Orbi WiFi 7 RBE973
Reply

R7000 dropping all static route packets

lolcocks
Aspirant

R7000 dropping all static route packets

Hello,

 

I have two routers in my network connected to one another. When I set a static route from my first router (R6400 with DD-WRT) to the second one (R7000 with stock OS), the second router (R7000) drop all the packets coming from the static route.

 

Heck, I have even disabled SIP ALG on the R7000, yet it won't allow the static route packets to get through.

 

How can I change this? Is there any settings I missed on the R7000 router? I don't want to flash DD-WRT on the R7000 because DD-WRT network signal on the R7000 does not reach as far as the stock OS.

 

My setup looks like this:

ISP Modem -> R6400 (10.0.0.1) -> (10.0.0.3) R7000 (192.168.1.1)

 

Requesting help.

Model: R7000|AC1900 Smart WIFI Router
Message 1 of 12

Accepted Solutions
lolcocks
Aspirant

Re: R7000 dropping all static route packets

 

I fixed the issue by flashing Xwrt-vortex, a custom firmware that supports NAT from other subnets.

 

In the end, the culprit was the NETGEAR firmware. There were no issues in routing.

 

@antinode 

Really disappointed in NETGEAR firmware and it's support.

I won't be buying NETGEAR as my next router.

View solution in original post

Model: R7000|AC1900 Smart WIFI Router
Message 10 of 12

All Replies
antinode
Guru

Re: R7000 dropping all static route packets

      https://community.netgear.com/t5/x/x/m-p/1825051
      https://community.netgear.com/t5/x/x/m-p/1824807

 

> [...] Is there any settings I missed on the R7000 router? [...]

 

   With my weak psychic powers, I can't see any of the settings on
either of your routers.  Or what you're doing.  Or what happens when you
do it.

 

> Requesting help.

 

   Try doing it in one thread?  Try answering some questions?  Try
providing some useful information?

Message 2 of 12
lolcocks
Aspirant

Re: R7000 dropping all static route packets

Apologies for being such a mess.

 

Here are screenshots of all my settings and what happens when I ping them:

Same results when I ping them from PC instead of router.

 

https://imgur.com/a/xz1FqHZ

Message 3 of 12
antinode
Guru

Re: R7000 dropping all static route packets

> [...] Or what your "my ISP's modem" might be.

 

   Still wondering.  Is it a modem or a modem+router?  If the latter,
then what are its IP addresses (LAN and WAN/Internet)?

 

   If your "my ISP's modem" is a simple modem, then I would expect the
LAN subnet of the (DD-WRT) router which is connected to it to be

"192.168.1.*", not "10.0.0.*".

 

> https://imgur.com/a/xz1FqHZ

 

   In the first picture, I'm not sure what the circles and arrows are
supposed to tell me.

 

   The second picture seems to show a reasonable route for the
"192.168.1.*" subnet.

 

   In the third picture, I'd expect a WAN subnet mask of
"255.255.255.0", rather than the default for a "10.x.y.z" subnet
("255.0.0.0").  But that may be mostly harmless.


   The fourth picture seems to show "Respond to Ping on Internet Port"
being checked.

 

   The fifth picture seems to show a working "ping", from the DD-WRT
router to the R7000 WAN/Internet port, which I'd expect.

 

   The sixth picture shows a failing "ping" from the DD-WRT router to
the R7000 LAN interface.  I'm not sure if I'd expect that to work or
not.  What happens if you connect some device to the R7000 LAN, and
"ping" it (from the DD-WRT router)?

 

   My fear (based on the unexpected DD-WRT router subnet) is that your
"my ISP's modem" is a modem+router, and that its LAN is using the
"192.168.1.*" subnet.  In that case, the DD-WRT router might think that
a message for "192.168.1.X" should go to its own WAN port, and. thus,
not to follow the (lower-priority) route which you added.

 

> If you would need anything more, please let me know.

 

> [...] WAN/Internet IP address of each router? [...]


   In particular, that of the DD-WRT router (if it's not your public
address).

Message 4 of 12
lolcocks
Aspirant

Re: R7000 dropping all static route packets

I was looking at this article:

https://kb.netgear.com/8219/How-to-setup-Inbound-Outbound-firewall-rules-on-NETGEAR-Modem-router-gat...

 

But I am unable to find any firewall options on the R7000 (latest firmware)

Message 5 of 12
antinode
Guru

Re: R7000 dropping all static route packets

> I was looking at this article: [...]

 

   Look on the right side, under "This article applies to:".

 

   I suspect that you have a routing problem, not a firewall problem.

Message 6 of 12
lolcocks
Aspirant

Re: R7000 dropping all static route packets

> Still wondering.  Is it a modem or a modem+router?  If the latter,
then what are its IP addresses (LAN and WAN/Internet)?


Not sure, I think it is a modem:

http://www.castlenet.com.tw/page/49

I have tried multiple times before, there doesn't seem to be any way to login or access the web GUI of that modem, maybe it doesn't have one? It doesn't even show up on trace routes.


In the first picture,

10.0.0.1 is my first router (R6400 DD-WRT).

