AT&T Hotpot device configuration challenge

I am out of ideas. I have a new AT&T hotspot with all firewalls turned off (asking for real trouble, right?). I have converted my node over to use IAX and at first could not get the "show registry" to display a successful connection. I then pulled the node off the hotspot and connected it to the home network, and it came right up working normal and saw "show registry" as it should look. I then switched it back to the hotspot (5G Franklin A70) and cannot get connections again, yet the "show registry" looked good, even after an Asterisk reboot. But, in the Asterisk CLI it is showing this info:
Connected to Asterisk 22.4.1+asl3-3.5.5-1.deb12 currently running on node66142 (pid = 920)
node66142*CLI> iax2 show registry
Host dnsmgr Username Perceived Refresh State
52.20.63.146:4569 Y 66142 108.147.187.18:4562 180 Registered
1 IAX2 registrations.
[2025-12-08 15:20:52.310] WARNING[1400]: app_rpt.c:1040 perform_statpost: statpost to URL 'http://stats.allstarlink.org/uhandler?node=66142&time=1765232451&seqno=6&nodes=&apprptvers=3.5.5&apprptuptime=90&totalkerchunks=0&totalkeyups=0&totaltxtime=0&timeouts=0&totalexecdcommands=0&keyed=0&keytime=89' failed with code 401 : Unauthorized
-- Remote UNIX connection
-- Remote UNIX connection disconnected
-- Remote UNIX connection
-- Remote UNIX connection disconnected
-- Remote UNIX connection
-- Remote UNIX connection disconnected
-- Remote UNIX connection
-- Remote UNIX connection disconnected
-- Remote UNIX connection
-- Remote UNIX connection disconnected
-- Remote UNIX connection
-- Remote UNIX connection disconnected
-- Remote UNIX connection
-- Remote UNIX connection disconnected
-- Remote UNIX connection
-- Remote UNIX connection disconnected
-- Remote UNIX connection
-- Remote UNIX connection disconnected
[2025-12-08 15:21:22.230] WARNING[1524]: app_rpt.c:1040 perform_statpost: statpost to URL 'http://stats.allstarlink.org/uhandler?node=66142&time=1765232481&seqno=7&nodes=&apprptvers=3.5.5&apprptuptime=120&totalkerchunks=0&totalkeyups=0&totaltxtime=0&timeouts=0&totalexecdcommands=0&keyed=0&keytime=119' failed with code 401 : Unauthorized
-- Registered IAX2 to '52.20.63.146:4569', who sees us as 108.147.187.18:4560 with no messages waiting
[2025-12-08 15:21:52.221] WARNING[1533]: app_rpt.c:1040 perform_statpost: statpost to URL 'http://stats.allstarlink.org/uhandler?node=66142&time=1765232511&seqno=8&nodes=&apprptvers=3.5.5&apprptuptime=150&totalkerchunks=0&totalkeyups=0&totaltxtime=0&timeouts=0&totalexecdcommands=0&keyed=0&keytime=149' failed with code 401 : Unauthorized
[2025-12-08 15:22:22.188] WARNING[1535]: app_rpt.c:1040 perform_statpost: statpost to URL 'http://stats.allstarlink.org/uhandler?node=66142&time=1765232541&seqno=9&nodes=&apprptvers=3.5.5&apprptuptime=180&totalkerchunks=0&totalkeyups=0&totaltxtime=0&timeouts=0&totalexecdcommands=0&keyed=0&keytime=179' failed with code 401 : Unauthorized
[2025-12-08 15:22:52.196] WARNING[1550]: app_rpt.c:1040 perform_statpost: statpost to URL 'http://stats.allstarlink.org/uhandler?node=66142&time=1765232571&seqno=10&nodes=&apprptvers=3.5.5&apprptuptime=210&totalkerchunks=0&totalkeyups=0&totaltxtime=0&timeouts=0&totalexecdcommands=0&keyed=0&keytime=209' failed with code 401 : Unauthorized
[2025-12-08 15:23:22.349] WARNING[1552]: app_rpt.c:1040 perform_statpost: statpost to URL 'http://stats.allstarlink.org/uhandler?node=66142&time=1765232601&seqno=11&nodes=&apprptvers=3.5.5&apprptuptime=240&totalkerchunks=0&totalkeyups=0&totaltxtime=0&timeouts=0&totalexecdcommands=0&keyed=0&keytime=239' failed with code 401 : Unauthorized

I have no idea what is going on. Only that there is something taking place where the hotspot network is not providing a connection for the node. I am able to use laptop and other devices through the hotspot either via ethernet or Wifi. My node is connected via ethernet (and also tested working perfect on my home network with ethernet connection).
Any ideas? Was it a real waste to get this hotspot and service thinking I had an easy remote option here?

