HT3477 Double NAT issue?

What if the AE Gen 5 is connected to an existing DHCP server? ... how do you set up the AE to allow a Guest Network?
Thanks,
Neil

The Guest Network can only be enabled when the AirPort Extreme is configured to provide DHCP and NAT services.
If you already have another router on the network "upstream" from the AirPort Extreme, then the AirPort should be configured to operate in Bridge Mode to work correctly on the network. Unfortunately, the Guest Network feature cannot be enabled when the AirPort is in Bridge Mode. It's a Catch 22.
I am not recommending that you do this, but if you want to try to "break the rules" and run two devices both providing routing services on the network, you can try things out to see if they might work.
Assuming that you don't have DHCP IP address conflicts, you will always have a Double NAT condition when you do this. Double NAT will slow communications a bit and may produce other unpredictable results on the network. This "error" can range from a minor annoyance to a deal killer depending on what you are trying to accomplish and what other devices you might have on the network.
AirPort Utility does allow you to "ignore" the error, so the AirPort will display a green light even though the Double NAT condition exists.
If you decide to try this, let us know how things are working for you.

Similar Messages

  • Could DirectTv server be causing my Double Nat Issues?

         Could DirectTv server be causing my Double Nat Issues? I am using an older Motorola Modem, then my Airport Extreme, then my airport express in bridge mode.  The DirectTv server seems to be plugged in before the Airportr Express so I am pretty sure it is no getting any info from the Airport Extreme but I am not sure.   
         The modem is model Motorola SurfBoard 5101U.  I do not beleive it has router capabilities. 
         The problem seems to only come up when I am using my Mac Book Pro (Mavericks).  Usually only when trying to download large files.  It does not effect my ipads or iphones.  Very strange.
        I've been racking my brain on this for a year. 
    Thanks,
    Stephen

    So, I run into some similar problems. I used to have the HD-DVR pre-Genie, which is when I started seeing some of the problems that my AirPort Utility was reporting. I hardwire every connection where possible. I currently run out of my AirPort TC into a switch. From the switch I go out to the rest of the house including an Apple TV and the new Genie. Along with multiple other wall ports, etc.
    It seems to me that whenever I have my Genie hardwired in - for extended period of times my network will "crash" and I will receive an error of Double NAT. Once I unplug the DirecTV from the network, everything goes back to working fine. This ocurred on the old HD-DVR as well as the Genie.
    I would welcome any ideas or suggestions.
    I am running a Motorola SURFboard S86141, New AirPort Extreme TC, and a Netgear 8-Port Switch.
    Thank you in advance for your help!!
    Billy Trimble

  • Why do I lose internet connection when I put airport extreme into bridge mode to correct Double NAT issue

    I reset my airport extreme router the other day because I was too lazy to reset the password on my private network.
    I have been reading the advice found on apple support communities and wide web, but the solutions do not solve any problems and often create new ones.
    I'm regretting because everything was working just fine.
    But I remember having this double nat error when I first set it up a few months back, but now I cannot resolve it.
    I would live with the yellow light, but it seems that this double nat error is preventing my playstation 3 from connecting to the airport extreme.
    When I put the aiport extreme into bridge mode, I loose all my wireless networks, even when I reboot the airport extreme and the modem.
    I try rebooting the modem, then the airport. and vice versa. No internet.
    I switch back to NAT/DCHP and the internet works fine on apple devices, but not the playstation 3, and I have the 1 Double NAT error.
    I have a plain stock Motorolla modem and I can dial in and see settings (although nothing about NAT). I didn't see where to see them.
    I tried setting the DHCP only but it said it didn't like the settings. is there a stock range i could be using?

    I have a plain stock Motorolla modem and I can dial in and see settings (although nothing about NAT). I didn't see where to see them.
    Exact model .. motorola make adsl, cable and probably wireless modems.. with some modems and some modem router.. we need exact info. What kind of broadband do you have?
    I would note.. some of the motorola cable modems seem to have issues with the apple routers. If you are about due to change modems.. now is a good time.. not another motorola.
    If the modem is a straight cable modem, the AE must be in router mode.. but you need to power down the cable modem. maybe for 20min so the new router can pick up the IP address.
    You cannot use DHCP alone.. the ISP do not give you a block of IP addresses.
    You cannot use bridge with a pure modem.. you will find it works.. but only to one device.
    The only reason you get double NAT is the failure to pick up the public IP.
    Give the info required..
    If you have trouble, I need the actual IP of the modem. the actual IP of the AE WAN port when plugged in. Screenshots are good.

