NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
wndr3400 After new spectrum service install i can not RDP, remote into or ping from outside.
I know this model is a bit older but it was working just fine and still is to a certain degree. WNCR3400. One day i have one service provider with one static IP and everything is working fine. Nex...
> [...] a block of IP addresses from Spectrum which included; [...]
Your situation is different from (and more complicated than) that of
most folks here, because you have more than one public IP address. To
make sense of these data, I'd need to see the _last_ octet of each of
those addresses.
> Size: /30
> Subnet:255.255.255.252
So, you have a block of four addresses?
> [...] gave the netgear my first usable IP [...]
Have you more than one "usable IP [address]"? What's the _second_
usable IP [address]?
> [...] I can't ping the public IP from Spectrum (first usable IP) from
> anywhere outside of my network. [...]
ADVANCED > Setup > WAN Setup : Respond to Ping on Internet Port
Did you check that box?
> I had someone onsite set the NetGear Router, under "internet setup" as
> "use static ip" with "Usable" IP from spectrum as the IP address, IP
> "Subnet Mask" as "Subnet" IP provided by Spectrum, "Gateway IP address"
> as "Gateway" IP and DNS server IP's provided by Spectrum as DNS IP's
Plausible. But you could set any address you might like that way,
whether or not it makes any sense with the other equipment or your ISP.
What happens if you check "Get Dynamically from ISP"? (That could be a
total failure without being your actual problem, but it might be
interesting. Be prepared to revert to the static address data.)
> Inside the building (LAN) I've had someone on site log into the
> NetGear router using its internal IP address....works. I've had that
> same person remote into the server in question using the internal IP +
> port and using the server name....works. The address scheme of the LAN
> is default of 192.168.x.x
There's no need to hide any of the (private) "192.168.x.x" addresses.
Can you get a "ping" response using a system on the LAN from the
(public) WAN/Internet IP address of the WNDR3400v2? (After checking the
"Respond to Ping [...]" box.)
> [...] This rule says [...]
Copy+paste is your friend.
Similarly, can you make a Remote Desktop connection from a system on
the LAN to the (public) WAN/Internet IP address of the WNDR3400v2
(specifying the external port number)? That would suggest a good
port-forwarding rule.
> When sitting on the LAN the user can use the WAN IP of 71.66.x.x:8080
> (usable IP assigned to the NetGear router provided by Spectrum) to
> access the "remote management" of the router.
That suggests that the WNDR3400v2 WAN/Internet interface really is
configured with that IP address. But that doesn't prove that the "Arris
cable modem/router" is not configured the same way, and that gizmo would
see any outside-world traffic to that address before it ever got to the
WNDR3400v2.
> [...] I had the people on site call SPECTRUM to confirm their
> equipment (and Arris cable modem/router) was in bridge mode and not
> double NATing with the NETGEAR. [...]
That's nice, but if that "Arris cable modem/router" actually is
acting as a modem+router rather than as a modem-only, then that might
explain your trouble.
> [...] The port forward rule is configured correctly [...]
If you say so. I can't see it from here.
> [...] and we are seeing the port forward attempts hitting the log of
> the netgear. [...]
Can't see that log, either.
> [...] I can ping the spectum modem from outside as well.
What, exactly, does that mean? See "As usual, [...]", above. Which
address is that? Is "the spectum modem" the same thing as "Arris cable
modem/router"?
If that's a DOCSIS cable modem(+anything), the you might be able to
web browse to it from the LAN at "192.168.100.1". If so, then perhaps
you could learn something about its configuration that way (without
involving the middleman).
As a test, have you tried connecting a computer directly to the
"Arris cable modem/router", without involving the WNDR3400v2? If the
"Arris cable modem/router" really is as transparent as everyone claims,
then a simple Remote Desktop connection should work from the outside
world to such a computer (on the default port, so I wouldn't leave it
exposed that way for more time than required to run the test).
> In my opinion you should upgrade your wifi router [...]
Anyone should, but I don't see how that could solve the current
addressing/port-forwarding problem.
> [...] I currently have the wndr4500 with my spectrum account and
> haven't had any issues at all. [...]
Ok. And do you have a block of IP addresses? And is your
modem(+router?) configured like the one in this situation?
I'd worry about the addressing/port-forwarding problem before I
started buying still more hardware (of questionable benefit). Function
first, speed later.
Antinode
IP ADDRESSES- I sent the entire list of IP’s so it’s a smaller block as I am used to getting more usable IP’s. This comes with just one usable. I do not feel comfortable giving anymore on the addresses however I will say they are successive numbers as the last octet. The assigned gateway octet is one number less than the usable (which is the only usable) and the next in succession would be the broadcast IP
PING -Yes respond to ping is checked
SPECTRUMS EQUIPMENT (for the last time)- their equipment (spectrums modem/router) is an ARRIS. Feel free to use spectrum equipment, their equipment, ARRIS modem/router, spectrums modem….all interchangeably. I will refer to the netgear router as the netgear router.
STATIC OR DYNAMIC -So we did attempt to check “Get Dynamically from ISP” (just for testing purposes) and we lost service. We reverted back to the static settings and internet was back up and working.
PINGING SPECTRUM MODEM – I can ping the gateway IP address (which I would assume would be assigned to the spectrum modem because that’s how it typically works) provided by spectrum from outside of their LAN. I’m not giving out IP’s sorry. I’m in a building in over an hour away on another ISP’s service with an IP address unrelated to these. I can ping their gateway IP which should be assigned to Spectrums modem but I cannot ping the first usable IP which is assigned to the netgear. Also I can TRACERT to the gateway IP but I cannot TRACERT to the usable IP assigned to the netgear.
