is it possible to be allocated a static IP address for a Talk Talk router?

[Steve2026]

I want to set up a cloud based radius server in AWS to authenticate my devices using 802.1x/WPA2/WPA3 enterprise (basically using this as practical training to increase my skill set at work)

I can set up the Talk Talk broadband router as a radius client but it's IP address changes every time it's rebooted.

My radius server (Server2025) in an AWS environment only accepts IP addresses in the inbound security rule so it would be nice if the Talk Talk broadband router could be assigned a fixed IP (or have a really long lease time).

Because of this I'll have to change the IP in the inbound AWS rule and also the radius client IP of my Talk Talk box in NPS on my radius server every time it is rebooted.

FYI - AWS doesn't seem to support using FQDNs in security rules otherwise I'd look into enabling this on the Talk Talk router.

Any ideas if Talk Talk allows static IPs to be assigned to home based broadband routers?

[kanya-TT]

Thank you, Steve, for your insightful suggestions. However, since you brought up the problem of slow internet coverage, we can investigate that further. If you don't notice any improvement after implementing your proposed changes, we would be glad to perform diagnostics on our side as well.

Kanya

[Steve2026]

I've been doing some research and I may have an alternative solution that doesn't require a fixed IP on the TalkTalk router.

Firstly for my home wifi, I use an Aruba AP315 access point that has a fixed IP on my internal LAN

Secondly, I think the Talk Talk Router may support a VPN standard such a OpenSSL

Thirdly, in my AWS environment I can buy a Firewall-as-a-service (Palo Alto) for a few quid a month (I hope)

If everything lines up, then I might be able configure a dynamic client VPN between the TalkTalk box and the Palo Alto Cloud firewall.

If that works then I will be able to configure my Aruba AP as a radius client on my AWS Cloud Radius server.

So I'll look into the OpenSSL config on the TalkTalk box and if it doesn't support it I'll check if my Aruba AP supports OpenSSL as this might be easier.

Its a bit convoluted but there are real-world applications which have similar solutions - and its handy to know how to do a practical implementation

So thanks for insight.

[kanya-TT]

Hey @Steve2026. In that case we can run checks for you on the slow internet response. This could be because of various reasons. 

Kanya

[Steve2026]

Every so often (usually 2 or 3 weeks), internet response time becomes very slow, eg. webpages take ages to open, triple digit ping response times to internet sites, etc. Rebooting the router fixes this. I suspect there might be caching or a resource starvation issue so switching it off and on is an easy fix.

[ferguson]

@Steve2026 

TalkTalk do not offer static IP addresses on residential services. Why are you rebooting your router? 

[ferguson]

@Steve2026 

TalkTalk do not offer static IP addresses on residential services. Why are you rebooting your router? 

[kanya-TT]

Hey @Steve2026, we will escalate this for you.

Kanya