How to Find Your Router’s WAN IP Address

Last updated August 22, 2026

Your router’s WAN IP address is the address that faces the internet. It is what your ISP assigns to the outside of your router, not the private address used inside your home network. Most people never need it.

If you are setting up port forwarding, detecting CGNAT, or configuring remote access, it is exactly what you need. The tricky part: routers display several IP addresses, and it is easy to grab the wrong one. This guide shows you where to find the WAN IP, what labels to look for across router brands, and what to do when the admin page is unreachable.

What is a router WAN IP address?

A router WAN IP address is the IPv4 address your ISP assigns to the internet-facing side of your router. It is the address the internet sees when your network sends outbound traffic. It is distinct from the private IP addresses assigned to devices on your local network.

Every router has two distinct sides. The LAN side connects to your home devices — laptops, phones, printers. It assigns them private addresses in ranges like 192.168.x.x, 10.x.x.x, or 172.16.x.x through 172.31.x.x. The WAN side connects to your ISP’s network and receives a public (or semi-public) IP address. For a full breakdown of how those two address types relate, see our guide on public vs. private IP addresses.

Three addresses are easy to confuse here:

• Your device’s private IP — something like 192.168.1.10. Only meaningful inside your network.
• Your router’s LAN/admin IP — typically 192.168.1.1 or 192.168.0.1. This is the Default Gateway address your devices use to reach the router. It is also the address you type into a browser to open the admin page. It is not the WAN IP.
• Your router’s WAN IP — the address assigned by your ISP. This is what external servers see.

The WAN IP is what you want. Everything else is local.

How to find your router’s WAN IP address

Log into your router’s admin interface, navigate to the WAN or Internet status section, and read the address listed under the WAN IPv4 or Internet IP field. That address is assigned by your ISP and identifies your network on the open internet.

The admin page is the most direct method. Follow these steps:

1. Find your router’s admin page address.

   This is your Default Gateway address — not the WAN IP, but the address that gets you to the admin interface where the WAN IP is shown.

   Windows: Open Command Prompt and run:

   ipconfig

   Look for the Default Gateway line under your active network adapter.

   macOS: Go to System Settings → Network → your active connection → Details → TCP/IP. The Router field shows the address.

   Linux: Open a terminal and run:

   ip route

   Read the IP address after default via.

2. Open the admin page in a browser.

   Type the Default Gateway address into your browser’s address bar and press Enter. Common addresses are 192.168.1.1, 192.168.0.1, and 10.0.0.1.

3. Log in with your router credentials.

   Default usernames and passwords are printed on a sticker on the router, usually on the bottom or back panel. If the credentials were changed and you no longer know them, a factory reset restores the defaults — but it also erases your Wi-Fi settings and any custom configuration.

4. Navigate to the WAN or Internet status section.

   Different manufacturers organize this differently. Look for a page or tab labeled WAN, Internet, Status, Connection, or Broadband. On some routers it appears on the main dashboard. On others it is one level deeper.

5. Read the WAN IP address.

   The WAN IP appears in a field labeled WAN IPv4 Address, Internet IP Address, External IP, or a similar name. It should not start with 192.168, 10., or 172.16–172.31. Those ranges are private. If you see one, your ISP is likely using CGNAT — covered in the section below.

Label variations by router brand

Router manufacturers use different names for the WAN IP. Common labels include WAN IPv4 Address, Internet IP Address, External IP Address, WAN IP, and ISP IP Address. The field is almost always on the main status page or the first page of the Internet or WAN settings section.

Use the table below to find the right label for your hardware. Click any column header to sort.

ISP-supplied modem/router combos — common from Xfinity, AT&T, Verizon, and similar carriers — sometimes hide the WAN section or lock down the admin interface. If the WAN IP is not visible, check your ISP’s mobile app or customer portal instead.

What to do when the admin page won’t open

If the admin page is unreachable, first confirm you have the correct Default Gateway address using ipconfig or your OS network settings. A page that won’t open doesn’t turn your Gateway address into the WAN IP — those are still two different things.

A few situations prevent admin page access:

When your WAN IP and public IP are different

Your router’s WAN IP and your visible public IP are normally identical. When they differ, your ISP is running carrier-grade NAT (CGNAT). This adds an extra NAT layer that places many customers behind one shared public IP. It is now standard on mobile carriers, fixed wireless, and satellite ISPs.

To check for CGNAT, compare two addresses:

1. Your router’s WAN IP (from the admin page, as described above)
2. Your visible public IP from our IP address tool

If those two addresses are different, CGNAT is in play. A second giveaway is the WAN IP itself: addresses in the 100.64.0.0–100.127.255.255 range are reserved specifically for CGNAT use under RFC 6598.

For a deeper look at how NAT operates at both layers, see our explainer on how NAT works. If you need inbound access and your ISP uses CGNAT, options include requesting a static public IP from your ISP (available on some business plans), using a VPN service with port forwarding support, or switching providers.

Why the WAN IP matters for common tasks

The WAN IP is the address external systems use to reach your network. Port forwarding rules, remote access configurations, server allow-lists, and email PTR records all reference this address. Getting the wrong IP here means a rule or connection that simply does not work.

Port forwarding. Rules in your router map incoming traffic on a specific port to a device on your LAN. Those rules operate at the WAN IP. When someone connects from outside, they connect to your WAN IP. If your WAN IP changes frequently, a dynamic DNS (DDNS) service maps a stable hostname to your current WAN IP automatically.

Remote access to home servers or NAS devices. Whether you run a Plex server, a Home Assistant instance, or a NAS device, external access requires knowing the WAN IP. This ties directly into port forwarding — our port forwarding guide covers the full setup process.

Firewall allow-lists. Cloud services, VPNs, and SSH configurations often restrict access by IP. When you add your home network to an allow-list, you enter the WAN IP. Entering the LAN or admin IP produces an allow-list entry that never matches any real traffic.

Email server PTR records. If you run a mail server at home, your WAN IP needs a matching PTR (reverse DNS) record. Mail servers on the receiving end check this. A missing or mismatched PTR record causes messages to land in spam or get rejected outright. If you need to verify your PTR record, a reverse DNS lookup shows what hostname is mapped to your WAN IP.

Troubleshooting connectivity. When diagnosing network issues with your ISP, knowing your WAN IP gives their support team a starting point. It also lets you check whether your IP appears on any blocklists, which can affect email delivery and access to some services. Our network connectivity troubleshooting guide walks through a systematic diagnostic process.

Frequently asked questions