 0800 800 800 and ask them to change your Anschluss from CGNAT to public IPv4.

    Show original language (German)

    Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom

    @Werner

    If I understand @Joffiotte29 correctly, it means that he wants to change the public IPv4 address more often.

    I can understand this from a security perspective; in my opinion, it would be ideal if the WAN IPv4 address changed every 24 hours or at least every 5 days.

    Show original language (German)

    Thanks @Werner for the quick answer and also @hed.

    As @hed says, I already have a public ipv4 address on IB3, which is unfortunately static/almost never changed. As @hed mentioned, for security reasons I would like to prefer a dynamic one.

    After rebooting IB3 it always gets the same ipv4 address and apparently it wasn’t changed automatically by default.

    You might have to call Swisscom support because I can’t find a function/setting option in the IB3.

    Thanks

    Show original language (German)

    @Joffiotte29 wrote:

    …

    You might have to call Swisscom support because I can’t find a function/setting option in the IB3.

    …

    @Joffiotte29

    You can save yourself the effort because this is simply not provided for in the system. You can request a change if, for example, your IP address has ended up on a blacklist through no fault of your own, but unfortunately you cannot request an automatic request from support.

    Show original language (German)

    @Thaujauzeug75

    If the IP address For example, if you end up on a blacklist through no fault of your own, you can request an address change. In this case, however, it is about an automatic, regular change of address at fixed intervals and unfortunately this is not possible with Swisscom.

    Show original language (German)

    @hed

    The question was whether it was possible to get a dynamic public IP, which we all have. It just barely changes. But you can (or could) force it using:

    • Switch off IB3 for a longer period of time (time interval needs to be tested more closely)
    • Ask support about it (how often you can do this - I have no idea)
    • etc.

    Whether this is practical depends on how often you want to change the IP. 😉

    Show original language (German)

    @Joffiotte29

    a rapid change (a few days interval) has no relevant influence on safety. The automatic scanbots capture something like this within minutes and “they” then know about your IP again.

    In addition, IPv4 addresses are rare and this automated change would probably trigger a chain reaction because this new IP for you would first have to be obtained from someone else, who would then also need a different one, etc.

    Basically, you can assume that an IB with the standard settings meets common security requirements and is considered secure.

    If you don’t want to rely on it, you can use a firewall and connect it to a network connection on the IB (in the DMZ, but that would then be access to the IB, or rather not, if it’s just about security, that’s all you have to do Define the desired port forwardings on the IB manually) and then take everything relevant into the network.

    Now you simply have to ensure that this firewall itself does not become a security risk due to incorrect configurations.

    Show original language (German)