Can't download Windows Updates or visit Microsoft.com
-
@Dashrender said:
@scottalanmiller said:
@Dashrender said:
Double NAT? is everyone here running two routers in series behind their ISP's connection?
Not me.
OK good I thought I had missed something completely.
People are recomeding double NAT over there as a security practice. It gives you better security they claim to have two firewalls. So apparently some are.
-
@thecreativeone91 said:
I bought my modem myself rather than Through Comcast so luckily I didn't have to deal with their crappy modems.
Anyway it all randomly started working lastnight. Microsoft started working again. No more high latecny and no constant loss of connection. No idea what happened as I didn't change anything.
Maybe the ISP had an upstream problem? I've seen this before when they had a bad route and whole sections of the internet were inaccessible.
-
@thecreativeone91 said:
@Dashrender said:
@scottalanmiller said:
@Dashrender said:
Double NAT? is everyone here running two routers in series behind their ISP's connection?
Not me.
OK good I thought I had missed something completely.
People are recomeding double NAT over there as a security practice. It gives you better security they claim to have two firewalls. So apparently some are.
Double firewalls does not equal double NAT. Double firewalls used to be a standard practice and enterprises all still do this. But I know of none that do double NAT, many don't do NAT at all.
-
@scottalanmiller said:
@thecreativeone91 said:
@Dashrender said:
@scottalanmiller said:
@Dashrender said:
Double NAT? is everyone here running two routers in series behind their ISP's connection?
Not me.
OK good I thought I had missed something completely.
People are recomeding double NAT over there as a security practice. It gives you better security they claim to have two firewalls. So apparently some are.
Double firewalls does not equal double NAT. Double firewalls used to be a standard practice and enterprises all still do this. But I know of none that do double NAT, many don't do NAT at all.
Yes of course. But in this case they are reccomeding using two routers.
-
@thecreativeone91 said:
Yes of course. But in this case they are reccomeding using two routers.
Right, that's what I'm saying. Two routers and/or two firewalls doesn't suggest double NAT.
-
@scottalanmiller said:
@thecreativeone91 said:
Yes of course. But in this case they are reccomeding using two routers.
Right, that's what I'm saying. Two routers and/or two firewalls doesn't suggest double NAT.
If it's configured in that way. But they way they were suggestion is is using the second NAT to separate business related in the same building (parent company from sister company etc.) instead of using a single router with a firewall and separate subnets for each.
-
I don't see the point in over complicating it by using double NAT.
It just makes things more difficult for the poor bunny that has to troubleshoot it. -
This is just one of them I've seen recently. http://community.spiceworks.com/topic/859078-soho-router-to-router-dchp-works-static-doesnt
-
@thecreativeone91 said:
@scottalanmiller said:
@thecreativeone91 said:
Yes of course. But in this case they are reccomeding using two routers.
Right, that's what I'm saying. Two routers and/or two firewalls doesn't suggest double NAT.
If it's configured in that way. But they way they were suggestion is is using the second NAT to separate business related in the same building (parent company from sister company etc.) instead of using a single router with a firewall and separate subnets for each.
That's different then.
-
@scottalanmiller Yeah. He flagged all of my responses as unrelated because his question was about removing a double NAT or setting up multiple subnets. And they were deleted.
-
@thecreativeone91 said:
@scottalanmiller Yeah. He flagged all of my responses as unrelated because his question was about removing a double NAT or setting up multiple subnets. And they were deleted.
Wait... they got deleted? Seriously?
-
They'd better not delete my posts for trying to help him understand where his problems are. What a load of crap.
-
-
A Comcast tech I know said they had an issue with MTU being wrong which caused issues with packets being dropped.
-
@scottalanmiller said:
Right, that's what I'm saying. Two routers and/or two firewalls doesn't suggest double NAT.
Yes it does. The typical SoHo gear does not have the routing capability out of the box to do any BUT basic NAT. This means double NAT always.
Additionally, the only way most people know how to set up gear is static/DHCP WAN and a NAT to the LAN.
So again, yes, two routers immediately suggests double NAT.
This does not mean two router technically suggests a double NAT, as it does not. But that is not a standard in practice skill.
-
@JaredBusch said:
@scottalanmiller said:
Right, that's what I'm saying. Two routers and/or two firewalls doesn't suggest double NAT.
Yes it does. The typical SoHo gear does not have the routing capability out of the box to do any BUT basic NAT. This means double NAT always.
Additionally, the only way most people know how to set up gear is static/DHCP WAN and a NAT to the LAN.
So again, yes, two routers immediately suggests double NAT.
This does not mean two router technically suggests a double NAT, as it does not. But that is not a standard in practice skill.
But no IT pro or business would seriously suggest home equipment and even sub $100 business gear doesn't require NAT. Anyone in this category falls below the "business" line. It is and always has been standard to have double routers, but not double NAT, in business. This is common from both networking and systems training sides. That somewhere some confused home users suggest double NAT doesn't mean that IT recommendations of double routers suggests double NAT, or any NAT.
-
If you use NAT for "security" what the heck do they plan on doing when IPv6 is mainstream. I don't think that guy understands PCI compliance either.
-
@thecreativeone91 said:
If you use NAT for "security" what the heck do they plan on doing when IPv6 is mainstream. I don't think that guy understands PCI compliance either.
No, not at all. And several people in that thread even said that they wouldn't actually recommend double NAT, just double routers. In the case of the OP, he isn't saying that he wants to do it but that he refuses to explain how to do things well. Basically, he doesn't care at all about the client and is unclear on where his demarcation point is because he keeps flip flopping on that point in order to shut down whoever is trying to help him at the particular moment.
-
I guess I haven't seen the posts where the OP states he's doing double NAT. Where was it?
Regardless of double nat... Since DHCP works and static doesn't, doesn't it seem obvious that he's probably missing a default gateway.
-
@Dashrender said:
I guess I haven't seen the posts where the OP states he's doing double NAT. Where was it?
Regardless of double nat... Since DHCP works and static doesn't, doesn't it seem obvious that he's probably missing a default gateway.
Some of the conversation has been deleted. But they are using NAT for security to separate companies instead of a firewall. Which won't meet the requirements of PCI-DSS. And will cause issues for lots of types of traffic. If they are related enough of companies to share an internet connection they should be willing to work together to properly set it up.
