<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>#2</p>
<p>It is most likely blocked in the rogers router. You can see that
normally by monitoring the Internet traffic before the firewall
and after it.</p>
<p>By the way, the user himself can configure the firewall settings
with the <span class="Yjhzub" data-sfc-cb="" data-processed="true">Rogers
Xfinity App, he can also do it locally with a Web browser by </span></p>
<p><span class="Yjhzub" data-sfc-cb="" data-processed="true">navigating to
10.0.0.1 (Hitron 192.168.0.1) of his router. According to
Google, the Xfinity and Hitron models can pass IPENCAP protocol
4 provided it is properly</span></p>
<p><span class="Yjhzub" data-sfc-cb="" data-processed="true">configured.
So he should check it.</span></p>
<p><span class="Yjhzub" data-sfc-cb="" data-processed="true">Regards,</span></p>
<p><span class="Yjhzub" data-sfc-cb="" data-processed="true">Boudewijn
VE3TOK</span></p>
<p><br>
</p>
<div class="moz-cite-prefix">On 3/6/26 18:19, jerome schatten wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1189838377.64312401.1772839199288.JavaMail.zimbra@shaw.ca">
<pre wrap="" class="moz-quote-pre">OK Bob, thanks!
Now, how to tell if his router is using CGNAT? Is there a way to find out? Mine is more or less a standard Hytron CPE box and it has always just worked. His situation, as I understand it, seems more like a streaming service -- his box has his TV stuff and other services on it, and he has to contact Rogers to do things like turn on/off DMZ, and access other network functions.
So, this would be a completely different problem set if ipip is being blocked at the Rogers' end -- he would have to decide how and if he really wants to proceed.
So, back to my question #2 -- How to find out if ipip is being blocked at Rogers? Maybe it's sensible to call Rogers and ask them <g>?
Best,
jerome
----- Original Message -----
From: "Boudewijn (Bob) Tenty" <a class="moz-txt-link-rfc2396E"
href="mailto:bob@tenty.ca" moz-do-not-send="true"><bob@tenty.ca></a>
To: "TAPR xNOS Mailing List" <a class="moz-txt-link-rfc2396E"
href="mailto:nos-bbs@lists.tapr.org" moz-do-not-send="true"><nos-bbs@lists.tapr.org></a>
Sent: Friday, March 6, 2026 1:17:00 PM
Subject: Re: [nos-bbs] rip broadcasts in jnos
His router has to pass IPIP/IPENCAP, that is tcp/ip protocol 4 to receive RIP, that is a prerequisite. If his router can't be setup as such, he can install DD-WRT in it if that is available for the chipset in this router.
Make sure that his ISP is not using Carier-Grade NAT (CGNAT) as that is blocking incoming IPIP (and more) at the ISP level. If he is behind CGNAT or the problem with his router can't be solved, he can sign up
to 44Net connect at <a class="moz-txt-link-freetext"
href="https://connect.44net.cloud/" moz-do-not-send="true">https://connect.44net.cloud/</a> of ARDC and use a WireGuard VPN tunnel, that gives a tunnel 44 address. If his WireGuard tunnel is working he can use that tunnel 44 address instead of his
commercial address in his portal entry. In that way he bypasses all problems and can receive IPIP / IPENCAP and so RIP.
73, Boudewijn VE3TOK
On 3/6/26 12:30, jerome schatten wrote:
</pre>
<blockquote type="cite">
<pre wrap="" class="moz-quote-pre">Greetings....
Over time, I have been working with a jnos partner to try and understand why he cannot receive rip broadcasts. His set-up in jnos is identical to mine, and his set-up at the portal is identical to mine. I receive the rip broadcasts, and he does not. Both of us are using raspberry pi's, and both are running headless (ssh in to start jnos).
1. Can someone detail the 'necessary conditions' which must be met before a station can receive rip broadcasts using jnos?
2. If those conditions are satisfied, and still no rip broadcasts, what tools can be used to determine where the problem is?
Thanks for your insight..
Jerome - VE7ASS/VE7POO
_______________________________________________
nos-bbs mailing list
<a class="moz-txt-link-abbreviated moz-txt-link-freetext"
href="mailto:nos-bbs@lists.tapr.org" moz-do-not-send="true">nos-bbs@lists.tapr.org</a>
<a class="moz-txt-link-freetext"
href="http://lists.tapr.org/mailman/listinfo/nos-bbs_lists.tapr.org"
moz-do-not-send="true">http://lists.tapr.org/mailman/listinfo/nos-bbs_lists.tapr.org</a>
</pre>
</blockquote>
</blockquote>
<pre class="moz-signature" cols="0">--
There is nothing permanent except change
Heraclitus
</pre>
</body>
</html>