10.0.0.3 is the static IP of the second router (R7000) to connect to the R6400.

192.168.1.1 is the local IP of second router (R7000) and clients connecting to it will get 192.168.2-254 IPs.



> In the third picture, I'd expect a WAN subnet mask of
"255.255.255.0", rather than the default for a "10.x.y.z" subnet
("255.0.0.0").  But that may be mostly harmless.


I tried both "255.255.255.0" and "255.0.0.0", didn't work on either.


> The sixth picture shows a failing "ping" from the DD-WRT router to
the R7000 LAN interface.  I'm not sure if I'd expect that to work or
not.  What happens if you connect some device to the R7000 LAN, and
"ping" it (from the DD-WRT router)?


I have a wired device (Windows machine) connected to the R7000 with firewall turned off on it. It too drops all the packets.

Actually the trace route stops at 10.0.0.3, so I am not able to enter into the 192.168.1.1 network of R7000. Which means the R7000 itself is dropping all the packets.


> Still wondering.  Is it a modem or a modem+router?  If the latter,
then what are its IP addresses (LAN and WAN/Internet)?


The IP address of the R6400 is 10.0.0.1, it's DHCP clients gets IP from 10.0.0.100 to 150.

The IP address of the R7000 is 10.0.0.3 to connect the the R6400. It's DHCP clients get the IP 192.168.1.100 to 150.

I don't know the ISP's modem's IP, it doesn't even show up on trace routes.


I am a newbie but not sure how the ISP's modem comes into picture here since I am trying to connect R6400 to the R7000.

Model: R7000|AC1900 Smart WIFI Router
Message 7 of 12
lolcocks
Aspirant

Re: R7000 dropping all static route packets

I am trying to repond to you since morning but as soon as I post a long post answering your questions, it gets deleted. Don't know why.

I am not really enjoying this forum script in use.

 

 

Anyways,

I think the ISP modem is just a modem because it does not show up in trace routes.

I just connect it to the R6400 and establish internet using PPPoE.

 

 

In the first picture,

10.0.0.1 is my R6400 router.

10.0.0.3 is my R7000 router's static IP to R6400.

192.168.1.1 is my R7000's local IP.

 

 

I already have a Windows machine (with all firewalls turned off) on the R7000 and when I ping it, all packets are dropped.

 

 

The WAN IP of the R6400 is the one provided by my ISP via PPPoE.

The WAN IP of the R7000 is 10.0.0.3 to connect to the R6400.

 

When I trace route from a computer on the R6400 (DD-WRT) network to a computer on The R7000's network, the trace stops at 10.0.0.3, meaning it's rejecting all packets at 10.0.0.3 and not letting me get through, so I think it's a firewall issue and not a routing issue?

 

Also, I am no expert but the ISP's modem should not come into picture as I am trying to locally send a packets from the R6400 to the R7000?

Model: R7000|AC1900 Smart WIFI Router
Message 8 of 12
lolcocks
Aspirant

Re: R7000 dropping all static route packets


@antinode wrote:

> I was looking at this article: [...]

 

   Look on the right side, under "This article applies to:".

 

   I suspect that you have a routing problem, not a firewall problem.


 

 

Hey, @antinode 

I came across a few old topic of R7000 which say that the R7000 does not support NAT from other subnets.

Such as this topic: https://community.netgear.com/t5/Nighthawk-WiFi-Routers/R7000-Static-routing-not-able-to-reach-inter...

 

Can you please confirm or deny this?

Message 9 of 12
lolcocks
Aspirant

Re: R7000 dropping all static route packets

 

I fixed the issue by flashing Xwrt-vortex, a custom firmware that supports NAT from other subnets.

 

In the end, the culprit was the NETGEAR firmware. There were no issues in routing.

 

@antinode 

Really disappointed in NETGEAR firmware and it's support.

I won't be buying NETGEAR as my next router.

Model: R7000|AC1900 Smart WIFI Router
Message 10 of 12
microchip8
Master

Re: R7000 dropping all static route packets

You're violating both license and copyrights by installing XWRT, which is an illegal fork of RMerlin. Better load FreshTomato instead

Message 11 of 12
lolcocks
Aspirant

Re: R7000 dropping all static route packets

 


@microchip8 wrote:

You're violating both license and copyrights by installing XWRT, which is an illegal fork of RMerlin. Better load FreshTomato instead


I wish I could @microchip8 .The Xwrt-Vortex is the only one which supports hardware accelatration.

 

The other firmwares do not support hardware accelaration and drops down my WiFi signal strength by 30%. And I need the extra signal strength to cover all rooms.

 

I know, the Xwrt-Vortex is not even open source, nobody knows what he might be running. There might even be backdoors.

 

But I don't have a choice. Either I lose WiFi signal in two rooms or I lose the ability to NAT other subnets if I use NETGEAR firmware.

 

I feel like I was thrown under the bus here by NETGEAR.

Model: R7000|AC1900 Smart WIFI Router
Message 12 of 12
Top Contributors
Discussion stats
  • 11 replies
  • 2966 views
  • 0 kudos
  • 3 in conversation
Announcements

Orbi 770 Series