Double Natting Question

We just moved into a new place and shaw provides a wireless router for the broadband 50 connection no intstead of just a standalone bridge for the cable modem now.
2 devices are
Airport Extreme
Cisco - DPC3825
I was just upgrarding firmware and I get this message.
Problem 1/1 - Double Nat
Screenshot attached of error
So I am wondering if I should put this in bridge mode so or in second option. Or should I configure cisco router in bridge mode and change this? Just wondering if anyone had any real life expereince with these.
Also I work from home and I use an aruba remote ap (RAP2) It creates an ipsec tunnel and connects back to our controller in California. Before we moved I had this connected into my airport extreme that was connected directly to the motorola cable modem.
Appreciate the help on this.

You should definitely configure the AirPort Exteme in Bridge Mode since you already have another router "upstream" on your network.
If you select the "Share a single IP address setting", you will have two devices....both trying to act as routers distributing IP addresses and handling NAT services.
That....is a virtual guarantee that you will have multiple conflicts on the network.

Similar Messages

Time Capsule with Double NAT status - Question.

Hi all.. would appreciate some advice.
I have a Time capsule set to DHCP/NAT.
I have a second Airport extreme connected to TC via eithernet (about 100 yards away) set to Bridge to further my signal on a big property.
I have several Aiport Expresses for Airplay only.
I recently called Apple and they told me to set my TC to DHCP/NAT and chose ignore.
I had problems with my computers connecting to the internet (they connected to my network, but not internet. Or occasionally I would get errors on my MBP that said could not connect this IP address is used by another device). It was sporatic. Apple told me this was likely because I have 20-30 wifi devices in my house and my ISP is not providing enough IP addresses. They told me that DHCP/NAT makes my TC 'be in charge' of these IP addresses.
I am using Frontier service. Modem from Frontier is Netgear B90 - 755044 - 15.
When I set up this modem, I turned the wifi portion off. And currently the wireless light on the modem doesn't ever blink, so I believe it is off.
So why am I getting the Double NAT error since my Modem appears to have the wifi portion turned off?
Thank you very much!

Thanks again Bob!
I called Frontier... they refused to show me how to put my modem/router in Bridge mode. Hypothentically, if I did that, would that solve this problem? Sounds like it would. They said they won't show me how to do it because they use PPPoE or something and if I put into bridge mode I won't get internet access. Is that true? They only use bridge mode for businesse they said.
I never wanted a modem/router.... I wish I only had a modem! . Maybe I will call them back and ask only for a modem. Good idea.
Attaching a screen shots below.
If I go into My connection at the top, hit Edit.... no where in there is a bridge option.
If I go to that green Enabled one under VC's... where it says PPPoE, there is a selection to choose Bridge.
See below.
But I'm too chicken and I don't know if that is the answer or not.
Thougths?
Thanks again Bob!

Question # 2--how to avoid the DHCP conflict issue, double NAT, etc.

I'm having a tough day wasting hours working on the TC. It once worked fine for a year. Now, I'm struggling to maintain a connection at all.
I may be doing this wrong but I'm using two screens to manage this.
1. preferences/network
2. the TC internet connection settings
I had written all of my settings that worked on a piece of paper. Now that I've had to reset everything earlier today by plugging/unplugging stuff per Comcast orders, I'm wondering if all of my previous settings are worthless.
Reading possible solutions on here I tried to set the connection sharing to bridge to avoid the double NAT issue. This resulted in a message that more than one computer had the same IP address and I couldn't access the internet so I went back to sharing the public IP address like I had before.
I had, and I'm trying to have now, IPv4 configured manually. When I use settings like I had before, it tells me the DHCP range is invalid. If I increase the 3rd digit/group of numbers to change the range, it re-boots but I'm unable to get to the internet.
I don't know what I'm doing wrong. Any help?

