VPN Issues - Double NAT - AC1600 C6250 Router

Question

I have been unable to connect to my company's VPN for approximately three weeks while using the same router and devices for months. I performed a factory reset to my Netgear AC1600 router/modem with no effect. I spoke with my service provider Comcast and inquired if they were using a commercial NAT. They informed me that everything on their end looked perfect and this was a router issue and to work with Netgear to fix the issue. I have been receiving the following error on multiple devices including Surface Pro and Dell Latitude 7490 running on WIndowns 10 Pro:

I have ran a traceroute and have identified a double nat per the first two hops:

I am not using any gateway or additional networking hubs or routers within my house, so this is truly a single router/modem combo with a double nat. Please see my LAN / TCP configuration below:

My NETGEAR genie GUI does not have firewall settings.

plemans · Answer

have you tried using a different dns provider?&nbsp;
Like googles at 8.8.8.8 or 8.8.4.4&nbsp;
Or cloudfare at 1.1.1.1?
&nbsp;
the double nat (192....10.) issue is a bit more complex. You're already using a modem/router combo device. there shouldn't be a double nat issue unless the carrier or location you're connecting to has their own hub/router setup. I know you said you checked and they don't but it could be that you're talking to level 1 support for most isp's and they're not the most knowledgeable.&nbsp;
Again, the the dmz set, the C6250 is going to be forwarding all traffic, so it'd be whatever is connecting at the 10 address.&nbsp;
You could always try connecting to its ip add see if you can identify it.&nbsp;

plemans · Answer

I have talked to your company's vpn provider?&nbsp;
Maybe they require specific port forwarding.&nbsp;
&nbsp;

CharlesK25 · Answer

Thanks for the reply. I am able to access the vpn on other networks including my verizon hotspot. All settings are accurate to connect to the VPN on the devices. I have partnered with our IT department and they are saying the issue is specific to my router and the double nat issue.

plemans · Answer

try setting the device you're using in netgear's dmz.&nbsp;
https://kb.netgear.com/1118/How-do-I-configure-a-device-to-be-in-the-DMZ-on-my-NETGEAR-router

CharlesK25 · Answer

Would this create a security issue as the device would essentially have limited firewall protection?&nbsp;&nbsp;Also, I went into WAN Settings and set the DMZ to the ip address my Dell Latitude was on and still unable to connect to the VPN with same error message.

Forum Discussion

VPN Issues - Double NAT - AC1600 C6250 Router

7 Replies