The eero Beacon is not a router at all: it is a plug-in extender with no Ethernet port that depends on an eero router or Pro elsewhere in the house to be the gateway, so a double NAT on a network with Beacons is never the Beacon's doing. A double NAT appears when the eero gateway sits behind another router, such as the box from your internet provider, so that two devices both translate addresses; games report a Moderate or Strict NAT, port forwards fail and some services refuse to connect.
eero's help article on bridge mode and double NAT gives the cure. Either turn the provider's box into a modem only, if it has a bridge or passthrough setting, or put the eero gateway into bridge mode so that the other router remains the router. Bridge mode switches off eero's network services, including its security and many parental controls, so it is a trade. To go back, open the eero app, Settings, Advanced networking, DHCP and NAT, and switch Bridge back to Automatic. Beacons then follow the gateway wherever it goes.
Differential
Likely causes of “eero Beacon shows double NAT or strict NAT”, and how to tell them apart
- 1
The eero gateway behind a provider router
What separates it Games show Strict NAT and port forwards fail
How to confirm Set the provider box to bridge or passthrough so the eero gateway gets the public address
- 2
A provider box that cannot bridge
What separates it The box has no passthrough option
How to confirm Put the eero gateway into bridge mode and keep the other router
- 3
Two routers both handing out addresses
What separates it Devices show two private ranges
How to confirm Turn off DHCP on one device or use bridge mode
- 4
A Beacon mistaken for a router
What separates it A Beacon is plugged into the modem
How to confirm Plug the eero router, not the Beacon, into the modem
- 5
A leftover bridge mode
What separates it Features such as parental controls vanished
How to confirm eero app: DHCP and NAT, change Bridge to Automatic
Before you touch a setting
Record this first — changing settings destroys the evidence
- The device that connects to the modem and the eero gateway's WAN address
- Whether the eero app reports Double NAT
- The provider router's model and bridge options
- Which Beacons are in use
Try in this order
0 of 6 completedFind the gateway
ReversibleIn the eero app, check which eero is the gateway; a Beacon cannot be one.
Look at the WAN address
ReversibleIf the eero's WAN address is private, such as 192.168.x.x or 10.x.x.x, there is a second router upstream.
Bridge the provider box
ReversibleSet the provider's device to bridge or IP passthrough, restart it and the eero gateway.
Or bridge the eero
ReversibleSettings, Advanced networking, DHCP and NAT, Bridge, if you must keep the other router.
Check NAT
ReversibleTest in your game or with the eero app after the restart.
Return to Automatic if you change your mind
ReversibleSwitch Bridge back to Automatic in DHCP and NAT.
Model-specific
What is true of this model and not of its siblings
- Beacons extend only
- They have no Ethernet ports and need a gateway eero.
- Private WAN address
- It reveals a second router upstream.
- The trade
- Bridge mode keeps the other router but costs eero features.
Stop boundary
When this stops being a self-service repair
- !If the provider box cannot bridge and you need eero features, ask the provider about a modem-only plan
- !If NAT type stays strict after bridging, check for a carrier-grade NAT
- !Ask eero support for help reading the WAN address
Evidence ledger
Sources behind this answer
Exact questions
Common questions
Can an eero Beacon cause double NAT?+
No, it has no routing role.
What is bridge mode?+
A mode where the eero acts as an access point behind another router.
What do I lose in bridge mode?+
Many security and parental control features.
How do I turn bridge mode off?+
DHCP and NAT, switch to Automatic.