Direct answer
A wrong result requires checking inputs, mode, calibration and output separately; a working control path can still be configured for the wrong state. For carrier-grade NAT and public inbound access, first compare router WAN address with an external address and test the service locally.
What this covers
- carrier-grade NAT and public inbound access with this exact failure state
- Diagnosis across router forwarding versus provider CGNAT, IPv6 and service listening state
- Customer-accessible observation, settings and external components
What it does not cover
- ×A displayed manufacturer error code with a different documented meaning
- ×Live electrical, sealed-system, internal battery-cell or gas repair
- ×A claim that every model exposes identical controls
Capture the exact failure state
ReversibleWrite down the selected mode, input conditions and the exact unexpected output. Expected behavior: provide outbound internet while recognizing when no unique public IPv4 is assigned.
Isolate the component boundary
ReversibleCompare router WAN address with an external address and test the service locally. Use a known reference input or manufacturer test and compare the result. Boundary to separate: router forwarding versus provider CGNAT, IPv6 and service listening state.
Correct only the proven cause
ReversibleRequest a public address, use supported IPv6 or a secure relay/VPN design. Correct the setting, calibration or component proven by that comparison.
Verify and stop safely
ReversibleRepeat with the reference and a normal real-world case. Do not expose remote desktop, cameras or admin panels without strong authentication.
Evidence ledger
Sources behind this answer
Visible sources support the visible claims. Home Product Support records the publisher, the fact used and the review date; community reports can suggest an issue but do not become a published fact on their own.
Exact questions
Common follow-ups
What should I check first when carrier-grade NAT and public inbound access has this problem?+
Compare router WAN address with an external address and test the service locally.
Why not factory-reset immediately?+
The useful boundary is router forwarding versus provider CGNAT, IPv6 and service listening state. A reset can erase state without proving which side failed.
When should I stop troubleshooting?+
do not expose remote desktop, cameras or admin panels without strong authentication.
Answer for the exact device and software version shown above.