Cosmot vdsl, how to get my router a public network address

[ietele]

[K1m0n]

For the "need" topology you connect your "home router's" wan port (as a dhcp client) at the lan port of speedport+ router.
You will have cascaded routers, +1 nat layer, typically all addresses behind speedport+ will be private.
Also, no ipv6 @lan-side of "home router".

If you need public address at your "home router" you have the following options:

1. Ideally, you purchase an ip block from the isp and you route public addresses behind speedport+.
Doable on business contracts, expensive option.

2. otherwise, you remove speedport+ and connect your "home router" directly to wan/internet,
assuming you do have a routable/public IP it will be on the "home router".
Then you decide on how to handle the telephony part.

3. failing the above,
if you only need some ports/services accessible/forwarded at the "home router" (no real need for a public ip for that),
you make the relevant rules on speedport+,
or if those ports/services are needed on nas you make cascaded port forwarding rules on the 2 routers until traffic hits the nas.

That^ if I correctly understand you.
Diagrams are nice but don't communicate what you try to achieve.

[x_undefined]

Cosmote's CPEs have PPPoE passthrough enabled by default (although for some reason it won't allow 2 simultaneous PPPoE sessions for one subscriber in some rare cases). You should be able to get a public IP Address on your router (YourRouter_WAN <-> Speedport_LAN) if you set up a PPPoE connection (you will need your credentials).

[K1m0n]

Cosmote's CPEs have PPPoE passthrough enabled by default (although for some reason it won't allow 2 simultaneous PPPoE sessions for one subscriber in some rare cases). You should be able to get a public IP Address on your router (YourRouter_WAN <-> Speedport_LAN) if you set up a PPPoE connection (you will need your credentials).

Yes, correct.
That could also be an option.

My understanding is that only the main ppp tunnel might(?) have public ip nowadays,
so one would have to setup speedsport's ppp with the generic credentials (which would then be cg-nated),
and the setup the "home router's" ppp with the subscriber credentials.

If my understanding is correct, that would work,
but it will fail when for reasons x/y/z cpe contacts the provisioning server upstream
and re-establishes the ppp with the subscriber's credentials.

The cleaner solution would be to completely remove the speedport from the equation.

[x_undefined]

Yes, correct.
That could also be an option.

My understanding is that only the main ppp tunnel might(?) have public ip nowadays,
so one would have to setup speedsport's ppp with the generic credentials (which would then be cg-nated),
and the setup the "home router's" ppp with the subscriber credentials.

If my understanding is correct, that would work,
but it will fail when for reasons x/y/z cpe contacts the provisioning server upstream
and re-establishes the ppp with the subscriber's credentials.

The cleaner solution would be to completely remove the speedport from the equation.

Yeah, in case the secondary PPPoE session gets a CGNAT IP address, you can contact Cosmote and ask them to set up cli_XXXXXXXXXX (your phone number) credentials on Speedport (you may have to find a Support agent that knows about that), that will remain even after provisioning. That way, Speedport will get the CGNAT IP and your router will get a public one.

Removing the Speedport completely, thouugh, is indeed the clean way.