I have a wireguard VPN set up for a friend where they can remotely connect to access frigate and I can remotely connect to fix things when needed. They are considering switching to tmobile buisness as their ISP since spectrum is screwing them on price, tmobile’s minimum is twice as fast as spectrum while still being a lower price, and AT&T can’t be convinced their small business isnt a residential duplex or an apartment.
Tmobile offers the Inseego FX4100 gateway which does have an IP passthru option, so my question becomes will that work to wireguard in with their current router/firewall solution hosting the other end of that and just passing packets through the Inseego, or is that just not possible without tailscale due to CGNAT?
If only one side is behind a NAT then so long as that one initiates the tunnel it should work fine. NAT only really is a problem on the inbound side.
The firewalla is set up to wait for and respond to WireGuard tunnel requests and we like that as it is. We want to keep using that. We just don’t know if T-Mobile will fuck that up.
Right, and if both sides have their public ally routable IPs on their respective firewalls it’ll work. If on gets put behind a NAT of some sort then it would be able to speak outward, but would require specific packet routing inward (port forwarding) to have someone connect in. Stateful sessions will be fine so long as the one inside a NAT is the initiator.