Thanks to you both for responding. I had actually already read that Networking 3.0 document ... and since options 1-3 were not allowing the QuickVPN to work and options 4+ resulted in lost FIOS TV services I wasn't pursuing any of those options. Out of all of them it sounds like Bridging the Westell would be closest to what I want (enabling the Cisco router to acquire the public IP address). But I'm not willing to sacrifice my TV functions so even that option is a non-starter for me.
Over the past two weeks I have spent some 30 or 40 hours researching and then tinkering with the configuration on the routers (and VPN client software -- QuickVPN and shrewsoft VPN client). So I just invested about 15 minutes in downloading the free TeamViewer software. And although I didn't want to go the "3rd party software" route I'm actually glad I tried it. I now have a working VPN connection via TeamViewer, and through the VPN am able to use windows remote desktop just fine -- which was my goal all along. I'm concerned about the 3rd party software / security ... but at least this works. And I can always disable the TeamViewer Service when I'm not using the software.

Airport Internet Sharing and Double Nat Issue on the road

The Airport express is a very handy little piece of hardware that is particularly easy to pack in a luggage and carry along for those of us that are spending lots of time out of the office and home.
So here is the scenario when I travel and check in into an overseas hotel: I got two iphones, one local network, one my home network, and a Mac Book Pro, and soon, [when it finally ships], an iPad.
That makes it at least 3 MAC addresses in one room, and if i have any visiting colleagues to pack up a presentation, I will have more.
Usually hotels in Asia are well equipped with ethernet points in every room. The problem comes when I want to allow all my gears to connect to the internet.
I can use the Mac Book to share its ethernet connection while tethered to the plug, which not only turns it into an unlikely desktop, but also do not champion stability when it goes in stand by or sleeps and at times it even mixes up which is the access point to the net. Therefore this does not seem to be the best solution.
I can put the AE in bridge mode and plug it straight to the ethernet. But most hotels internet access are designed to charge per MAC address, so every time the router assigns via DHCP an IP to one of my gears it requires to accept new charges for that gear, even if they are all in the same room. This definitely does not seem right either.
Now if I configure the AE to share a public IP address and force it to ignore the double NAT warning, the AE light turns green but the internet sharing does not seem to work at all.
My two questions are:
1) Why can't the AE be configured like the Mac Book to have a simple "Internet Sharing" protocol that will be always live and not going to sleep or stand by like the laptop [As the AE is design to be always online as a wireless connection].
2) is there any way to make that "Share a public IP - *** double NAT" work?
Any feedback is welcome.
Thanks. M

Hi Bob,
thanks for your reply. Yes the only way to work it out on a typical hotel set up is to adopt the bridge mode and sometime the do waive your extra logs in. But I am not always so lucky and I often need to come up with less optimal solution.
This is a bit disappointing when you a have a AE in your luggage and you can't use it properly.
Yet my Mac can work the problem out effortlessly by just "Sharing a internet connection" with the only major limitation of being physically connected to the Ethernet cable.
Why can't the Airport Express do the same thing? Basically the AE could share the internet connection like the Mac Book, i guess introducing a secondary layer of NAT after the Hotel modem/router NAT setup [which is what the MAC Book is doing].
If AE can't do that at all then I guess soon we will just end up shelving it.
I wonder if this is an actual hardware limitation, MAC Book can wire TCP/IP flow to different sources on a double nat and AE can't, or this is just a software limitation and Apple could fix it with a firmware upgrade.
Any thoughts on this?

Status: Double NAT

I have a comcast router connected to the airport extreme then on to airport express.
Comcast just changed their router to bridge only. My airport extreme is flashing yellow w/ Double NAT status. The airport express is fine.
Any suggestions on how to fix the Double NAT issue?
Thanks in advance

As LaPastenague has already noted, you have a modem/router, also known as a gateway device which is providing DHCP and NAT services.
Since the AirPort is also providing NAT services when it is setup as a router, you can easily see where the Double NAT is coming from.
So, one of the "techs" did not even know what type of device you had. That is gross incompetence.
The other two "techs" might have tried, but neither of them was successful setting up the SMC as a simple bridge mode modem......yet they told you they were successful. It just may not be possible to do this with the device that you have.
A simple modem......it will have only one Ethernet port on it......is what you need. It will be in bridge mode by default. When you connect the AirPort to the simple modem, your network will function correctly without errors.
Something like this, for example......http://www.zoomtel.com/products/5341J.html........which is an approved modem for use with Comcast.
Not sure where you want to go from here, but we'll try to help if you have further questions.

