Pure fiber- looks like public IP, but is unreachable outside Telus

[wireless]

I’ve got Telus PureFibre 1.5/.95 service in North Vancouver.

The Nokia fiber device is plugged straight into an Eero. The Eero gets what looks like a public IP address (173.180.26.88). All the devices on the internal network are 192.168.7.x

To avoid any port blocking, I’ve got the Eero set to forward port 65001 -> 22 on my Mac for ssh.

If I’m on another device on the local network, I can ssh to user@173.180.26.88:65001 successfully. However, as soon as switch to another connection (via a VPN, or via a Bell LTE connection) the connection reliably fails.

My first question is: Is my apparently public IP address actually behind some sort of grotesque CGNAT?

Any ideas on what’s wrong / how to fix?


More...