Friday, March 6, 2015

How to avoid double-NAT with Netgear VVG2000 VDSL router/modem?

I have a Netgear VVG2000 VDSL router/modem from my ADSL provider. Its Ethernet ports are 10/100 and it doesn't have external wireless antennae, so I'd rather stick to my D-Link DIR-655 as the primary router. I'm connecting to my ISP using PPPoE. Therefore, my current configuration is this:




All wireless and wired devices --> D-Link router --> WAN port connected to LAN port on the Netgear --> PPPoE to ISP



The D-Link router is doing DHCP; I turned off DHCP on the Netgear. However, they're not in the same subnets -- the Netgear is at 10.0.0.138, the D-Link's WAN port gets 10.0.0.1, and the D-Link distributes IPs in the 192.168.0.0/24 subnet.



However, I want to avoid double NAT (e.g. so that Windows Home Server Remote Access works properly). What I tried so far:



A) Use the hidden /mode.htm page on the router's website to put it in "Modem" mode and set up PPPoE on the D-Link. After doing this, the D-Link failed to get an IP using PPPoE.



B) Turned off NAT on the Netgear. After doing this, the Netgear acquires an IP from the ISP but there's no Internet connectivity from any device connected to the D-Link.




C) Switched NAT to "Bridge" on the Netgear. Result same as in B.



D) Put the D-Links IP address as the DMZ computer in the Netgear's configuration. This actually worked (including Windows Home Server automatic port forwarding so no double NAT) but the Internet connection got significantly slower. Speedtest.net and my ISP's internal speed test site both report a 6x slowdown (5Mbps instead of 30Mbps).



E) There's a similar question answered here but I'm concerned with this solution because it seems that all traffic will go through the external router (the Netgear in my case) and it doesn't support Gigabit Ethernet.



Ideally, I would want to dumb down the Netgear as much as possible, and use it only as the necessary bridge to my ISP. How can I do this?

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...