Thanks.

As noted in ASL3 Manual : IAX-Based Registration, many of the cellular hotspots intercept/direct web traffic and route it differently from IAX traffic. This creates issues for both the HTTP-based registration AND the HTTP-based stat posting.

If you need to switch over to IAX-based registration you should disable stat posting.

Thank you for responding. Taking the first recommended step, I did switch this over to IAX as a first step and had successful connectivity on my home LAN.
But, with regard to disabling STAT posting, I’m not sure what or how. Since the node is not connecting to any other nodes, will disabling this allow for connectivity? If so, I am curious as to why.
My goal is to try and keep this node running only the tools that are provided with the ASL3 download and configure it for operation over the hotspot, without having to start getting into adding a VPN client, etc., that others have seemed to do to fix the IP/presence. This will help me make a decision if I am wasting my time with a hotspot or not.
What do you think should be the next actions/testing?

To disable status posting :

  sudo asl-menu
    Node Settings
      AllStar Node Setup Menu
        Update node <your node>
          Post node status
            <No>

Doing so does not affect your ability to establish connections. You just won't see any added info for your node on the stats.allstarlink.org page (i.e. no Bubble Chart).

Got it.
So is the answer to the connection issue in the "failed with code 401 : Unauthorized" message? Or are there other areas I should look or try?

Also, while monitoring in Asterisk CLI, I get these messages about once a minute:
Registered IAX2 to '52.20.63.146:4569', who sees us as 108.147.187.18:20577 with no messages waiting
-- Registered IAX2 to '52.20.63.146:4569', who sees us as 108.147.187.17:59649 with no messages waiting
-- Registered IAX2 to '52.20.63.146:4569', who sees us as 108.147.187.18:9601 with no messages waiting
-- Registered IAX2 to '52.20.63.146:4569', who sees us as 108.147.187.17:14824 with no messages waiting
-- Registered IAX2 to '52.20.63.146:4569', who sees us as 108.147.187.17:35440 with no messages waiting
-- Registered IAX2 to '52.20.63.146:4569', who sees us as 108.147.187.18:31825 with no messages waiting
-- Registered IAX2 to '52.20.63.146:4569', who sees us as 108.147.187.18:52737 with no messages waiting

Looks like it keeps switching IP's and ports all around.
Yet, when I run "rpt lookup 66142 " it seems to not always track the same updated IP at the time. Is this our issue that is blocking connectivity?

These messages reflect your node maintaining its registration with AllStarLink. Essentially, your node is saying "I'm still here" with the log messages being normal / expected.

Yes, the changing IP reflects one of the issues associated with using the cellular network hotspots.

As for connectivity, as long as your node successfully registers with the AllStarLink servers you should be OK to make "outgoing" connections.

Thank you.
You mention "outgoing" connections. After walking away for a few hours I came back and was able to link from this node (66142) to another node (66143). First shot. But, when I attempt to link into this node (66142, using the Repeater Phone app on my iPhone) it never connects. And, I cannot establish a connection from the other node (66143) back to this one (66142). It seems to just be one way (66142 ===> 66143). So, is the real issue with mobile hotspots the incoming connections to a node on it?

In order to receive an incoming connection the server for your node needs to have a publicly accessible IP address, something not available from most cellular hotspots.

For those with home cable/fiber networks, you typically have a router with a single IP address that must be shared by all of your [home] devices. For "incoming" connections, you need to ensure that the network traffic gets to the intended server. That's where "port forwarding" comes into play (e.g. sending all traffic to port 4569 to the local IP address of your ASL node).

In short, you should not expect that incoming connections will work if you are using a cellular hotspot.