  • Airport Internet Sharing and Double Nat Issue on the road

    The Airport express is a very handy little piece of hardware that is particularly easy to pack in a luggage and carry along for those of us that are spending lots of time out of the office and home.
    So here is the scenario when I travel and check in into an overseas hotel: I got two iphones, one local network, one my home network, and a Mac Book Pro, and soon, [when it finally ships], an iPad.
    That makes it at least 3 MAC addresses in one room, and if i have any visiting colleagues to pack up a presentation, I will have more.
    Usually hotels in Asia are well equipped with ethernet points in every room. The problem comes when I want to allow all my gears to connect to the internet.
    I can use the Mac Book to share its ethernet connection while tethered to the plug, which not only turns it into an unlikely desktop, but also do not champion stability when it goes in stand by or sleeps and at times it even mixes up which is the access point to the net. Therefore this does not seem to be the best solution.
    I can put the AE in bridge mode and plug it straight to the ethernet. But most hotels internet access are designed to charge per MAC address, so every time the router assigns via DHCP an IP to one of my gears it requires to accept new charges for that gear, even if they are all in the same room. This definitely does not seem right either.
    Now if I configure the AE to share a public IP address and force it to ignore the double NAT warning, the AE light turns green but the internet sharing does not seem to work at all.
    My two questions are:
    1) Why can't the AE be configured like the Mac Book to have a simple "Internet Sharing" protocol that will be always live and not going to sleep or stand by like the laptop [As the AE is design to be always online as a wireless connection].
    2) is there any way to make that "Share a public IP - *** double NAT" work?
    Any feedback is welcome.
    Thanks. M

    Hi Bob,
    thanks for your reply. Yes the only way to work it out on a typical hotel set up is to adopt the bridge mode and sometime the do waive your extra logs in. But I am not always so lucky and I often need to come up with less optimal solution.
    This is a bit disappointing when you a have a AE in your luggage and you can't use it properly.
    Yet my Mac can work the problem out effortlessly by just "Sharing a internet connection" with the only major limitation of being physically connected to the Ethernet cable.
    Why can't the Airport Express do the same thing? Basically the AE could share the internet connection like the Mac Book, i guess introducing a secondary layer of NAT after the Hotel modem/router NAT setup [which is what the MAC Book is doing].
    If AE can't do that at all then I guess soon we will just end up shelving it.
    I wonder if this is an actual hardware limitation, MAC Book can wire TCP/IP flow to different sources on a double nat and AE can't, or this is just a software limitation and Apple could fix it with a firmware upgrade.
    Any thoughts on this?

  • Question # 2--how to avoid the DHCP conflict issue, double NAT, etc.

    I'm having a tough day wasting hours working on the TC. It once worked fine for a year. Now, I'm struggling to maintain a connection at all.
    I may be doing this wrong but I'm using two screens to manage this.
    1. preferences/network
    2. the TC internet connection settings
    I had written all of my settings that worked on a piece of paper. Now that I've had to reset everything earlier today by plugging/unplugging stuff per Comcast orders, I'm wondering if all of my previous settings are worthless.
    Reading possible solutions on here I tried to set the connection sharing to bridge to avoid the double NAT issue. This resulted in a message that more than one computer had the same IP address and I couldn't access the internet so I went back to sharing the public IP address like I had before.
    I had, and I'm trying to have now, IPv4 configured manually. When I use settings like I had before, it tells me the DHCP range is invalid. If I increase the 3rd digit/group of numbers to change the range, it re-boots but I'm unable to get to the internet.
    I don't know what I'm doing wrong. Any help?