PORT FORWARD-is correct as it worked with our prior provider. Stopped working as soon as we cut over to the new service. There is nothing in the rule that needs changed in a situation like this. We didn’t change ports we didn’t change the LAN IP that it points to. If the user leaves off the port number when attempting to rdp while inside the LAN it fails. If they include the post number they connect.
We are going to run your suggested tests today and I will provide answers. I think you are right when you say we should probably just log in to the ARRIS spectrum equipment. Again I am able to use goto meeting but our version does not have mouse and keyboard control so I have to walk someone with limited knowledge of networking through this. When I had the user TRACERT out to googles public DNS of 8.8.8.8 I got two private IP’s first two hops. First hop is the LAN ip of the netgear and the second hop looks like 192.168.0.1 so I would assume that will be the ARRIS spectrum equipment ip.
I got on a conference call with Spectrum and after questioning them about their modem setting they said they can’t see anything connected to their device but wouldn’t tell me much else just instating the modem is set up properly.
We will be logging into spectrums equipment and looking for a replacement device for our netgear. If they can’t see our new device but we still have internet service at that point we will know it’s a setting on the spectrum modem.
> IP ADDRESSES- [...]
Ok. I'd expect a block of four to provide one "usable" address.
(Hence "first" was confusing.) I don't know why one would (pay extra
to?) get such a small block instead of getting a single public address,
but it's ok with me.So, your base ("Network:") address plus 1 is the ISP gateway, and
your base address plus 2 is the "usable" address? That's what I'd
expect.> SPECTRUMS EQUIPMENT (for the last time)- their equipment (spectrums
> modem/router) is an ARRIS. [...]Arris makes more than one thing. I still don't know what yours is,
or how it's configured.> [...] Feel free to use [...]
Here's an idea: You pick one name (like, say, a model number) and
stick with it.
> PINGING SPECTRUM MODEM - I can ping the gateway IP address (which I
> would assume would be assigned to the spectrum modem because that's how
> it typically works) provided by spectrum from outside of their LAN.
> [...]I'd assume that your ISP gateway address is the address of some
interface at the ISP, not the address of anything at your site. You may
_believe_ that you're talking to your (unspecified) Arris
modem(+router), but that proves nothing. If you disconnect your
(unspecified) Arris modem(+router), can you still get a response to a
"ping" of that gateway address from the outside world?> [...] I can ping their gateway IP which should be assigned to
> Spectrums modem [...]I don't think so, but I'm always open to actual evidence.
> [...] but I cannot ping the first usable IP which is assigned to the
> netgear.You may have assigned that address to the WNDR3400v2 WAN/Internet
interface, but that guarantees nothing. The (unspecified) Arris
modem(+router) is what's connected to your ISP, and it determines what
gets through it.> I got on a conference call with Spectrum and after questioning them
> about their modem setting they said they can't see anything connected to
> their device [...]> As a test, have you tried connecting a computer directly to the
> "Arris cable modem/router", without involving the WNDR3400v2? If the
> "Arris cable modem/router" really is as transparent as everyone claims,
> then a simple Remote Desktop connection should work from the outside
> world to such a computer (on the default port, so I wouldn't leave it
> exposed that way for more time than required to run the test).
Still my advice. Ask someone at Spectrum whether that should work,
and how you should configure the computer. When you get that to work,
_then_ you should be able to replace that computer with a suitably
(similarly) configured router.So when we plug the a laptop into the SPECTRUM DEVICE (is what we will go with since i am not certain) with the same IP that we've given our router (the first usable). The user ran a speed test again and got great speeds confirmed connected to the internet. Then I in a different part of the world attempted to ping his that IP and could not and attempted to RDP into his laptop with default port and could not reach it. We did make sure remote access was enabled on the laptop.
Spectrum equipment.....confirmation. Technicolor TC8717T which I did log into today with the default username and password.
> [...] Then I in a different part of the world attempted to ping his
> that IP and could not [...]As usual, an actual error message would be more helpful than "could
not", but this would suggest (to me, at least) that the WNDR3400v2configuration is not your problem.
> [...] Technicolor TC8717T [...]
That is a modem+router.
> [...] which I did log into today with the default username and
> password."log into" using a web browser? Address/URL?
I'd start looking to see how it's configured. I have never touched a
TC8717T, and I haven't dealt with a block of addresses for decades, and
that was on a DSL connection, so my ability to advise on that stuff may
be very weak.No error message the ping is from CMD in windows: request times out.
Logged into it by doing a GoToMeeting onto one of that locations LAN machines and using TRACERT to see the private IP on the second hop out to 8.8.8.8 (Googles public DNS) (first hop is my NETGEAR) 192.168.0.1 browsing to that address and logging in with default username and pass. Called and questioned the settings and they did not sound like they knew anything about the modem and just kept saying it was in bridge mode and no blocking anything but could not see anything connected to TECHNICOLORI was looking at the configs on the TECHNICOLOR and I am not certain what is misconfigred.....but will continue to dig.
Thanks for the fast turn around.
Over the weekend while no one was on I logged into the TECHNICOLOR and after speaking with Spectrum and questioning if the modem
was in fact bridge mode. They insisted it was in bridge mode for the 4th time (4 separate phone calls). When I logged in to the TECHNICOLOR interface showed "bridge mode disabled” I enabled it and not I can ping my netgear router, remote manage my netgear router, and RDP into my server. I then set up a new netgear R7800 nighthawk router which brought us up to the speeds we were expecting. I don't know what I have to do to get these knuckleheads at spectrum to do as I ask so we can do business. I guess you have to do it yourself. I will award for both people that helped because it looked like it was a combination of issues. Spectrum refusing to set their modem as we asked and our netgear WNDR3400v2 degrading the throughput from it to our devices.