Double NAT on an Archer means the modem is also a router and both translate addresses. TP-Link's not-connecting article points to the LAN IP clash that comes with it: most TP-Link routers default to 192.168.0.1 or 192.168.1.1, and a modem router in the same range stops the internet working until the Archer's LAN IP is changed to another range. Check the Internet IP under Advanced, Status: a private address such as 192.168.x.x means another router is in front.
The checks in more detail
The clean cure is to put the provider's gateway in bridge mode, or ask the provider to, so the Archer is the only router. The other cure is Access Point mode: under Advanced, Operation Mode, choose Access Point and save, and the router then extends the existing router's network. TP-Link states that features requiring the WAN port, including Parental Controls, Access Control, QoS, Bandwidth Control, NAT Forwarding, IPv6 and VPN, do not work in Access Point mode.
If the provider will not bridge, open ports on both devices, or use the provider's DMZ setting pointed at the Archer's WAN address. After any change restart the modem then the router, and test games and remote access. A new router with no internet may instead be the MAC clone issue, which is separate. Ask the provider whether the gateway can run in bridge or IP passthrough mode, since many can and it takes them a minute, which is easier than reconfiguring everything behind it.
After a bridge or mode change, restart both devices in order, modem first, and confirm the router's WAN address is now a public one. Games consoles and voice apps often report a strict or moderate NAT type in their network menus, which is a handy second signal that a second router is in the path. When asking a provider to bridge a gateway, use their exact terms such as bridge mode, IP passthrough or modem-only mode, because support staff recognize these and can apply them without a technician visit.
Differential
Likely causes of “TP-Link Archer routers shows double NAT or strict NAT”, and how to tell them apart
- 1
A provider gateway routing
What separates it There are two routers because the provider's gateway is still routing in front of the Archer
How to confirm Bridge the gateway, or ask the provider to do it, so that only the Archer routes
- 2
A LAN IP clash
What separates it There is no internet after setup because the Archer's LAN address clashes with the gateway's
How to confirm Change the Archer's LAN IP address to a different range, and restart it
- 3
AP mode chosen
What separates it Some features are unavailable because AP mode was chosen
How to confirm Return the router to router mode, so the unavailable features come back
- 4
Ports closed
What separates it The ports stay closed because there are two routers, and both must let the traffic through
How to confirm Open the ports on both devices, or bridge the gateway so that only one routes
- 5
A MAC lock
What separates it The Internet IP address shows 0.0.0.0 because the provider tied the service to a MAC address
How to confirm Clone the MAC address of the old device in the router's settings
Before you touch a setting
Record this first — changing settings destroys the evidence
- The Internet IP address that the router shows
- The make and model of the provider's gateway
- Which mode the Archer is in
- Which feature fails, such as gaming or remote access
Try in this order
0 of 7 completedRead the Internet IP
ReversibleRead the Internet IP address, since a private address means that another router is in front.
Check the LAN IP
ReversibleCheck the LAN IP address, and change it if it clashes with the gateway's address range.
Bridge the gateway
ReversibleBridge the gateway, or ask the provider to do it for you, so that only one router does NAT.
Or use AP mode
ReversibleOr use AP mode, which you find under Advanced and then Operation Mode in the router's menu.
Know what AP mode loses
ReversibleKnow what AP mode loses, which includes QoS, NAT forwarding and the VPN features, and then test again to see whether it helped.
Restart
ReversibleRestart the modem first and then the router, and wait for both to finish starting up.
Retest
ReversibleRetest the things that failed, such as online games and remote access, to see if they work.
Model-specific
What is true of this model and not of its siblings
- Modes
- The Operation Mode page offers Router and Access Point on most Archer models.
- Ports
- Wi-Fi 7 models have multi-gig WAN ports.
- Other models this page answers
- These steps also fit the Archer BE550 Wi-Fi 7 router, Archer AXE75 router, Archer AX73 router, Archer AX55 router.
Stop boundary
When this stops being a self-service repair
- !If the provider will not bridge, use Access Point mode and accept the lost features
- !If the Internet IP is private and no other router exists, contact TP-Link support
- !If ports stay closed, check with the provider
Evidence ledger
Sources behind this answer
Internet IP, MAC clone and LAN IP.
Features lost in AP mode.
Setting Access Point mode.
RJ45 cable, modem test and WAN port test.
The company and its products.
Exact questions
Common questions
What is double NAT?+
Double NAT means two routers are both translating addresses, one after the other.
How do I spot it?+
You can spot it when the Internet IP address of the router is a private address.
What is a LAN IP clash?+
A LAN IP clash is a modem router in the same address range as the Archer.
What is Access Point mode?+
Access Point mode makes the router extend an existing network instead of routing.
Can I bridge the gateway?+
Often you can bridge the gateway, but you may need to ask the provider to do it.
What is DMZ?+
A DMZ is a host that receives all of the other incoming traffic that has no rule.
Do I restart after?+
Yes, restart the units after the change, so that they pick up the new arrangement.
Can I revert?+
Yes, you can revert to router mode at any time, if the change does not suit you.