> [...] Orbi shows my external IP (as determined from multiple internet
> sites) in the 'advanced home->internet port' tab.
It doesn't show it to _me_.
What is your "my external IP [address]"? If you're worried about
revealing secrets (like, say, a public IP address), then the top half of
the address, "a.b" out of "a.b.c.d", would satisfy most of my curiosity.
Or, plug that address into the form at: https://whois.arin.net/ , and
see if it is a public or private address.
> I am trying to forward from a building management system (JACE) [...]
The usual view of this is that the router forwards an external port
_to_ some port on a LAN device.
I know nothing about your (unspecified) "a building management
system".
> [...] that has a static IP [address]. [...]
Namely?
> [...] Everything else is DHCP from the Orbi but I have reserved it's
> static address [...]
Not how I'd do it, but it should work.
> [...] It has a web interface on port 80 (among other needed ports) so
> I know it's an actively broadcasting port. [...]
That's "listening", not "broadcasting". What are these "other needed
ports"?
> I have turned UPnP off.
Ok.
> I've setup both pre-defined services as well as custom services
> including 1, some, or all of the ports I need but no joy.
With my weak psychic powers, I can't see any of your port-forwarding
rules.
"no joy" is not a useful problem description. It does not say what
you did. It does not say what happened when you did it. As usual,
showing actual actions (commands) with their actual results (error
messages, LED indicators, ...) can be more helpful than vague
descriptions or interpretations.
> Firmware Version V2.6.2.104
> Firmware is most up-to-date per the Orbi
Trust no one, I always say.
To see another opinion of what's current/available:
Visit http://netgear.com/support , put in your model number, and look
for Downloads. (For older versions, under Firmware and Software
Downloads, look for "View Previous Versions".) Find the kit(s).
Download the kit(s) you want. Read the "Release Notes" file for
instructions. (In the User Manual, look for "firmware", and,
especially, for a topic like "Manually Upload Firmware to the Router".)
When that fails because of a deficient User Manual, try:
https://kb.netgear.com/31573
> I have a Zoom 5354 cable modem/wifi router that I am using as modem
> only [...]
> I tried putting the Orbi in AP mode [...]
_Something_ needs to be a NAT router.
> I'm using Comcast/Xfinity service. Is there any chance they have
> something blocked on the ISP side?
Many things are possible. Ask them? I wouldn't expect them to block
everything, but I wouldn't be amazed if they blocked things like 25
(SMTP), 80 (HTTP), and/or 443 (HTTPS). Knowing nothing about your
"other needed ports" makes it tough to guess what's likely.
Normally, if you were using such popular external ports, I'd suggest
specifying different (less popular) external ports in your (invisible)
port-forwarding rules, but I don't know what you're doing now, or
whether your (unspecified) application could cope with different ports.
For the usual problems with port forwarding, see:
https://community.netgear.com/t5/x/x/m-p/1859106
The tests for "usual problem" 3 should tell you if the router's port
forwarding is working, but I know nothing about your (unspecified) "a
building management system", or how you're testing communication with
it.
> [...] If JACE needs to communicate with "the Cloud" or something, it
> is up to JACE to open that connection.
Port forwarding is used for incoming connections, not for outgoing
connections.
