NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

dastrix's avatar
dastrix
Aspirant
Apr 18, 2019

Nighthawk M1 Passthrough Mode

Hi All,

 

I believe the M1 supports passthrough. Am I right in saying that when setup, the dynamically assigned IP from the telstra carrier in this case, would be allocated to the DHCP Client interface of my Pfsense firewall?

 

I need the M1 as a modem and need the IP to be allocated to the Firewall so I can do rules, nat, dynamic dns etc.

 

 

Thanks

6 Replies

  • W1lliam's avatar
    W1lliam
    Virtuoso
    Apr 19, 2019

    When doing IP Passthrough, the host connected to M1 would be assigned with IP address dyanmically as private address (from M1), not the one from carrier.

     

    William

    • dastrix's avatar
      dastrix
      Aspirant
      Apr 19, 2019

      So if the host is a pfsense firewall, does that mean the public IP is not  allocated to the firewall? if its a bridge, which is layer 2, where is the public ip allocated to?

      • W1lliam's avatar
        W1lliam
        Virtuoso
        Apr 19, 2019

        The public IP is assigned to M1's WAN interface all the time.

         

        William

  • Smog's avatar
    Smog
    Tutor
    Apr 21, 2019

    Hi,

     

    When you enbale IP passthrough on the MR1100, you indeed get the dynamically assigned IP from your carrier on the device connected to the MR1100.

    Unfortunatelly, most carriers are doing CGNAT (https://en.wikipedia.org/wiki/Carrier-grade_NAT). In this case, you are getting a private IP address from your carrier and you won't be able to do port forwarding to access services hosted at home. Some carriers have an option to get a public IP address.

     

    You have a few options to overcome CGNAT, search on Google https://www.google.com/search?q=orvercoming+CGNAT. This invloves opening a tunnel from your home hosted computer to a server on the internet with a public IP address. You can use a VPS with OpenVPN Server for that, or any VPN services that offer such an option, o for free (for one random url to access one single port)  using ngrok.