    Thanks to you both for responding.  I had actually already read that Networking 3.0 document ... and since options 1-3 were not allowing the QuickVPN to work and options 4+ resulted in lost FIOS TV services I wasn't pursuing any of those options.  Out of all of them it sounds like Bridging the Westell would be closest to what I want (enabling the Cisco router to acquire the public IP address).  But I'm not willing to sacrifice my TV functions so even that option is a non-starter for me.
    Over the past two weeks I have spent some 30 or 40 hours researching and then tinkering with the configuration on the routers (and VPN client software -- QuickVPN and shrewsoft VPN client).  So I just invested about 15 minutes in downloading the free TeamViewer software.  And although I didn't want to go the "3rd party software" route I'm actually glad I tried it.  I now have a working VPN connection via TeamViewer, and through the VPN am able to use windows remote desktop just fine -- which was my goal all along.  I'm concerned about the 3rd party software / security ... but at least this works.  And I can always disable the TeamViewer Service when I'm not using the software. 

  • Status: Double NAT

    I have a comcast router connected to the airport extreme then on to airport express.
    Comcast just changed their router to bridge only.   My airport extreme is flashing yellow w/ Double NAT status.  The airport express is fine.
    Any suggestions on how to fix the Double NAT issue?
    Thanks in advance

    As LaPastenague has already noted, you have a modem/router, also known as a gateway device which is providing DHCP and NAT services.
    Since the AirPort is also providing NAT services when it is setup as a router, you can easily see where the Double NAT is coming from.
    So, one of the "techs" did not even know what type of device you had. That is gross incompetence.
    The other two "techs" might have tried, but neither of them was successful setting up the SMC as a simple bridge mode modem......yet they told you they were successful. It just may not be possible to do this with the device that you have.
    A simple modem......it will have only one Ethernet port on it......is what you need. It will be in bridge mode by default. When you connect the AirPort to the simple modem, your network will function correctly without errors.
    Something like this, for example......http://www.zoomtel.com/products/5341J.html........which is an approved modem for use with Comcast.
    Not sure where you want to go from here, but we'll try to help if you have further questions.

  • Creating Two Networks with Different Securities and Double NAT Error

    I have a Time Capsule which is connected to my cable modem and an AirPort Extreme connected to my Time Capsule via the WAN port. I configured the AEBS to create a wireless network using WEP (I have a few devices that don't support WPA) so I can use two different wireless securities. The AEBS flashes the amber light and once I connect to its network, the AirPort Utility states that it has a "Double NAT" issue. I used my iPhone 5 to connect to the AEBS network and I can access the Internet just fine.
    Is this issue one that can be resolved? If so, how? Or do I ignore the issue? If I ignore, what are the implications?
    Thanks!

    You need to configure the AEBS in Bridge Mode to eliminate the Double NAT error, which is slowing down your connection...and may likely cause other issues depending on how the network is configured.
    If you do not know how to do this, we need to know what operating system you are using on the computer that is being used to configure and setup the AEBS.

  • Trying to setup Time Capsule, how do i fix status that says "double NAT", preventing wifi from working?

    In setting up Time Capsule, it won't connect to wifi.  In the status pop up of the Time Capsule under the Airport Utility it says "Double NAT".  I dont' know how to fix that.
    Thanks.

    This is one goofy modem that acts as if it is a router, so that is why the Double NAT issue is appearing.
    There are two ways to tackle this:
    1)  If everything seems to be working OK, you have the option to click to "Ignore" the Double NAT error in AirPort Utility and the Status light will turn green.
    Double NAT is usually not too serious of an error on a simple home network, but it will be a deal killer if you have an online gaming console and want to play games interactively on the Internet.
    Your connection will slow slightly because of the multiple NAT firewall layers the signal must pass through, but you will likely not notice this in normal browsing, email, etc.
    2)  Reconfigure the modem to act in "bridge mode" only and then change the method that the Time Capsule uses to connecf from Ethernet to PPPoE service.  There will be no NAT errors this way and this is what AT&T recommends....see link below.....but we are talking about some major surgery here.
    http://www.att.com/esupport/article.jsp?sid=KB401764&cv=801,902&title=Connecting +a+non-AT%26T+provided+router+to+your+AT%26T+Internet+connection#fbid=kfca5LRlzv D

