NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
CrimpOn
Aug 03, 2021Guru - Experienced User
About Double NAT
When a router (Orbi) is connected directly to another router (ISP device), the Doublt NAT condition interferes with a number of applications, such as Port Forwarding, VPN, some types of streaming services and some types of internet gaming. Unless a user is using one of those applications, they can have a double (or triple) NAT and never notice it. I am convinced that thousands of customers do exactly that. Just plug in their new WiFi router (any brand, not just Orbi), use the SSID/password printed on the label, and "off they go." It is only when a user has one of those specific needs that Double NAT becomes an issue.
We usually advise that the user choose one of two solutions:
- Put the ISP router into bridge mode so that the Orbi is the only router and all of these applications can be facilitated using features on the Orbi, or
- Put the Orbi into Access Point (AP) mode and use the ISP router features to facilitate these needs.
There is third alternative: Use features on both routers. As an experiment, I set up a router connected to my Orbi and attached a computer with an SSH server to this second router. Forwarded port 22 to that computer. On the primary Orbi router, I forwarded port 22 to this new router. So the sequence is:
Public IP-> Orbi. Port 22 forwarded to 192.168.1.93 (new router). Port 22 forwarded to 10.0.0.2 (computer).
Opened smartphone Hot Spot and connected laptop to the internet (bypassing Orbi and ISP). Opening an SSH connection to my Public IP connects directly to the computer. Through the "Double NAT" of two routers. Works fine. Could use the same technique to expose a web server, a security camera, an FTP server... the list is endless. The downside is that every step has to be done twice: once on the ISP router and once on the Orbi.
We recommend two solutions because once done, they remove Double NAT from every situation. Suppose a person has a situation where they cannot put the ISP device into bridge mode and do not want to put the Orbi into AP mode? For at least some situations, option three may be a solution for them.
6 Replies
Replies have been turned off for this discussion
- FURRYe38Guru - Experienced User
Also gaming configurations can be effected by double NAT conditions which is not preferred.
- A 4th suggestion would be to use the 1st routers DMZ or IP-pass through feature for the 2nd router as well to help with double NAT problems seen in these certain senarios. This is the most easiest method IMO.
- bariumslingerAspirant
So I have a situation somewhat related and need help. I have a Netgear MR5100 5G modem running on the ATT network and connected to that is my Orbi router (850) plus 2 satellites. I set up the modem with IP passthrough ON, DHCP OFF, ethernet standby disabled, and usb-c as charge only. I am running into NAT 3 limitations on my PS5 and am wondering if setting up the OpenVPN within the orbi will allow me to fix my NAT problem. I've never dealt with NAT issues before, so forgive my noob status.
- CrimpOnGuru - Experienced User
OpenVPN is not likely to have any effect on the PlayStation 5 situation.
According to this article, the solution is to use Port Forwarding rules on the Orbi router: