Intranet IP address in internet setup

[wadjei9000]

Having previously been up and running just fine, I've changed ISP and am now unable to get port forwarding to work.

I think the issue is in the Orbi, not the ISP but I can't figure out what the problem is.

One thing I have seen is in the Internet Setup screen, there is an Intranet IP address option which is currently disabled. I can't tell what it was set to before and the help center doesn't include any information about it...

20240103

(I enabled it just to reveal the other options, otherwise they are hidden)

I downloaded the instructions again from the netgear support site but they make no mention of this setting.

What is it for, and what is the effect of having it not enabled?

[FURRYe38 · Accepted solution]

I presume you mean that IPv6 is disabled on the RBR router? 

Ya seen some ISPs have odd issues with IPv6. Not to mention Orbi FW can have some oddities as well.

Glad you got it working. Please mark your thread as solved so others will know. Be sure to save off a back up configuration to file for safe keeping. Saves time if a reset is needed.
https://kb.netgear.com/000062080/How-do-I-back-up-the-configuration-settings-on-my-Orbi-WiFi-System
Enjoy. 📡

[CrimpOn]

What region and language is this router using? (Pull down in upper right corner of the screen for language)

I suspect typos.  My Internet screen looks like this:

Notice the spelling is "internet" (not "intranet") and has "from ISP".  No "Enable". And the static IP options are visible all the time (just greyed out).

What firmware version is on this router?  Current is v7.2.6.21.

Port Forwarding works only when the router has a public IP address,i.e. is not "behind" another router. What equipment did the new ISP provide?  is it a plain modem or fiber ONT, or is it a combination device?

[wadjei9000]

I have that setting too. The mystery one is near the bottom of the screen for me.

It looks like I have the current software - v7.2.6.21_5.0.20

Router is connected directly to the ONT via the WAN port. It's exactly the same physical connection that I had with my previous ISP until a few weeks ago.
in this case, I moved from Sky to PlusNet ... this lost me IPv6 (which I hadn't appreciated) and needed me to use the PPPoE configuration which I had never done before. I do have a public IP address so double NAT is not an issue.

Here's my full screen with public IP redacted.

 

I since tried enabling the mystery setting but, of course it doesn't seem to have made any difference.

I'm sure port forwarding was working before as I have servers that connect in to a machine on my LAN to read a status page and they worked fine until yesterday. I did try (and fail) to get tunnelbroker services working which led to this headache; I've since completely disabled the IPv6 function in the router but port I'm still having issues reaching the machines via the forwarded ports from the internet and from the lan (via my public IP). On the LAN the target ports are reachable and responding fine.

[FURRYe38]

I'd make contact with your ISP and have them help you with this. Be sure to ask them if connecting a external router ot there ONT is supported by them or if there router is needed. 

Power OFF the ONT and RBR for 1 minute then back on as well. 

[wadjei9000]

Thanks, I'll give those a try (havent powered off the ONT since our provider switch)

Plusnet specifically said that a third party router is supported (they helped me configure it initially as I didn't know a login was required).

As to port fowarding, they don't provide any help with this and referred me to their "community forums" ... I joined but cannot post a new question so that's proved as useful as a catflap in an elephant house.

I may factory reset the device and see if starting from scratch helps, but I'll have to do all that later when no one's expecting internet access to work lol!

[FURRYe38]

Might ask the ISP to provide you with there branded router to connect then you could connect the Orbi system to there router in router mode using the ISP DMZ on there router, or configure the Orbi system for AP mode while using there router.

[CrimpOn]

---

@wadjei9000 wrote:

having issues reaching the machines via the forwarded ports from the internet and from the lan (via my public IP). On the LAN the target ports are reachable and responding fine.

---

What a puzzle.

• Target machine(s) are accessible from the LAN.
• NAT Loopback (accessing the public IP from the LAN) fails.
• Access from the Internet fails.

How to the web based port checkers respond?

Such as https://canyouseeme.org Do they report the public IP address that appears on the Orbi Advanced Tab home page?  They show no ports open?

Is the connection using

• The actual public IP address? or
• The DDNS URL?

[CrimpOn]

Thanks for the tip on scrolling to the bottom.  Still not there on my RBR750.  Perhaps this is related to the PPPoE login?

[wadjei9000]

yeah, might well be a PPPoE thing.

I ended up finding an old settings backup (from the Sky days) restoring that and reconfiguring the internet login section and, voilà everything started working again, exactly as before!

Unfortunately, the backup cfg files are all binary so I will never know what it was that borked the router so hard. As far as I can tell, all the important screens look identical (apart from the IPv6 one).

Thanks for the tips everyone, I'll just make a mental note to take a settings backup before I go anywhere near the IPv6 screens again until Plusnet get their act together!

[FURRYe38 · Accepted solution]

I presume you mean that IPv6 is disabled on the RBR router? 

Ya seen some ISPs have odd issues with IPv6. Not to mention Orbi FW can have some oddities as well.

Glad you got it working. Please mark your thread as solved so others will know. Be sure to save off a back up configuration to file for safe keeping. Saves time if a reset is needed.
https://kb.netgear.com/000062080/How-do-I-back-up-the-configuration-settings-on-my-Orbi-WiFi-System
Enjoy. 📡

[wadjei9000]

sorry @CrimpOn - I missed your earlier reply...

Your summary was correct...

When it was happening, canyouseeme.org could reach me on port 80 via a plusnet public IP address, same as the one in the advanced router status page but my other forwarded ports, including 443 were unreachable.

Strangely, when I tried to connect to port 443 via NAT Loopback, I was getting TLS termination with a certificate clearly from the router, and not the letsencrypt certificate from the intended machine on the LAN. I have never configured the https option in the router (Advanced > Web Services Management) and when I reviewed it it was still not enabled so I have no idea what that was about!

I have CNAMEd an entry in a couple of domains to a dynu DDNS url - using IPv4 or dns urls made no difference.

Having resolved the issue,canyouseeme.org can now reach the forwarded ports 80, 443 and the others that I have set. TLS termination from the internet and via NAT Loopback is working correctly again.

All very strange.