NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
M6 and IP-passthrough with routable static IP
I have an M6 Pro (MR6550) and a T-Mobile business internet account, and I'm unable to use the M6 in passthrough mode. The M6 (the hotspot) does some pretty inexplicable things. Like ARP my firew...
Suppose that the Firewall public IP address is 111.222.333.a and the public IP address assigned to the M6 is 333.222.111.b.
If the M6 is put into passthrough mode, then it will send packets to the Firewall addressed to 333.222.111.b and the Firewall will ignore them because it is expecting packets addressed to 111.222.333.a
Put another way, if the M6 is in the default (router) mode, what public IP address does it display?
Um... first, they'd need to be on the same subnet.
So do you mean the M6 is on 111.222.333.b?
Again, in passthrough mode the M6 won't have an address. But it will know the address that the firewall behind it has. It will also know the address of the (provider-side) default gateway.
Or are we not talking about IP-passthrough mode any more?
Because:
if the M6 is in the default (router) mode
then that sounds like we're talking about routing mode and not IP passthrough mode.
I don't understand where CrimpOn is going here, but it still might be useful to see if the M6 is better behaved in router mode. Particularly the 60-70% packet loss.
StephenB It seems to work okay in router mode, but that's not why I bought it. I need the firewalling to be done by an actual firewall, and I don't want to have double NATting going on. Also, the way my IPsec authentication works the connection needs to terminate directly onto an un-NATted interface.
Given that IP passthrough is the degenerate case of routing, you'd think it would be trivial to do correctly.
It seems to work okay in router mode, but that's not why I bought it
Understood. I am thinking you have the passthrough type set to ethernet - is that the case?
Also, I believe the m6 management interface continues to use 192.168.1.1 in IP passthough mode. If the firewall is acting as a NAT router then you should make sure you are using a different subnet.