  • No DNS and Double NAT

    Hello, I've recently encountered a very frustrating bug in my system that I could use some help troubleshooting.  I've read several similar posts, some are resolved while others are not, however none of the resolutions have worked for my situation.  Here it goes:
    I have an old macbook pro, a new macbook air, a white macbook and 2 iPhone 4s's all connected to the internet via WiFi through an AirPort Extreme.  The AE is connected to a cable modem which has internet service through Cablevision in NY.  There is also an AT&T Microcell hooked up to the AE to boost my cell signal.   All of this equipment has been working flawlessly together for a long time.  Until recently.  It could have started after an update, there have been several lately on all of the equipment including the firmware in the AE.  Anyway, I'll be connected without any issues - all lights green and happy - when suddenly, the internet will drop off and the AirPort Utility will pop up and warn me that:
    1) On the "internet" icon, it will say "disconnected"  
    2) On the AE icon, it says "No DNS server and Double NAT"
    After a few minutes and nothing done on my part, the lights turn green, the internet reconnects and all is well again. 
    This happens frequently and is really beaching a nuisance.  Due to the frequency of the disconnection, I can no longer download a large file, update, or anything.  Streaming video is impossible.
    So far, I have tried bridge mode and cycled the power in the order recommended to no avail.  When I do that, the AE turns green, but the internet says "not connected".  I have also read that there might be too many IP addresses which is not sitting well with my ISP, so I disconnected everything including unplugging the Microcell.  Lastly, there are no other wireless phones or devises in the house.  All to no avail.
    I should also mention that this began occurring on my Time Capsule, which I replaced with the AE in an attempt to fix this issue. 
    Any help would be greatly appreciated.
    Joe

    Sounds very similar to what I've been trouble shooting for 2 months now, only I have DSL from AT&T and I don't see the Double NAT warning.  My last post on the problem is here. 
    My only emergency solution for getting by day to day on the internet is to unplug the AE and connect one Mac directly to the DSL modem.  There's no shared connection or WiFi.  I looked at hosting WiFi from the Mac, but the only security available with that is WEP which isn't considered secure.  Even with this set up, I think (seat of the pants) that there are quality of service problems. 
    I've replaced the Airport Extreme with 2 different new units and the DSL modem with a new unit to no avail.  The Genius Bar and Apple phone support couldn't solve this, nor have 2 calls to AT&T support and one visit from an AT&T repairman.
    I would like to know how to better test or quantify the poor quality of connection that seems to be the problem.

  • Time Capsule - No DNS servers and Double NAT

    I'm connecting an MBP running 10.5.6 to a Time Capsule which accesses Virgin Media broadband using a cable modem.
    It has been working fine for 6 months, but I made some changes this morning to get my wireless camera onto the network, which broke the connection, and don't seem to be able to undo them.
    The TC now flashes amber, and going into Airport Utility I get the following errors:
    - No DNS Servers
    - Double NAT
    I've typed the DNS servers' IP addresses for my ISP into Airport Utility but it doesn't seem to recognise them. It also complains about a double NAT problem but I don't have another router assigning IP addresses.
    I've also tried a hard reset on the TC, switched it and the modem off, waited 30 mins and then switched back on again - no luck.
    Screenshots of all the settings on my TC from Airport Utility are here:
    http://web.me.com/julianlove/Site/TimeCapsule.html
    I'm not very knowledgeable about networking so any assistance appreciated.

    Double NAT is an indication that you have two devices on the network both trying to perform routing duties. You only want one device doing this on a network. Solve the NAT issue and the DNS issue will go away as well.
    What is the make and model number of the device that you call your "modem"?

  • Back to my Mac: Double NAT error

    I can't seem to get Back to my Mac to work. My Airport Extreme says that I have a double NAT error. I have tried to put it in Bridge mode, but doing so disables the wireless capabilities of the Airport Extreme.
    The geography of my network is as follows:
    Cable port on wall> Cable modem
    Cable modem> Ethernet> Airport Extreme
    Airport Extreme> WiFi> Macbook Pro
    I have a Motorola surfboard modem, which I have called Motorola about and they say that it does not provide a layer of NAT. I have called my ISP and they confirmed that they do not provide a layer of NAT as well.
    Does anyone have any ideas on how to resolve this issue?

    FiggyOO wrote:
    I have confirmed that my modem is simply a modem, no gateway. In case you were wondering its a Motorola SB5101U. According to the Airport utility, my IP is 10.1.4.104.
    If that's really the "WAN" IP address of your AirPort unit, then it's a "private" IP address, as it's in one of the private address ranges of 10.0.0.0 - 10.255.255.255, 172.16.0.0 - 172.31.255.255, and 192.168.0.0 - 192.168.255.255. You can verify that address in the AirPort Utility Internet panel, TCP/IP tab. Unless your ISP tells you otherwise, you should have the "Configure IPv4" set to "Using DHCP" and the WAN IP address should be just below that.
    If that address checks out, something "upstream" of your AirPort unit is doing a NAT operation.
    The manuals I found for your modem seem to confirm that it has no router functionality, so it would be unable to be the source of the NAT.
    I'd call your ISP and ask them why your modem is passing you a "private" IP address. There no need (at least initially) to mention what you have connected to the modem, as that would only tend to confuse the support people.

  • How do I correct a Double NAT status?

    I have used time capsule 2TB for a while, made changes many times,never had a problem but today after I made changes it is giving me a blinking amber light from the time capsule unit and from the airport wireless utility status "Double NAT". How can I correct this status?
    Thank you in adavnce for the help.

    Hi Thortey,
    If you are having issues with a "Double NAT" notification, you may want to take a look at the following article; while it speaks to Double NAT specifically in the context of Back to My Mac, the information and resolution steps for a Double NAT configuration should be universal:
    Back to My Mac: "Double NAT" configurations may prevent Back to My Mac connections
    http://support.apple.com/kb/TS1208
    Cheers,
    - Brenden

  • Conflicting DHCP & Double NAT on Network

    I have an older TC providing network service both via ethernet and wireless in my house.  I have a 1st Generation Airport Express connected wirelessly to extend the network.  I have a 2nd Gen Airport express connected via ethernet to extend the network.  This ethernet connection is coming via a Netgear 10/100 Switch.  Both Airport express devices are set in bridge mode.  The TC is set in DCHP & NAT.  Per a previous discussion with an applecare representative, I was instructed to ignore the Double NAT message, which worked fine.  However, since I've been able to connect the 2nd Gen Airport express via ethernet, it seems to set up fine, but at some point gets kicked off the network.  Also, upon setting up the express via ethernet, i get the conflicting DCHP message.  In following the previous applecare suggestion to ignore the Double NAT, i went ahead and ignored the conflicting DCHP message as well.  Should I simply set the TC to bridge mode?  I seem to remember the applecare representative saying that wasn't a good idea.  I have the TC hooked to receive the broadband signal via an AT&T modem and I've set the modem to not broadcast any wireless signal. 
    To conclude, as currently set up, all systems are working fine, with the exception of the Double NAT and Conflicting DCHP warnings on the TC.  However, if past history is suggestion of upcoming experience, the express linked via ethernet will eventually get kicked off the network. 
    All these settings have been directed via the Airport Utility 6.3.2
    Many thanks if anyone has suggestions. 
    ~ds

    Per a previous discussion with an applecare representative, I was instructed to ignore the Double NAT message, which worked fine.
    Wow. Maybe I am not understanding what you are saying.
    A Double NAT message would indicate a basic configuration error on the network. Trying to fix an error by ignoring it will not make the error go away.
    Things might work OK for a limited time, but eventually the error is going to cause issues on the network.
    However, since I've been able to connect the 2nd Gen Airport express via ethernet, it seems to set up fine, but at some point gets kicked off the network.
    As I said.....Things might work OK for a limited time, but eventually the error is going to cause issues on the network.
    Also, upon setting up the express via ethernet, i get the conflicting DCHP message.  In following the previous applecare suggestion to ignore the Double NAT, i went ahead and ignored the conflicting DCHP message as well.
    Ignoring two errors is going to cause issues as well.
    Should I simply set the TC to bridge mode?
    Yes, as well as all of the other AirPorts on the network......assuming that you have an ATT modem/router. What is the make and model number of your ATT device that provides your Internet connection?
    On the other hand, if you have a simple ATT modem only, it is the modem that should be configured in Bridge Mode.
    I suggest that you explore a bit different strategy for configuring your network......the correct method that follows basic networking rules.

