Double NAT on an Orbi appears when a provider's modem and router combination sits in front of it and both route. NETGEAR's answer for Orbi is Access Point mode when another router must stay in front: the Orbi then stops routing and the router in front does the work. NETGEAR's list of what is grayed out in AP mode is long and worth knowing before you switch:
The checks in more detail
the setup wizard, port forwarding and port triggering, remote management, UPnP, IPv6, traffic meter, parental controls, Circle, NETGEAR Armor, block sites, block services, VPN service, VLAN and IPTV setup, internet setup, WAN setup, LAN setup, access control and QoS. If you want those features, keep the Orbi as the router and put the provider's unit into bridge or modem mode, or ask the provider to do it. On a cable Orbi, which has its own modem, double NAT should not occur.
To spot double NAT, look at the WAN IP the router reports: a private address such as 192.168.x.x means another router is in front. Consoles also report it as a strict or moderate NAT type. Fix it once, upstream, rather than opening ports twice, and test again from outside your network. Consoles and video services often show the NAT type in their network menus, and a strict or double result is a useful second confirmation of what the WAN address already told you. Fixing double NAT once, at the upstream device, is better than opening ports in two places, and it also helps voice and game services that dislike stacked routers.
After fixing double NAT, restart the console or game and let it detect the network again, since many titles cache the earlier result until they are restarted.
Differential
Likely causes of “NETGEAR Orbi mesh wifi shows double NAT or strict NAT”, and how to tell them apart
- 1
A provider combo unit routing
What separates it There are two routers because a provider's combo unit is routing in front of the Orbi
How to confirm Bridge the provider unit or use AP mode
- 2
Provider wifi still on
What separates it There are duplicate networks because the provider's own wifi is still switched on
How to confirm Turn off the provider's wifi, so that the Orbi is the only wifi network in your home
- 3
AP mode chosen by mistake
What separates it Some features are grayed out because AP mode was chosen by mistake
How to confirm Return the Orbi to router mode, so the grayed out features come back
- 4
Ports closed
What separates it The ports stay closed because there are two routers, and both must let the traffic through
How to confirm Open the ports on the upstream router as well as on the Orbi, so traffic can reach the device
- 5
A cable Orbi
What separates it You do not expect double NAT on a cable Orbi, yet the app or a console reports it
How to confirm Check the connection, since a cable Orbi normally connects straight to the cable modem
Before you touch a setting
Record this first — changing settings destroys the evidence
- The WAN address that the router shows in its status page
- The make and model of the provider's unit in front of the Orbi
- Whether the Orbi is in router mode or AP mode
- Which feature fails, such as gaming or remote access
Try in this order
0 of 7 completedCheck the WAN IP
ReversibleCheck the WAN address, since a private address means that another router sits in front.
Choose a fix
ReversibleChoose a fix, which is either to bridge the provider's unit or to use AP mode on the Orbi.
Check what AP mode removes
ReversibleCheck what AP mode removes, such as port forwarding, parental controls and Armor, before you choose it.
Apply the change
ReversibleApply the change, and set the Orbi to router mode or AP mode as you have decided.
Retest
ReversibleRetest the things that failed, such as online games and remote access, to see whether they work.
Open ports upstream if needed
ReversibleOpen ports upstream if needed, since in a double NAT setup the ports must be opened twice.
Revert if needed
ReversibleRevert if needed, by returning the Orbi to router mode, which brings its features back.
Model-specific
What is true of this model and not of its siblings
- Cable Orbi
- Orbi Cable models include a modem, so there is no combo unit to bridge.
- Features
- AP mode disables Circle and Armor.
- Other models this page answers
- These steps also fit the Orbi 960 Series mesh, Orbi 750 Series mesh.
Stop boundary
When this stops being a self-service repair
- !If the provider will not bridge, use AP mode and accept the lost features
- !If the WAN IP is private and no other router exists, contact NETGEAR support
- !If the ports stay closed, ask the provider whether their unit can be put into bridge mode
Evidence ledger
Sources behind this answer
Features grayed out in AP mode.
No internet with a new router and MAC spoofing.
Reserved IP, service name and rule order.
Power LED and ring LED colors.
The company and its products.
Exact questions
Common questions
Is Access Point mode a fix?+
Yes, but it grays out many features.
What does AP mode disable?+
Port forwarding, UPnP, parental controls, Armor, QoS and more.
Can I bridge the provider's unit?+
Often you can bridge the provider's unit, so ask the provider whether it is possible.
Does a cable Orbi have double NAT?+
A cable Orbi does not normally have double NAT, since it connects straight to the cable.
Do I open ports twice?+
In a double NAT setup, yes, you must open the ports on both of the routers.
Can I go back?+
Yes, you can go back to router mode at any time, and the features return.