My airport extreme has connected to a Tplink router, i set my AE in Create network, so i get a problem of Double NAT. How can i repair this probleme because i have to use TPlink for my IP TV and i want to use AE to creat my network and the guest NW.

my airport extreme has connected to a Tplink router, i set my AE in Create network, so i get a problem of Double NAT. How can i repair this probleme because i have to use TPlink for my IP TV and i want to use AE to creat my network and the guest NW. If we don't have a solution for this question, can i set my AE to use the IP TV and how??? I'm using a 4th Airport extreme

No, not unless it is simply a network connection.
How is your IPTV being provided.. if it is using a separate vlan or separate vpi/vci in the adsl connection. Who is your ISP?
Is the TP-Link ADSL?
Is the IPTV using a separate voice channel on adsl?
Or a different vlan.
Sorry but it is something where a definite answer is not possible unless you provide all the details.
The setups are unique to each ISP around the world..
Here is one for our local ISP.
http://www.avenard.org/iptv/Setup.html
He has a section on getting this working with apple router over wireless.. look
http://www.avenard.org/iptv/IPTV_and_Wireless.html
Google around and see if other people have had success.. the whole setup is tricky.. and it is hard if nobody has used it who actually understands networking.

Double NAT error status after updating to firmware 7.1

This may be a bug. My Airport Extreme was working perfectly, but after updating to firmware 7.1, with no other changes to configuration, it is now reporting a Double NAT error. Both wired and wireless clients still have access to the WAN and each other, so everything still works. I know I can ignore the error, but I wonder if anyone else has seen this issue?
I have a possibly unusual setup -
My DSL modem creates an address of 192.168.1.47 and hands that to the APE as its WAN address. I've configured the APE to hand out addresses to its client machines on the LAN in the 192.168.2.x range and it does that correctly. So there is no actual conflict - the WAN address is 192.168.1.47 and the client addresses are all in the 192.168.2.x range. Could the new software be assuming that the 192.168.1.x range is the NAT range without verifying the actual range is really 192.168.2.x? Seems unlikely, but it appears to be the case.
Any insights on this appreciated....
mac mini Mac OS X (10.4.9) my Airport Extreme is less than a month old

When iTunes attempts to sync photos from iPhoto, it shows the amount of the iPod drive taken up with photos, BUT NO usage on the drive graph itself.
When Sync Photos from iPhoto is deselected and another sync attempted, iTunes asks if photos should be removed from iPod, despite the previous sync being unsuccessful. When I choose to remove the photos, the amount shown taken up by photos disappears.
Does anyone know what the error message quoted in my question above means?
iBook G4 1Ghz/iMac G5 iSight Mac OS X (10.4.3) iPod Photo 40GB

I have a new comcast modem i have connected to Time Capsule with cable, TC in double NAT. As when I tried it in bridge mode I cannot use Sonos, the units will not connect to the wifi network? I thought Bridge mode would make the wifi signal better??

I have the TC connected to the comcast modem, with TC in Double NAT mode. I set up the sonos music players ok. But I read that to incresae the wifi signal the TC should be in Bridge mode. Then I cannot get any of the Sonos units to connect to the wifi network.
So two questions, does the Bridge mode give a better wifi signal then double NAT?
Why will sonos not connect to the network when in Bridge mode?

A PC can have more issues connecting than a Mac.
But it really should not matter.. so just try it in situ.. press and hold the reset.. once it starts up, it will return to default IP, 10.0.1.1 the PC should then be able to find it via the airport utility.
If not drag it over to the Mac and plug in there by ethernet.. or since it is a laptop, really should not be that difficult to drag the Laptop and plug it into the TC.
Important thing is to get access to the TC.
The Mac if it is running lion, then you MUST download and install 5.6 airport utility to do anything useful.
http://support.apple.com/kb/DL1482

I need Double NAT

My home Network is a T1 shared to the whole apartment building there for I need double NAT. That said, it worked fine before the 7.1 update. I don't think the AEBn even complained. After the update, it complained. I choose to ignore it but I'm still unable to get internet access unless I switch to Bridge mode.
All the basics have been addressed. DCHP is set to the 192 range, I've restarted everything, everything is fully updated, and so on. The WAN IP(in the 10 range) and DNS address don't expire after switching form Bridge to Share Public. Which is to say they work in Bridge but not in Share Public mode.
Any ideas? My thought is to roll back to the 7.0 firmware.