  • E4200 v1 - NAT issue - and more....

    Please bear with me, I try to make things work - but my skills are not enough for this... Please help anyone..
    2 things:
    #1)
    I want to Disable NAT on my E4200 v1 with latest FW, since already my ADSL modem does this,... or the other way around - but it does not make much sense they both do it...
    My problem is how to set up the static route..
    ADSL modem
    IP:192.168.01  (GT784WN)  with NAT enabled, and all other filters disabled.
    E4200
    Internet IP: 192.168.0.2
    GW: 192.168.0.1
    LAN IP: 192.168.1.1
    How should I set up the static route on E4200 for things to work with NAT disabled?
    Would it make sense to disable NAT on the cable modem instead - and let E4200 handle that?
    If so - how would the routing have to be configured?
    #2)
    All my computers are connected to E4200, some with wire and some wireless....
    In Windows, Explorer, Network - On top there is supposed to be a list with recognized "Computers",
    What I see, varies A LOT....
    I always see the computer itself: MYFS01,
    and I always see the E4200 (MyHUB) (why this is here I don't understand either - I have Media services disabled in E4200)
    If I unplugg the E4200 from power... and plug back in again,.. I get ALL Computers listed... Backup device connected via LAN, some WiFi connected devices including my PlayBook,... - but after some time, anything from a few minutes to an hour - most "computers" dissapear from the list - and won't get back until I unplug the E4200.. A reboot of any of the computers does not work either...
    I have noticed - that When the list of "computers" in Windows are reduced, I am unable to do a "net view" from my main computer (MYFS01), but after I reboot the E4200, and devices pops up again,... doing a "net view" show all the computers...
    Also - While they do not show up in Windows Explorer, I can still access ALL computers and devices - with both \\IP access or \\computername ... 
    To test, I then took away the E4200 and used ONLY the ADSLmodem (GT784WN) - and I see all Computers always...
    Now I don't understand anything - I first thought this was a Windows 7 issue, but - since it seems to be working with another Switch/router - I suspect the E4200 to be the bad one... but - I could of course be wrong,,,,
    ANY assistance would be appreciated...
    thanx

    You are correct.  You do NOT want double NAT'ing going on.
    You need to put your GT784WN into bridge mode.
    Perform a Google search on "GT784WN bridge mode".  I found some good links that looked like they would help you do this.
    Putting your GT784WN into bridge mode will turn it into modem only.  You should also turn off all firewall, security, uPnP, wireless, etc settings on the GT784WN.  You need to dumb it down as much as possible.  The E4200 v1 needs to do all the work.
    This is exactly what I did with my Arris cable DOCSIS 3.0 router.

  • Double NAT error status after updating to firmware 7.1

    This may be a bug. My Airport Extreme was working perfectly, but after updating to firmware 7.1, with no other changes to configuration, it is now reporting a Double NAT error. Both wired and wireless clients still have access to the WAN and each other, so everything still works. I know I can ignore the error, but I wonder if anyone else has seen this issue?
    I have a possibly unusual setup -
    My DSL modem creates an address of 192.168.1.47 and hands that to the APE as its WAN address. I've configured the APE to hand out addresses to its client machines on the LAN in the 192.168.2.x range and it does that correctly. So there is no actual conflict - the WAN address is 192.168.1.47 and the client addresses are all in the 192.168.2.x range. Could the new software be assuming that the 192.168.1.x range is the NAT range without verifying the actual range is really 192.168.2.x? Seems unlikely, but it appears to be the case.
    Any insights on this appreciated....
    mac mini   Mac OS X (10.4.9)   my Airport Extreme is less than a month old

    When iTunes attempts to sync photos from iPhoto, it shows the amount of the iPod drive taken up with photos, BUT NO usage on the drive graph itself.
    When Sync Photos from iPhoto is deselected and another sync attempted, iTunes asks if photos should be removed from iPod, despite the previous sync being unsuccessful. When I choose to remove the photos, the amount shown taken up by photos disappears.
    Does anyone know what the error message quoted in my question above means?
    iBook G4 1Ghz/iMac G5 iSight   Mac OS X (10.4.3)   iPod Photo 40GB

Maybe you are looking for