[?] Double NAT Problem

[miinzp]

Hello,

In my house, I have a ASUS RT-AC66U with pppoe (without modem, the ethernet connect directly on router).

But I can't use assuscomm ddns and no-ip and I can't open ports (I configure to open, but don't open). The WAN IP is different of public IP. It's a double nat? Why? Because I have only one router.

I already tested two routers (ASUS and Time Capsule), but the problem continue.

Someone can help me, please?

 

[stevech]

not clear what you are doing...
Do you mean that there are two cascaded routers, where #1 connects to the Internet/ISP and #2's WAN port connects to a LAN port on #1?

If so, then replace #2 with an ethernet switch. Or if you need wireless, a switch plus a WiFi access point (AP). Any WiFi router can be re-configured/re-purposed as an AP. Its WAN port goes unused.

Better, get one of these, connect to switch. Connect switch to #1 router. I use one for more coverage and with handhelds.
http://www.newegg.com/Product/Product.aspx?Item=N82E16833320168&cm_re=rt-n12-_-33-320-168-_-Product

Double-NAT is avoidable.

If you are using an ethernet connection in an enterprise or university, you must contact the IT people to do what you are doing. It's likely not permitted.

 

[miinzp]

Hello,
Sorry about my english, i'm not american.

I dont have 2 routers at same time. I have only one (RT-AC66U) with pppoe, connected to the ISP cable:
http://cl.ly/image/0Y2P3u3R0H1d

But I can't open ports or connect to no-ip/assuscomm

 

[stevech]

The router's WAN port ( not the LAN ports), connects to what internet service provider type? Does that service give your router a public IP address? Does that service block any IP protocol port numbers?

Your topic is double-NAT. If you have just one router, #2 as I discussed, what is router #1 that you said you connect to?

 

[miinzp]

The router's WAN port ( not the LAN ports), connects to what internet service provider type? Does that service give your router a public IP address? Does that service block any IP protocol port numbers?

Your topic is double-NAT. If you have just one router, #2 as I discussed, what is router #1 that you said you connect to?

My ISP is pppoe with a blue cable comes from street, and I connect this cable directly on router.
I wrote it wrong. I use only one router, with the isp cable connected to it.
Have I call my ISP to ask to allow the ports and the public ip?

 

[TD93103]

Does not sound like double NAT. The WAN and public IP address are different.

No IP does not work because it sounds like WAN is misconfigured.

Try setting WAN>Internet Connection> Connection type> to Automatic.

If that doesn't work.

Then plug cable in to your computer. Ping Google server 8.8.8.8 to test connetion. If you get a response, find out what address your computer is using.
Copy that Address.

On Router go back to WAN>Internet COnnection> COnnection type> Static.
Then Paste the address in the field for router address.

I have not had to set up the pppoe before. This is just a suggestion. Thanks.

 

[TD93103]

Does not sound like double NAT. The WAN and public IP address are different.

Try setting WAN>Internet Connection> Connection type> to Automatic.

If that doesn't work.

Then plug cable in to your computer. Ping Google server 8.8.8.8 to test connetion. If you get a response, find out what address your computer is using.
Copy that Address.

On Router go back to WAN>Internet COnnection> COnnection type> Static.
Then Paste the address in the field for router address.

I have not had to set up the pppoe before. This is just a suggestion. Thanks.

 

[miinzp]

Does not sound like double NAT. The WAN and public IP address are different.

Try setting WAN>Internet Connection> Connection type> to Automatic.

If that doesn't work.

Then plug cable in to your computer. Ping Google server 8.8.8.8 to test connetion. If you get a response, find out what address your computer is using.
Copy that Address.

On Router go back to WAN>Internet COnnection> COnnection type> Static.
Then Paste the address in the field for router address.

I have not had to set up the pppoe before. This is just a suggestion. Thanks.

Automatic don't work...
When I set to static ip, ask for subnetwork mask, gateway, dns1 and dns2. What I have to write on these fields? Thanks for the help!

 

[F5ing]

The WAN IP is different of public IP. It's a double nat? Why? Because I have only one router.

Are you saying that your WAN IP, while connected directly to your ISP, is a private (or rather, not a standard public) address? If so, your ISP is probably already NATing you (CGN?).

I've heard some ISPs were starting to do this but I'm pretty sure it's rare (at least in the US). Where are you? If your ISP is doing that then I think you're out of luck unless you can convince them to give you a dynamic or static public IP ($ either way).

It's one thing when you double NAT on your own, where you control both, entirely another if the ISP controls one of those two.

 

[Razor512]

Definately contact your ISP, and if they are unable to give you your own dynamic IP, then see if you are able to switch to a different ISP.

 

[chadster766]

Hello,

In my house, I have a ASUS RT-AC66U with pppoe (without modem, the ethernet connect directly on router).

But I can't use assuscomm ddns and no-ip and I can't open ports (I configure to open, but don't open). The WAN IP is different of public IP. It's a double nat? Why? Because I have only one router.

I already tested two routers (ASUS and Time Capsule), but the problem continue.

Someone can help me, please?

A lot of the time the ISP default the modem to router mode instead of bridge mode.

To find out if you have a double nat setup just look at the IP Address your router is getting on the WAN in the status page. If WAN IP is in the below ranges then you are NAT behind NAT.

10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255

 

[miinzp]

Ok. I will contact my ISP to change the modem to bridge. Thanks!

 

[F5ing]

Just curious. Does your WAN IP address fall anywhere within these addresses:

100.64.x.x through 100.127.x.x

Or any of the private addresses that chadster766 posted earlier?

I'd be especially interested if it lies within that 100 series of addresses.

 

[miinzp]

Just curious. Does your WAN IP address fall anywhere within these addresses:

100.64.x.x through 100.127.x.x

Or any of the private addresses that chadster766 posted earlier?

I'd be especially interested if it lies within that 100 series of addresses.

My WAN IP is 10.200.x.x and public IP is 187.x.x.x

 

[F5ing]

My WAN IP is 10.200.x.x and public IP is 187.x.x.x

Your WAN IP of 10.200.x.x is a non-routable private address (ie, the LAN behind a router) and your public IP of 187.x.x.x appears to be a standard, routable, public address (not the LAN behind a personal or ISP router, ie, not NAT'ed -- typically denoted as the WAN IP for the router).

Unless something's misconfigured.

What device is telling you that its WAN IP is 10.200.x.x?

 

[miinzp]

I contact my ISP and now I can open ports, thanks!

 

[F5ing]

Good to hear!