[TriLUG] ATT fiber installed and gateway/routing problem

[Christopher Merrill via TriLUG]

Thanks!  Searching for both NAT loopback and NAT reflection...it appears it
is not supported on the Pace 5268AC that AT&T supplies  :(   That's
unfortunate, since AFAICT, this is the ONLY remaining item that I need to
get working. Everything else in my setup is working. I like that it
supported a "guest" network, now that my kids are at the age where their
friends are asking me for our wifi password :)

On the upside, I have a Netgear Nighthawk X6 (R8000) router that came into
my possession when I inherited all the leftover network gear from our
office. I don't know much about it, but it does support NAT loopback. Based
on the reviews, this device appears to be well regarded, so I think I'll
try plugging this in tomorrow and setting up the DMZ-plus.



On Sat, Dec 3, 2016 at 10:58 PM, Wes Garrison <wes at xitechusa.com> wrote:

> You're looking for "NAT reflection".  Some people call that "loopback",
> but I think reflection is the proper term.
>
> https://forums.att.com/t5/AT-T-Internet-Equipment/NVG589-
> NAT-loopback-reflection-possible/td-p/3866231
>
> It looks like it's not possible, but if you set it to "passthrough mode",
> the router will see your Synology as having your public IP.
>
> This is not a true "bridged" Ethernet, and adds some overhead, but it
> still seems to work in most cases.
>
> -Wes
>
> _________________________________
> Wesley S. Garrison
> Network Engineer
> Xitech Communications, Inc.
> phone:  (919) 260-0803
> fax:       (919) 932-5051
> __________________________________
> "Lead us not into temptation, but deliver us from email."
>
> On Sat, Dec 3, 2016 at 7:19 PM, Christopher Merrill via TriLUG <
> trilug at trilug.org> wrote:
>
>> Looks like Scott and I are on the same schedule :)
>>
>> I had the install yesterday. The tech was considerably more knowledgeable
>> than I have come to expect from utilities. There were a few things I
>> wanted
>> done in specific ways and he was very accommodating. To the point that I
>> called his supervisor to mention the good service.
>>
>> Using the Google Fiber speed test, I got results similar to Scotts. And
>> ~15ms latency to major datacenters (AWS, Facebook).
>>
>>
>> Unfortunately, I've also experienced unhappiness with the provided
>> gateway/router - 5268AC. Note that I previously had UVerse with their
>> gateway in place. Like many of us, I run a server at home (Synology
>> Diskstation). Our family uses this for music, photos, notes and some
>> email.
>> After duplicating my previous setup, almost everything works well. There
>> are bunch of ports routed though to the Diskstation to support these
>> services.
>>
>> Here is the problem I've run into: connections to the public IP from
>> inside
>> the network are refused. I've tested this from several Android devices as
>> well as from Windows. Summary of symptoms:
>> 1) If I connect to the Diskstation directly (the local IP or internal
>> hostname) from inside the network (wired or wireless), everything works
>> 2) If I connect to the Diskstation via the external/WAN/public IP from
>> outside the network, everything works
>> 3) If I attempt to connect to the Diskstation via the external/WAN/public
>> IP from outside the network, all connections are refused
>>
>> #3 was not the case previously. I've searched through the settings on
>> the 5268AC and don't see anything that seems like it would control this.
>> Is
>> there a specific term I should be looking for?
>>
>> If you have any ideas on how to remedy this, I'd love to hear them :)
>>
>> Chris
>>
>>
>>
>>
>>
>>
>> --
>> ------------------------------------------------------------------------
>> -
>> Chris Merrill                           |  Web Performance, Inc.
>> chris at webperformance.com                |  http://webperformance.com
>> 919-845-7601 x701                       |  919-845-7601
>>
>> Web Performance: Website Load Testing Software & Services
>> ------------------------------------------------------------------------
>> -
>> --
>> This message was sent to: Wes <wes at xitechusa.com>
>> To unsubscribe, send a blank message to trilug-leave at trilug.org from
>> that address.
>> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
>> Unsubscribe or edit options on the web  : http://www.trilug.org/mailman/
>> options/trilug/wes%40xitechusa.com
>> Welcome to TriLUG: http://trilug.org/welcome
>
>
>


-- 
------------------------------------------------------------------------ -
Chris Merrill                           |  Web Performance, Inc.
chris at webperformance.com                |  http://webperformance.com
919-845-7601 x701                       |  919-845-7601

Web Performance: Website Load Testing Software & Services
------------------------------------------------------------------------ -