Static IP
on Starlink.
Starlink says it does not provide static IP addresses at this time. A business that needs a public address can turn on Starlink’s public IPv4 option on a Priority plan, or use a VPN or SD-WAN service that gives the site a fixed address.
Five terms first.
Each Starlink gets one IPv4 address and a block of IPv6 addresses. Unless the IP policy is set to Public IP, the IPv4 address sits behind carrier-grade NAT.
Read Starlink’s own IP article- Dynamic IP
- An address that can change. Starlink says its network is dynamic, and addresses change from time to time.
- Public IPv4
- An address any device on the internet can reach. On Starlink it is an option on Priority plans.
- Static IP
- An address that never changes. Starlink says it does not provide static IP addresses at this time.
- CGNAT
- Carrier-grade NAT. Your router gets a private address, and Starlink’s network translates it to a Starlink public one. A connection that starts on the internet cannot reach your site.
- IPv6
- The newer address system. Starlink gives every Starlink a public block of IPv6 addresses, on every plan.
What do you need the IP for?
Find your need, then read across.
What each option needs comes next.
| Starlink public IPv4 | VPN or SD-WAN fixed address | IPv6 | |
|---|---|---|---|
| Remote access | Works with your own router. The address can change after a move or a software update. | Works. Users connect to the service’s fixed address. | Works with your own router, if the remote user also has IPv6. |
| Site-to-site VPN | Works with your own router. | Works. Some VPNs also run behind NAT, with no public address at the site. | Works only if both ends and the VPN use IPv6. |
| Vendor allowlisting | Risky. If the address changes, the allowlist stops matching. | The best fit. The address stays the same. | Only if the vendor allowlists IPv6. The block can change like the IPv4 address. |
| Inbound cameras | Works with your own router. The Starlink router cannot forward ports. | Works. Viewers connect to the fixed address. | Works with your own router, if the cameras and the viewers use IPv6. |
What each option needs.
And where it stops.
| What it needs | Its limits | |
|---|---|---|
| Starlink public IPv4 | A Priority plan, the IP policy set to Public IP in the Starlink account, and your own router for port forwarding and firewall rules. | Not truly static. It holds through a reboot, but a move or a software update can change it. |
| VPN or SD-WAN fixed address | A router that works with the service. The router builds a tunnel to the service, and the fixed address comes from the service. | Traffic runs through the service’s network, and the service is one more thing to run. |
| IPv6 | Your own router, and IPv6 on the devices and on whoever connects in. | Only works where the other end also uses IPv6. The block can change after a move or a software update. |
Starlink’s own plans and terms decide what each service line can use. Check Starlink’s IP article
Turn on Starlink’s
public IPv4.
Open the service line
Sign in at starlink.com/account, open the dashboard and select the Starlink under Service Line.
Set the IP policy
Select Edit next to IP Policy, choose Public IP and save.
Reboot the Starlink
Starlink’s steps end with a reboot. Only Priority plans offer the option. See Starlink’s own steps.
Your own router
does the rest.
The Starlink router does not support port forwarding or firewall rules. For inbound traffic, Starlink points to a third-party router.
On kits with a Starlink router, bypass mode turns off the Starlink router’s Wi-Fi so your router connects straight to Starlink. Turning bypass mode off takes a factory reset. Starlink Performance and Starlink Enterprise kits do not use bypass mode: instead of bypassing, plug in the third-party router to the power supply.
See Starlink for business with NetcomBring the IP question
to the plan.
- What needs to reach the site from outside?
- Which vendors allowlist your address?
- Do you run a site-to-site VPN, and to where?
- Which cameras or recorders need viewing from off site?
- Which router is at the site today?
- Do your devices and vendors use IPv6?
Bring the answers to the first call.
Request a QuoteWorth knowing.
Does Starlink offer a static IP address for business?
Starlink says it does not provide static IP addresses at this time. Its public IPv4 option keeps the address through reboots, but moving the Starlink or a software update can change it.
Which Starlink plans can use a public IP address?
The public IPv4 option is available on Starlink’s Priority plans. It is turned on in the Starlink account, in the service line’s IP policy.
Can I port forward on the Starlink router?
No. Starlink says its router does not support port forwarding. Port forwarding needs a third-party router and a public IP on the Starlink service.
Can I run a site-to-site VPN over Starlink without a public IP?
Some VPNs can. A VPN built to work behind NAT can start the tunnel from the Starlink site. The default Starlink policy blocks connections that start on the internet, so the other end has to be the one that is reachable.
Does Starlink support IPv6?
Yes. Starlink says IPv6 works on all Starlink routers and every service plan, and each Starlink gets a public block of IPv6 addresses.
Why would a business need a fixed IP address?
To reach the site from outside, to run a site-to-site VPN, to pass a vendor’s allowlist, or to view cameras from off site. Each need has its own best option in the table on this page.