James, Ok, cool. Now were on the same page. Yeah, the AEn WAN is set to DHCP which it gets from the ISP's Cisco Router. I haven't changed any DNS settings. I tried switching the WAN to manual and then back to DCHP (release and renew) to see if that might help but it didn't. i even got the same IP back. Even so, that info is right. I don't bother with the Network Diagnostic application. (your referring to the help wizard that comes up when you can access the internet in Safari right?)
JUG, I'm not able to access the TI router, it's locked away from residents of the building, and if I could I don't think the other residents would like me steal the T1 for myself:) Also, I know some of these support threads are long and hard to follow (not this one), but if your going to try and help anyone it helps to have read the post as so we don't have to make posts unnecessarily longer talking in circles. You will note I did snip, right away, even at your first question:)
I have a open ticket with Apple regarding this issue. They are currently researching the issue and I hope to here back soon.
So, I added a USB drive to the AEn, set it up with Account level access (which is kinda cool) Each account gets their own private folder in addition to the Public one, and none of the data that was there previously is visible. Cool.
Anyway, after the AEn reset I now have a new error warning message. (running in Bridge mode still) It says the WAN port is in invalid and I may not be able to access the internet, I should check the dsl modem... or something to that effect. Of course it is valid, 10.0.1.26, as provided by the T1 Cisco router and I have internet access. Strange to just now be getting this error, even after being on call with Apple and not getting it.
I have a open ticket with Apple regarding this issue. They are currently researching the issue and I hope to here back soon.

Time Capsule Double NAT error

Hello,
I would really like some advice on double NAT and bridge mode before I respond to an error message on my mothers macbook/ TC settings. She recently had some extremely high uploads (approx 10GB that ate up all of her allowance) at times when she was not at her computer and so I reset her TC and changed the WEP password to something really obscure to try and prevent anyone from hacking in to her wifi network.
She has a basic set up: Cable modem connected directly to the Time capsule with no other airports connected to the network. She uses a standard 2010 13"Macbook to access the internet over wifi.
Twice in the last week (once before she noticed the massive uploads and today at about the same time as her internet service says she had a 150MB download that she did not have) she has received an error that says:
"Double NAT
This Airport wireless device has a private IP address on its Ethernet WAN port. It is connected to a device or network that is using Network Address Translation (NAT) to provide private IP addresses. You should change your Airport wireless device from using DCHP and NAT to bridge mode"
My question is - will following these instructions fix her download problems or make it worse?
Also, is there any other way I can prevent someone from hacking into her network.
All advice welcome
Thanks
Emma

Having a double NAT, indicates that TWO devices on your network are performing Network Address Translation, I am not a complete expert on this or anything but it's not that big an issue, you probably just need to turn off NAT on your Mom's modem.
But this definitely IS NOT causing her issue of using up all her Data allowance with her ISP. Having a double NAT just complicates the network and can cause problems with certain apps. But It will NOT increase data use.
You should use WPA2 as the type of network encryption.
You can use Mac Address Filtering as some kind of added protection.
You could have a Non Broadcast SSID but this again is really only trivial protection, WPA2 with a STRONG password is your best bet.
Hope this helps,
Anything else I can do just let me know,
PS you should check the DHCP client list or attached client list in Airport settings to see if someone else is using your Mom's bandwidth.
Regards,
John
Message was edited by: JohnAlanWoods - Forgot to include the word 'NOT'

Since cahnging FIOS Internet provider, which required a router to go in front of "AirPort" I have a blinking yellow on the AirPort and suggested editing in AirPort utility to cahnge from Double NAT to "Bridge Mode" my knowledge base is not clear as t

How do I clean up my new FIOS connection? I just cahnged ISP Fios and they reqquired a router of thier own in front of my AirPort Extreme. Since then I have blinking yellow light on the AirPort and AirPort utility keeps promting for an edit. Suggests canging from NAT to "Bridge mode". Obviuosly U have some internet or this post would not go anywhere, my knowledge base is not enought to feel comfortable with changing the settings. Correctly editing can be tricky, so how do I make necessary changes?

