D7000v2 as a modem

[RJC_ADL]

I have been using a D7000V2 modem/router successfully for a while (i.e., I can connect to the ISP and internet without issues) but now wish to use it solely as a Modem because I want to set up IPSec VPN and now have a separate security device that is connected to its LAN port.

I have configured the D7000V2 modem/router as a modem via Advanced->Advanced Setup->Device Mode-> Modem (Modem Only) without changing any of the settings that were working when it was working as a router.

After applying the settings and the D700v2 has rebooted, the lights status is thet the "Link" light is white, and the "Internet" light is abmer.

Questions:

1) Is this as expected or should the internet light be white?

2) If it is as expected, should the internet light turn white once the PPPoE device connected to the modem has logged into the ISP through the modem, or does the modem have no knowledge of the connection status when used in this mode?

I have been unable to establish an internet connection with this method without success and am unsure if it is the D7000v2 or the security device that has the issue. The security device is working fine as a router when the D7000v2 is also working as a router, but the security device is then not directly available to the internet and so is not visible for VPN access.

[antinode]

> [...] a separate security device [...]

   Not a very detailed description of anything.

   I know nothing, but...

> 1) Is this as expected or should the internet light be white?

   In modem-only mode, it may not be clever enough to know whether the
Internet is reachable or not.

> 2) If it is as expected, should the internet light turn white once the
> PPPoE device connected to the modem has logged into the ISP through the
> modem, or does the modem have no knowledge of the connection status when
> used in this mode?

   The latter would be my guess.  

> I have been unable to establish an internet connection with this
> method [...]

   I'd worry about the (unspecified) "a separate security device" and
its PPPoE configuration.  Does this thing keep an event/error log which
might tell you what it's doing?  Can the ISP see anything?

> [...] The security device is working fine as a router when the D7000v2
> is also working as a router, but the security device is then not
> directly available to the internet and so is not visible for VPN access.

   Would it help to make this thing your (ADVANCED > Setup > WAN Setup)
Default DMZ Server?

[RJC_ADL]

The security box is a Sophos XG85 device, but that is probably not relevant, as I have been able to show that that device is operating OK as a VPN when I access it through its external IP address (the address assigned by the netgear router when it is operating as a router) and the Sophos box gets its IP address via DHCP. However, when the Sophos box is configures to interface to PPPoE, it is unable to connect to the internet.

I have also tried connecting a PC directly to the D7000v2 and have used the (known working in router-mode) ISP login parameters and have found that the PC is unable to connect to the internet using this method either, so this tends to suggest that the modem is the issue (I have checked the username and password many times).

So I'm wondering if there is a trick to getting PPPoE to work when connected to the network side of the modem-configured D7000v2.

[michaelkenward]

---

However, when the Sophos box is configures to interface to PPPoE, it is unable to connect to the internet.

---

When you use a modem in modem only mode this is usually in the hands of the router. The modem does what you have told it to do, modem only.

Did you read the relevant bit of the manual, somewhere at the end of this link?

>>>> D7000v2 | Product | Support | NETGEAR <<<<

See page 177.

[antinode]

> [...] that device is operating OK as a VPN when I access it through
> its external IP address (the address assigned by the netgear router when
> it is operating as a router) and the Sophos box gets its IP address via
> DHCP.

   Ok.  It works when it's not required to make the PPPoE connection.

> However, when the Sophos box is configures to interface to PPPoE,
> it is unable to connect to the internet.

   That tells me that there's a problem with the modem, or else there's
a problem with the PPPoE configuration of the Sophos XG85 (about which I
know nothing).

   Sophos seems to have its own "Community", too.  For example:

      https://community.sophos.com/kb/en-us/119003

   If the ISP and local log files are not helpful, then I'd be looking
for ways to substitute equipment (modem, (other) router (with
known-working PPPoE config)) to try to assign blame more precisely
(always Job One).

> I have also tried connecting a PC directly to the D7000v2 [...]

   I can't see your Windows PPPoE configuration from here.  If that's
right, and seeing it work with some other modem (not modem+router) would
confirm that, then that would point to modem-only mode on the D7000v2 as
being the problem.

