NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
VPN Pass through / Nat Restrictions
I tried everything to get a VPN Pass Through to work, with the ultimate goal of achieving a less restrictive NAT for the Nintendo Switch. First I tried enabling the settings as recommended in the con...
A lot of missing information.
Does your carrier only supply CGNAT? I know AT&T only gives out private 10.x.x.x IPs.
What IP address is the MR1100 receiving from the carrier (is it 10.x.x.x or 192.168.x.x or 172.16.x.x through 172.31.x.x or something outside of those ranges)? What IP is the 7000P receiving from the MR1100 (is it 10.x.x.x or 192.168.x.x or 172.16.x.x through 172.31.x.x or something outside of those ranges)?
Have you tried disabling the firewall on the 7000P completely?
Which "passthrough" check boxes are checked and unchecked in your MR1100 settings menu?
Thank you for the response. Sorry for the missing info. It's AT&T, and yes 192.168.x.x.x
The 7000P gets a 192.168.x.x.x as well
I didn't try disabling the firewall on the 7000P completely. Always worried about disabling firewalls so I didn't try that. I flashed it with the VPN provider's firmware. I couldn't get the VPN App to authenticate on my Mac using the hotspot in the beginning. I had to get on public Wifi to get it to work. I worked with their tech support both trying to get the app to authenticate and then later when I put the 7000P in place and was unable to authenticate that firmware flash as well. Finally the next day a tech suggested I put another router in front of the 7000P and that's how I got it to work, without going to the public wifi.
There was only one "VPN Passthough" check box and I checked it, I tried unchecking. I tried enabling and disabling the uPnP check box, the DMZ check box...I couldn't get anything to work. To either give me a less restrictive nat or to pass the VPN.
I hope this info helps you help me. I would love to be able to just use the hotspot standalone or in the least just use the 7000P behind it and not the additionial one.
I don't believe your MR1100 is getting a 192.168.x.x IP from AT&T. There are two IPs on a router. One is Internet (AT&T) side called the WAN. The other is the local area network side or LAN. The default LAN IP is 192.168.x.x.
I was asking for which type of WAN IP you were getting on the MR1100. See attachment.
Also, curious why you want to use their restrictive implementation of firmware instead of a real firmware that gives you control. The VPN designs their firmware for people who are unable to type in information.
AsusWRT Merlin for R7000 http://xvtx.ru/xwrt/index.htm
DD WRT for R7000 https://wiki.dd-wrt.com/wiki/index.php/Netgear_R7000P
Also, most VPNs use NAT as well. The Switch needs access to incoming ports 45000 through 65535. Most VPNs that have port forwarding won't let you forward 20,536 ports.