How do I clean up my new FIOS connection?
The FIOS router needs to be in Bridge Mode to prevent the Double NAT error from occurring when two routers are both fighting with each other for control of the network.
Unfortunately, the likely problem from the FIOS side is that FIOS support will either tell you that their router cannot be configured to operate in Bridge Mode, or if it can, they will not tell you how to do it.
But, it could not hurt to check with FIOS to see if anything might have changed recently in this regard, so your first call would be to FIOS support.
If you cannot change the FIOS router to Bridge Mode, the alternate plan would be to change the AirPort Extreme to Bridge Mode. If you are using the Guest Network feature on the AirPort Extreme at this time, that feature will not work correctly when the AirPort is set up in Bridge Mode.

Why do I lose internet connection when I put airport extreme into bridge mode to correct Double NAT issue

I reset my airport extreme router the other day because I was too lazy to reset the password on my private network.
I have been reading the advice found on apple support communities and wide web, but the solutions do not solve any problems and often create new ones.
I'm regretting because everything was working just fine.
But I remember having this double nat error when I first set it up a few months back, but now I cannot resolve it.
I would live with the yellow light, but it seems that this double nat error is preventing my playstation 3 from connecting to the airport extreme.
When I put the aiport extreme into bridge mode, I loose all my wireless networks, even when I reboot the airport extreme and the modem.
I try rebooting the modem, then the airport. and vice versa. No internet.
I switch back to NAT/DCHP and the internet works fine on apple devices, but not the playstation 3, and I have the 1 Double NAT error.
I have a plain stock Motorolla modem and I can dial in and see settings (although nothing about NAT). I didn't see where to see them.
I tried setting the DHCP only but it said it didn't like the settings. is there a stock range i could be using?

I have a plain stock Motorolla modem and I can dial in and see settings (although nothing about NAT). I didn't see where to see them.
Exact model .. motorola make adsl, cable and probably wireless modems.. with some modems and some modem router.. we need exact info. What kind of broadband do you have?
I would note.. some of the motorola cable modems seem to have issues with the apple routers. If you are about due to change modems.. now is a good time.. not another motorola.
If the modem is a straight cable modem, the AE must be in router mode.. but you need to power down the cable modem. maybe for 20min so the new router can pick up the IP address.
You cannot use DHCP alone.. the ISP do not give you a block of IP addresses.
You cannot use bridge with a pure modem.. you will find it works.. but only to one device.
The only reason you get double NAT is the failure to pick up the public IP.
Give the info required..
If you have trouble, I need the actual IP of the modem. the actual IP of the AE WAN port when plugged in. Screenshots are good.

I live in an apartment with supplied internet. I have wireless network with no password. I have a wall outlet that I can plug into. When I plug in my TC I get a double NAT error. I try bridge mode, but I can't get the internet to work.

Can I get an explanation of what bridge mode is?
Can I get suggestions on what I should do to use the TC as a wireless device to spread the same wireless device my apartment is broadcasting?
Can I get a suggestion on how to use the TC as a different wireless device with it's own password without access to the cable modem. I only have access to a wall port.
I own many apple devices, iMac mid-2011, Macbook Air 2013, 2 ipads, and 2 iphones for the family, and Apple TV.
I want all my devices to be on a password related internet but the double nat on my TC makes weird things happen and slow. I try bridge mode but the internet doesn't work.
I hope I have described this situation clearly enough.
Thanks

I want all my devices to be on a password related internet but the double nat on my TC makes weird things happen and slow. I try bridge mode but the internet doesn't work.
You building supplied internet is a cheap service that is without proper routable addresses..
Therefore to use more than one IP you MUST have double NAT.. sorry there is no choice..
Slow that is because you are sharing internet with every other person in the building.. get your own broadband service.
Bridge will not work.. it cannot work because the building only has private IP addressing. And they only give you a single address.
You can put a password on the wireless.. go to the airport utility and put in a password.
Other than that I don't understand what password you expect.
Can I get an explanation of what bridge mode is?
No NAT.. means the TC becomes a dumb Wireless AP and switch.. works fine with a cable modem router.. or any broadband router but useless with your building system.
Can I get suggestions on what I should do to use the TC as a wireless device to spread the same wireless device my apartment is broadcasting?
Double NAT, and set your own wireless names. There is no alternative.. sorry.

