XR1000 failing to connect to random websites

[casperionx]

So I've noticed some weird things going on with my XR1000 nighthawk router.

I currently am running a Cisco 887VA in bridged mode and the nighthawk is connected directly to it.

Previously I was running my ISP router and had no issues at all (except nat hairpinning not working correctly - which is why I went to the Cisco - XR1000 set up).

The XR1000 is set up correctly as is the cisco. I can ping ip addresses and domain names, however, when I try to visit some websites, it cane some times take time to resolve the domain name and then resolve the page or it cant find it at all. I tested against various websites and also tested with my server box sitting behind the XR1000, and when performing sudo apt update it would fail to access some of the resources.

I checked MTU settings and they are fine.  

Now I know it isnt the cisco box, as I have connected an older model D link and it just worked fine (except for the nat hairpinning again).

This isnt a mac cloning issue as my ISP does not block multiple devices being connected to the connection. 

I have to admit, Im about to chuck it in the bin because I've spent way to much time on this and it makes no sense. Has anyone got any ideas or seen this issue and got a fix for it?

[plemans]

I'm never trusting of gateways "bridge" mode. 

What I'd try is put the gateway back in router mode (with wifi disabled) and put the netgears IP address into its DMZ. 

[casperionx]

I would agree with you but it’s a business grade router that the company I work for used to supply business customers with. I’ve configured it correctly (the config has no routing at all it’s literally configure the Ethernet interface for the connection to the phone line and setting the vlan up for bridge mode there is no routable interfaces in that path) and the fact the other router I’ve used allows all websites through when connected to the Cisco box tells me it’s the xr1000 being the problem

[FURRYe38]

Can you try the XR1000 at a different location or with a different modem? 

Can you try the modem in full router mode and use the modem DMZ for the XR1000 to test this?

I can tell you my XR1000 worked well when I had it online:

https://community.netgear.com/t5/Nighthawk-Pro-Gaming-Routers/New-XR1000-Firmware-Version-1-0-0-64-R...

However, I don't have your same ISP HW. 

[casperionx]

Yeah I’ve actually done all that. It does the same thing. If I connect any device to the standard isp modem I’m able to connect to any website. But through the xr1000 it fails

[FURRYe38]

IF so, then I would return the XR router or make contact with NG support and ask for additional help or an RMA. 

[Netduma-Fraser]

Could you try changing the DNS on the XR1000 please, apply, reboot, wait 2 minutes then see if sites load correctly please? Also are you using Armor?

[casperionx]

Yeah I’ve actually done that. Tested to local dns (pihole) to my isp’s dns and to google and 1.1.1.1

While I was beginning to think it was an issue with the xr1000 a mikrotik box also had the same issue…

[FURRYe38]

Interesting. 

I would change the Cisco back to router mode then try the XR1000 in AP mode. Then try the XR1000 in router with while using the Cisco's DMZ for the XR1000 in router mode. 

Seems like if two different branded routers have problems while connected to this Cisco gateway, I would look more into what the Cisco unit is doing. A full on factory reset and setup from scratch maybe needed on the Cisco gateway. 

[Netduma-Fraser]

Could you try disabling QoS entirely on the XR and see if everything loads correctly then please.

[casperionx]

OK…
After a lot of mucking about. Trying different routers and such. In the end it WAS an mtu issue.

However what surprised me is the fact that I need to manually configure each device to run at 1452 to make it work. Now I tried 1500 for both router and devices but it didn’t work then kept going lower and lower till I found where it did.

I’m completely unsure of why this would be. But it’s resolved now. Thanks everyone for their ideas (and I did re try all of them as I did want to make sure I didn’t miss anything)

[FURRYe38]

Id ask your ISP what MTU value should be used. Some ISPs may use a lower value than 1500. Most Cable and Fiber ISPs default to 1500. Some DSL or other protocol ISPs use 1492 or 1472 from historical information so maybe something with your ISP maybe specific in this regard. Something to ask them about. 

[casperionx]

Yeah, already done that. Funnily enough I actually work for my ISP, but I dont touch consumer side of things, I live in corporate networks so consumer grade things boggle me lol!

Everyone I've spoken to, agrees its a weird issue, usually for IPOE it should be 1500, though 1492 wouldnt be out of the question either. I do have 1452 configured in the settings for the XR1000 now, and also changed alll the devices hanging off of that to 1452 and that seems to have made it work. It still needs more investigating, however with me being away from home for a week its a bit diffifcult. 

Once I get to the bottom of it I will share the results.

[FURRYe38]

Ha yes, can be differences seen between corporate and consumer networks. 

Hopefully you can figure it out. At least you have a working solution for now. 

Be sure to save off a back up configuration to file for safe keeping. Saves time if a reset is needed.
https://kb.netgear.com/24231/How-do-I-back-up-the-router-configuration-settings-on-my-Nighthawk-rout...
Enjoy. 📡

[casperionx]

Ok...

Its an MSS issue.

For whatever reason, the XR1000 isnt altering the MSS (max segment size) on the fly, and thus causing the issues. Even with the MTU changed to a smaller size.

Is there anyway to change the MSS setting on the XR1000? There is no point on the cisco modem as it is literally passing the traffic along and not performing any modifications to the traffic, the XR1000 does everything from DHCP onwards.

[Netduma-Fraser]

No it's not possible to change that, if that is the case Netgear will need to take a look at that. How are you determining that is the issue?

[casperionx]

I had to drop the MTU on individual devices to like 1452 with out it, and after swapping a to a router that can be configured to do it, It worked with out modifying MTU at the device level, ust changing the MTU to 1492 on the router, which is what it was on the xr1000.

[Netduma-Fraser]

Thanks for the explanation!

[FURRYe38]

FYI, new FW is available:

https://community.netgear.com/t5/Nighthawk-Pro-Gaming-Routers/New-XR1000-Firmware-Version-1-0-0-68-R...

[theo-v]

Problem solved
In my case some websites were blocked.
I noticed that the time in the router was not correct because of a wrong timezone.
After adjusting the right time zone everything worked fine.

[casperionx]

I checked that already…was one of the first things I found when searching for it.

The more I look at it the more I think the router is borked. But it’s working fine as an ap