NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
BiGMERF
May 08, 2019Apprentice
Double nat issue...
Hey rook here with a quick question...
got a double nat warning on my Xbox one..
running my new Orbi connected to a modem/router combo from century link for my fiber.
So I was doi...
SW_
May 08, 2019Prodigy
BiGMERF, assuming you don't need Disney Circle or Armor features, there is a 3rd option, Orbi AP mode, which doesn't require you to tinker with your modem/router settings. Putting the Orbi in AP mode will also shield it from external attacks, i.e., ports scan/sync attacks.
- BiGMERFMay 08, 2019Apprentice
yes thank you, I am aware of AP mode.. only issue with that is you loos some features in the process... it also seemed like for some reason while in AP mode my devices where less likely to connect to the sattelites...
- Kneby2May 08, 2019Aspirant
Hi,
Rookie my self, and did the same experience 1-2 weeks ago, when i got my RBR20 + sat.
I did it from the modem(router).
The adress ORBI showed was the WAN adress.
In my modem the orbi was assigned a LAN adress, which i put into the DMZ.
- gr8shoMay 08, 2019Virtuoso
The best way to get help for this is from the forum community of your ISP.
In general, the host router should know what IP address it assigned to your Orbi so that would generally be the one to use. But a more proper way to identify the Orbi is by its MAC address. Arris routers for instance use MAC to identify the device to put into IP Passthrough mode which is another label for DMZ. After the setting is applied, you may need to reboot the RBR50 to get it to pick up the new settings if it doesn't do it on its own. You'll know it worked if the Orbi gets the public IP of your ISP connection.
- SW_May 08, 2019Prodigy
BiGMERF wrote:
yes thank you, I am aware of AP mode.. only issue with that is you loos some features in the process... it also seemed like for some reason while in AP mode my devices where less likely to connect to the sattelites...
Yes, you are right. If you must have a feature that's not available in AP mode, Router mode is a good choice.
Orbi will eventually redirect all clients to the correct/nearest Satellites, unless there's a weak signal problem with that particular Satellite. I always leave my setup alone overnight after Orbi reboots/restarts for the dust to settle. If my clients are not connected to the expected Satellite in the morning, it means that I need to look into that Satellite to ensure that it still provides proper WiFi signal in its area of coverage.
When you put the Orbi in Router mode, you might want to look into changing these NAT options:
- If you are using VOIP, on the WAN Setup page, disable SIP ALG by selecting Disable SIP ALG.
- If you are having problem with playing game on the console, you could try changing NAT filtering from Secured to Open.
NAT Filtering
This option determines how the router deals with inbound traffic. The Secured option provides a secured firewall to protect the PCs on LAN from attacks from the Internet, but it may cause some Internet games, point-to-point applications, or multimedia applications not to work. The Open option, on the other hand, provides a much less secured firewall, while it allows almost all Internet applications to work.
- SW_May 09, 2019Prodigy
SW_ wrote:
BiGMERF, assuming you don't need Disney Circle or Armor features, there is a 3rd option, Orbi AP mode, which doesn't require you to tinker with your modem/router settings. Putting the Orbi in AP mode will also shield it from external attacks, i.e., ports scan/sync attacks.
Just a data point. An example of the type of regular attacks on my RT-AC87U router. Fortunately, both username/password can be changed on this router, which isn't the case with Orbi. The risk with Orbi in Router mode is a bit higer than AP mode setup b/c the default "admin" username can't easily be changed for example. WIth that said, it doesn't mean that Orbi in Router mode isn't safe!
Apr 21 17:14:10 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 22 16:50:31 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 23 07:07:17 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 24 10:16:29 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 24 15:11:14 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 25 00:40:14 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 25 14:52:05 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 25 19:26:05 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 26 05:08:07 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 27 23:33:30 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 28 04:21:26 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 29 13:02:51 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 29 17:40:36 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 29 22:25:29 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
Apr 30 03:04:12 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
...May 8 05:02:40 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
May 8 09:11:50 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in login.
May 8 19:54:31 httpd_login_lock: Detect abnormal logins at 5 times. The newest one was from 200.116.170.72 in login.
May 8 19:59:16 HTTP_login: Detect abnormal logins at 5 times. The newest one was from 200.107.254.70 in auth check.