A remote worker who wires up a home security camera, assigns it a fixed local address, forwards port 8080 on the router, and then can't reach the camera from outside the house has just run into carrier-grade NAT — not a router misconfiguration. It's an easy thing to chase for an evening before realizing the router did …