NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Double NAT configuration
I'm having trouble configuring my RBE971 as a router behind my modem/router, which is itself configured as a router.
I want to retain some of the router functions of my modem/router, but also benefit from a larger local network through the RBR.
I was able to configure the LAN portion of the RBR without any problems, creating a local network at 192.168.16/20.
However, I can't seem to activate the other portion on the modem/router side.
I connect the RBR from the yellow "10G Internet" port to my 10G hub, to which my modem/router is connected (network 192.168.1.0/24).
In the "Internet Setup" section, I assign the RBR a static IP address of 192.168.1.1/24 (unassigned address), the gateway to 192.168.1.254 (my modem/router), and the DNS server address to my local DNS server.
When I apply the changes, the 10G link from the RBR doesn't establish a connection, and the setup page refreshes, resetting my internet IP address to 0.0.0.0.
Is this a problem with the RBR itself, or have I missed something?
13 Replies
In the "Internet Setup" section, I assign the RBR a static IP address of 192.168.1.1/24 (unassigned address), the gateway to 192.168.1.254 (my modem/router), and the DNS server address to my local DNS server.
What happens if you let the RBR get an address from the gateway (using DHCP)?
My router's DHCP server is disabled. I have a local dnsmasq server acting as a DHCP server.
However, I just tested it by letting my DHCP server assign an address, but I didn't see any DHCP requests coming from the RBR.
It's as if the "Internet 10G" port on the RBR isn't working.
What is this 10Gb hub? LAN switch? Brand and model of this hub please.
Try changing the RBRs IP address from 192.168.16.x to 192.168.0.1.
Or do one of the following:
Your ISP Modem already has a built in router and wifi. This would be a double NAT (two router) condition which isn't recommended. https://kb.netgear.com/30186/What-is-Double-NAT
https://kb.netgear.com/30187/How-to-fix-issues-with-Double-NAT
Couple of options,
1. Configure the modem for transparent bridge or modem only mode. Then use the Orbi router in router mode. You'll need to contact the ISP for help and information in regards to the modem being bridged correctly.
2. If you can't bridge the modem, disable ALL wifi radios on the modem, configure the modems DMZ/ExposedHost or IP Pass-Through for the IP address the Orbi router gets from the modem. Then you can use the Orbi router in Router mode.
3. Or disable all wifi radios on the modem and connect the Orbi router to the modem, configure AP mode on the Orbi router.
Static IP Address Configuration for AP Mode | NETGEAR Communitieshttps://kb.netgear.com/31218/How-do-I-configure-my-Orbi-router-to-act-as-an-access-point and https://www.youtube.com/watch?v=H7LOcJ8GdDo&app=desktop
I thought I had replied, but I realize my message didn't go through. So, I'll start again...
Thank you very much for your analysis.
The 10G hub is a Zyxel XS1930-10.
I just tried again by connecting the RBR's WAN port directly to the router. The result is the same.
I also tried changing the RBR from 192.168.16.1/20 to 192.168.0.1/24. Same result.
I also tried solution #2, without success. I finally gave up :(
Ultimately, since I wanted to be able to take advantage of certain RBR features not available in AP mode, I implemented the following solution:
- the box in router mode at 192.168.1.0/24, to benefit from certain features and manage my wired PCs over 10G,
- the RBR in router mode at 192.168.16.0/20 to manage my numerous Wi-Fi devices, but without using the router function,
- a PC on both networks with dnsmasq to serve everyone via DHCP and DNS, and configured as a gateway to the box.
I'm not marking the thread as resolved because I haven't achieved exactly what I wanted...
Ultimately, since I wanted to be able to take advantage of certain RBR features not available in AP mode, I implemented the following solution:
- the box in router mode at 192.168.1.0/24, to benefit from certain features and manage my wired PCs over 10G,
- the RBR in router mode at 192.168.16.0/20 to manage my numerous Wi-Fi devices, but without using the router function,
- a PC on both networks with dnsmasq to serve everyone via DHCP and DNS, and configured as a gateway to the box.Since there is no way to turn off NAT filtering on the Orbi, you have to "use the router function".
It would be nice if there was a way to turn that off (as there is on some other Netgear routers).
I've had my 970 series in double NAT many times. Behind a 192.168.0.1 router leaving the 970 router at 192.168.1.1 in full router mode. If I do this kind of configuration i typically use the 192.168.0.1's DMZ for the 970 router. Have zero issues using this configuration.
I've never changed the NAT Filter on either upstream or downtreamrouter, you can try this however it may not effect anything.
The 10G hub is a Zyxel XS1930-10.
I just tried again by connecting the RBR's WAN port directly to the router. The result is the same.
I also tried changing the RBR from 192.168.16.1/20 to 192.168.0.1/24. Same result.
I also tried solution #2, without success. I finally gave up :(
Ultimately, since I wanted to be able to take advantage of certain RBR features not available in AP mode, I implemented the following solution:
- the box in router mode at 192.168.1.0/24, to benefit from certain features and manage my wired PCs over 10G,
- the RBR in router mode at 192.168.16.0/20 to manage my numerous Wi-Fi devices, but without using the router function,
- a PC on both networks with dnsmasq to serve everyone via DHCP and DNS, and configured as a gateway to the box.
I've never changed the NAT Filter on either upstream or downtreamrouter, you can try this however it may not effect anything.Not on option on the 870. Are you seeing this on the 970? If so, where?
I've had my 970 series in double NAT many times. Behind a 192.168.0.1 router leaving the 970 router at 192.168.1.1 in full router mode. If I do this kind of configuration i typically use the 192.168.0.1's DMZ for the 970 router. Have zero issues using this configuration.
I double-route because my set top boxes only work with my ISP router, and the ISP router doesn't provide OpenVPN.
Port forwarding isn't a problem. But there are some other drawbacks. One is that the ISP router's wifi can't reach my set top boxes (which only have wifi interfaces), so I need to set up a separate mesh for that - using an RBK50 as an AP. So I end up with two competing meshes. Also some features of the set box (casting being one) require connecting my phone to the RBK50 network, instead of connecting to the normal 870 network.
Netgear could make some fairly easy improvements to the Orbi features that would let me fully integrate the network:
- They could make openVPN and DDNS available in AP mode
- They could let me turn off NAT filtering - letting me use a subset of the ISP's router local network addresses on the 870.
There are no technical reasons why these changes couldn't be made.
I guess I could just deploy a VPN server, but overall I do prefer Orbi's management interface.
Although I suspect adonf06 might be wanting a different set of functions than I do, I do understand his frustration.
It would not be easy to make openVPN and DDNS available in AP mode. There are a ton of reasons this gets very messy all pointing back to the AP no longer being the network edge device, and enabling them would require significant architectural changes (and potential support headaches due to necessary interaction with the edge device).