> [...] I'm wondering if there is a trick to getting PPPoE to work when
> connected to the network side of the modem-configured D7000v2.

   That should depend entirely on the router.

[RJC_ADL]

Yes, I have read the User manual related to setting the D7000v2 into modem mode (and have done this), but the manual says nothing about the status of the lights after successful connection, hence the question...

I will try using another old modem in modem-only mode and if that gives me the same issues when trying to connect using PPPoE, I will be more confident that the issue is on the PPPoE side.

[michaelkenward]

---

...but the manual says nothing about the status of the lights after successful connection, hence the question...

That one threw me too when I put my D6400 into modem only mode.

The Internet light is amber here too. The router (R7000P and R7800) connects as expected and handles the ISP's PPPoE settings with no problem.

The modems' manuals really should explain that colour change.

[RJC_ADL]

That is good information (that you have done this, your light is amber, and that PPPoE still works through another router), thanks.

Is it true that once a router has been put into Modem-Only mode, the only way to bring it back to router mode (as I have had to do because the connection from PPPoE with separate router was not working) is to reset the configuration (via the reset hole) and re-configure the router from scratch?

[antinode]

> The modems' manuals really should explain that colour change.

   Agreed.  It does make some sense that it acts as it does (because it
has no idea if the Internet is available), but some actual documentation
would be better than none.

> Is it true that once a router has been put into Modem-Only mode, the
> only way to bring it back to router mode (as I have had to do because
> the connection from PPPoE with separate router was not working) is to
> reset the configuration (via the reset hole) and re-configure the router
> from scratch?

   It may be.  If modem-only mode makes it completely stupid, then a
reset may be the only way back.

   Interestingly, the DM200 (a DSL modem+router, whose router is very
limited) seems to have a fixed (off-LAN) IP address which can be used to
reach it even when it's in modem-only mode:

      http://www.downloads.netgear.com/files/GDC/DM200/DM200_UM_EN.pdf

      IMPORTANT:
        After you disable the modem's routing features and the modem
        functions as a DSL modem only, you can access the modem only
        through a fixed IP address, which is 192.168.5.1. Therefore,
        make sure that IP address 192.168.5.1 is not assigned to another
        device on your network.

   I've never disabled the router on my D7000, so I know nothing, and I
haven't read about any other modem-only device allowing such access.

[michaelkenward]

---

Is it true that once a router has been put into Modem-Only mode, the only way to bring it back to router mode (as I have had to do because the connection from PPPoE with separate router was not working) is to reset the configuration (via the reset hole) and re-configure the router from scratch?

---

That has been my experience. Once in modem only mode, the device is beyond control. Everything is in the hands of the router.

I suppose I could experiment with a direct LAN from PC to modem, but I prefer a different strategy.

When I have the D6400 set up as expected, in modem/router mode, I make a backup of the configuration. Then if I ever need to reset it and go back to modem/router mode, I can quickly restore the settings from the backup.

[RJC_ADL]

I found an old DSG2000 in my cupboard and after discovering that there is a separate web page for changing mode of operation, I was easily able to configure that device for Modem-only. Having done that, my new Sophos XG85 was able to connect via PPPoE first attempt.

I still don't know if there is an issue with the D7000v2, or if it was finger trouble in configuring the SOPHOS box (I must have made the same mistake many times if that was true), but in any case, the issue is now resolved thanks.

[schumaku]

Hi,

@RJC_ADL wrote:

1) Is this as expected or should the internet light be white?

Expected I'm afraid.

@RJC_ADL wrote:

2) If it is as expected, should the internet light turn white once the PPPoE device connected to the modem has logged into the ISP through the modem, or does the modem have no knowledge of the connection status when used in this mode?

No. With an Internet connection requiring some specific encapsulation like PPPoE and authentication, this job is taken by the security appliance. Further on, the modem does not have access to the Internet to check the connectivity in place.

Beyond of this point, you might have some more luck when sharing more details, like your ISP, connctivity (DSL or Fiber), and the security appliance so somebody can pick up.