NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
perseid
Nov 30, 2019Aspirant
R7800 ShieldsUP fails Stealth mode/Replies Ping
Hi all, I performed the ShieldsUP! test on all ports and all ports come green (Stealth), however it fails the test because of the following: "Ping Reply: RECEIVED (FAILED) — Your system REPLIED ...
- Dec 04, 2019
> [...] the ISP has placed another router between mine and the internet.
> [...]_Someone_ has. It could be your ISP; it could be your building
management. I would expect an address like "192.168.0.x" to come from
some (small-scale) local router, not from an ISP.> [...] First time I see this.
It may not be the last. Especially if you don't deal directly with
an ISP. (Or if your ISP uses CGN.)
> [...] my Nighthawk was set in AP Mode. [...]You could go back to that kid of arrangement, but there are
disadvantages that way, too. For example, your devices would then be on
the same LAN subnet as those of any other user who also uses that same
invisible router which is somewhere beyond your wall, Potentially,
everyone in the building.
perseid
Dec 01, 2019Aspirant
You're right. the fact that the Nighthawk configured in AP Mode was able to supply an internet connection to my devices sounds as if there's another router somewhere between me and the ISP. The Advanced homepage shows 192.168.1.1 as the Router's IP address which of course is not the same as the WAN IP
antinode
Dec 01, 2019Guru
> [...] The Advanced homepage shows 192.168.1.1 as the Router's IP
> address which of course is not the same as the WAN IP
When configured as a router, the R7800 will have two IP addresses.
Its default LAN IP address is "192.168.1.1". The critical datum is its
WAN/Internet IP address. If that's some other private address, then
you've confirmed that that interface is connected to some other router
somewhere.
- perseidDec 01, 2019Aspirant
How can I check the Nighthawk's WAN/Internet IP address? The Advanced Homepage only shows the Router's IP Address which is the one I mentioned (192.168.1.1). If I open my PC's browser and go to https://whatismyipaddress.com/ it shows a Public address. Is that the Nighthawk's WAN IP?
- schumakuDec 01, 2019Guru - Experienced User
perseid wrote:How can I check the Nighthawk's WAN/Internet IP address? The Advanced Homepage only shows the Router's IP Address which is the one I mentioned (192.168.1.1).
Wherever the effective public IP address is associated - on some ISP router, on some Carrier Grade NAT router, ...
The Advanced Homepage does certainly show the Internet Port widget (or table section) aside of the Router Information, isn't it?
- antinodeDec 01, 2019Guru
> [...] The Advanced Homepage only shows the Router's IP Address [...]
Look more closely? I'd expect it to subtly tucked away under
ADVANCED > ADVANCED Home : Router Information : IP Address, but, if not,
then I'd try ADVANCED > Setup > Internet Setup : Internet IP Address.> [...] If I open my PC's browser and go to
> https://whatismyipaddress.com/ it shows a Public address. Is that the
> Nighthawk's WAN IP?It should be, unless there's another (NAT) router between your R7800
and the outside world. If those addresses differ, then there is.Nowadays, with IPv4 address space getting exhausted, more ISPs are
using "Carrier-grade NAT", especially for residential customers (who,
presumably, are not running servers, and wouldn't notice).https://en.wikipedia.org/wiki/Carrier-grade_NAT
So, even if there were no on-premises router behind your wall, you
could still get sandbagged by your ISP. (But my money is still on the
building.) - antinodeDec 01, 2019Guru
> Hm, there is typically the "Get dynamically from ISP" 8-/
On my D7000[v1] (V1.0.1.74_1.0.1), "Get Dynamically from ISP" is
selected, but the correct "Internet IP Address" is shown in the boxes.
I don't have an R7800, so I know nothing, but that's what "I'd try".
(Which was phrased that way for a reason.) I'm always open to
enlightenment. Does the R7800 _not_ show the "Internet IP Address"
there? - perseidDec 02, 2019Aspirant
Yes the Advanced Homepage widget only shows the Router's IP Address (Private, 192.168.1.1). If I go to Advanced/Setup/Internet Setup, the Internet Address is set to "Get Dynamically from ISP"
- schumakuDec 02, 2019Guru - Experienced User
Hard to imagine - provide a screenshot.
Here is for example an R9000:
- microchip8Dec 02, 2019Master
Like schumaku I also have on my R7800 the widget that displays WAN IPs (and DNS/DHCP servers)
- perseidDec 02, 2019Aspirant
Here is a screenshot
- antinodeDec 03, 2019Guru
> Here is a screenshot
Ok. As I read that, the router's LAN IP address is the default,
"192.168.1.1", and its WAN/Internet IP address is "192.168.0.115", which
is a (another) private address, presumably assigned by the (other)
router which is somewhere beyond your wall.Presumably, what you got from whatismyipaddress.com was _not_
"192.168.0.115". The implications of that difference have been covered
already. - perseidDec 04, 2019Aspirant
Yes, the Router's WAN IP address does not coincide with the actual public IP, so then the ISP has placed another router between mine and the internet. First time I see this.
- antinodeDec 04, 2019Guru
> [...] the ISP has placed another router between mine and the internet.
> [...]_Someone_ has. It could be your ISP; it could be your building
management. I would expect an address like "192.168.0.x" to come from
some (small-scale) local router, not from an ISP.> [...] First time I see this.
It may not be the last. Especially if you don't deal directly with
an ISP. (Or if your ISP uses CGN.)
> [...] my Nighthawk was set in AP Mode. [...]You could go back to that kid of arrangement, but there are
disadvantages that way, too. For example, your devices would then be on
the same LAN subnet as those of any other user who also uses that same
invisible router which is somewhere beyond your wall, Potentially,
everyone in the building. - perseidDec 04, 2019Aspirant
So just to understand the issue originally posted, the ping replied being reported in the ShieldsUP! test is done so by the "invisible" router, not my Nighthawk, right?
- antinodeDec 04, 2019Guru
> [...] the ping replied being reported in the ShieldsUP! test is done
> so by the "invisible" router, not my Nighthawk, right?I assume so. If it's testing your public address, then it's talking
to the router which has that (WAN/Internet) address, not to your router
(which has a private (WAN/Internet) address ("192.168.0.115"), making it
inaccessible directly).