How to setup external viewing on a "Starlink Router" with a VPN.

[Zeroz 3]

I have just switched to Starlink internet and I have complete access locally of my Emby server. I understand that Starlink has a CGNAT(Carrier-grade NAT), so I picked up a VPN. I selected PIA(Private Internet Access), because it is capable of port forwarding, which is needed to bypass the Starlink CGNAT. I changed the external http port in Emby to the one shown tied to the VPN IP, but I have had no luck getting into the server on my phone app using the data plan in attempt to test access the server from outside the network. I'm sure I missed a step, because I'm a novice at this. Thank you in advance, for your time and help.      

[Zeroz 3]

Also I just picked up the PIA vpn app today, so if there is a better and easier vpn to use, I can switch with a full refund. I only picked PIA because of the port forwarding, I am completely happy to change to another more compatible or more practical vpn.

[Luke 37248]

Hi, does this help?

 

[Zeroz 3]

Thanks a ton for the info, I fallowed these steps found in the thread you shared:
1.Subscribe to PIA and download the VPN client.
2.Open the PIA client on your device.
3.Go to Settings > Network and turn on “Request Port Forwarding”.
4.Select a server that supports port forwarding and connect to it.
5.Close the settings menu and click the large Connect button.
6.After you are connected, PIA will return your forwarded port on the main screen.
7.Set this port up as the unsecured port.

It's at step 7, where I think my mistake is. So the VPN IP kicks out a port number of "38695". Also I set the https port to "38696", because it wouldn't let me use 38695 twice, which I'm sure is part of my issue here.   

New Bitmap Image.bmp

[videopalace 26]

Try this: Give the local HTTP and public HTTP port the same number and also give the local HTTPS and public HTTPS port the same number. Then you can work in a simplified manner via the browser and you can more easily track when something goes wrong with your connection (SSL errors, for example).

[Zeroz 3]

@videopalace Thanks for the info. So I set up both http ports to 38695 and both https ports 8920. I set the https ports to 8920, because that's what they were before. I still can't view remotely, but I did find a tab under my PIA app that says "Protocols". It shows my current port at the top right as "38695", yet under remote port on the Protocols setting as "8080". That port has a drop down menu that lets me change it to "8080, 853, 123, or 53". None of those match the port 38695, which is being shown as my current port available. So that might be one part of my problem.      ports.bmpPIA.bmp

[Zeroz 3]

So it turns out my dedicated IP in the VPN app was not configured. Once I finished setting it up, I was good to go. I can now confirm first hand, that PIA does work for Emby on a Starlink network. Thank you both for helping me out.