No DNS and Double NAT

Hello, I've recently encountered a very frustrating bug in my system that I could use some help troubleshooting. I've read several similar posts, some are resolved while others are not, however none of the resolutions have worked for my situation. Here it goes:
I have an old macbook pro, a new macbook air, a white macbook and 2 iPhone 4s's all connected to the internet via WiFi through an AirPort Extreme. The AE is connected to a cable modem which has internet service through Cablevision in NY. There is also an AT&T Microcell hooked up to the AE to boost my cell signal. All of this equipment has been working flawlessly together for a long time. Until recently. It could have started after an update, there have been several lately on all of the equipment including the firmware in the AE. Anyway, I'll be connected without any issues - all lights green and happy - when suddenly, the internet will drop off and the AirPort Utility will pop up and warn me that:
1) On the "internet" icon, it will say "disconnected"
2) On the AE icon, it says "No DNS server and Double NAT"
After a few minutes and nothing done on my part, the lights turn green, the internet reconnects and all is well again.
This happens frequently and is really beaching a nuisance. Due to the frequency of the disconnection, I can no longer download a large file, update, or anything. Streaming video is impossible.
So far, I have tried bridge mode and cycled the power in the order recommended to no avail. When I do that, the AE turns green, but the internet says "not connected". I have also read that there might be too many IP addresses which is not sitting well with my ISP, so I disconnected everything including unplugging the Microcell. Lastly, there are no other wireless phones or devises in the house. All to no avail.
I should also mention that this began occurring on my Time Capsule, which I replaced with the AE in an attempt to fix this issue.
Any help would be greatly appreciated.
Joe

Sounds very similar to what I've been trouble shooting for 2 months now, only I have DSL from AT&T and I don't see the Double NAT warning. My last post on the problem is here.
My only emergency solution for getting by day to day on the internet is to unplug the AE and connect one Mac directly to the DSL modem. There's no shared connection or WiFi. I looked at hosting WiFi from the Mac, but the only security available with that is WEP which isn't considered secure. Even with this set up, I think (seat of the pants) that there are quality of service problems.
I've replaced the Airport Extreme with 2 different new units and the DSL modem with a new unit to no avail. The Genius Bar and Apple phone support couldn't solve this, nor have 2 calls to AT&T support and one visit from an AT&T repairman.
I would like to know how to better test or quantify the poor quality of connection that seems to be the problem.

Time Capsule - No DNS servers and Double NAT

I'm connecting an MBP running 10.5.6 to a Time Capsule which accesses Virgin Media broadband using a cable modem.
It has been working fine for 6 months, but I made some changes this morning to get my wireless camera onto the network, which broke the connection, and don't seem to be able to undo them.
The TC now flashes amber, and going into Airport Utility I get the following errors:
- No DNS Servers
- Double NAT
I've typed the DNS servers' IP addresses for my ISP into Airport Utility but it doesn't seem to recognise them. It also complains about a double NAT problem but I don't have another router assigning IP addresses.
I've also tried a hard reset on the TC, switched it and the modem off, waited 30 mins and then switched back on again - no luck.
Screenshots of all the settings on my TC from Airport Utility are here:
http://web.me.com/julianlove/Site/TimeCapsule.html
I'm not very knowledgeable about networking so any assistance appreciated.

Double NAT is an indication that you have two devices on the network both trying to perform routing duties. You only want one device doing this on a network. Solve the NAT issue and the DNS issue will go away as well.
What is the make and model number of the device that you call your "modem"?

Double Natting Question

Similar Messages

Maybe you are looking for