The central systems analyst of the NHS says that there is no harm
being behind two NAT firewalls. and that your current setup is
just fine so long as you are not allowing incoming services. any
incoming services will need to pass through both NAT's,
essentially doubling the work. but we are talking seconds to
minutes to achieve on both.
You're fine exactly as you are Rich, the only benefit will be
opening incoming ports on one firewall instead of two.
On 16/11/2018 18:03, Richard Brown
wrote:
Hi All
Updated the Netgear firmware today and I can now turn it into a
modem only. Before I do that I wanted to ask if when I do that
we will all lose connectivity. It shouldn't do because we are
all connecting via the Draytek. But then I am confused about
Giles' suggestion about turning the Draytek into a PPPoE. I have
tried to read and understand and all that I have read back-up
Giles' suggestion. However, just doing something appears to
backfire on me at times and so before flipping a switch:
1. Can I turn the Netgear to modem only and stay connected
please?
2. Once I flip Draytek into PPPoE will we stay connected
please?
Many thanks
On 06/11/2018 4:09 pm, Giles Coochey
wrote:
On 06/11/2018 15:52, mr meowski wrote:
On 06/11/2018 14:31, Richard Brown
wrote:
So, I now want to switch off all
functionality in the Netgear and let
the Draytek take over, using the Netgear simply as a modem.
https://kb.netgear.com/25078/DGN2200v4-FAQs
"Is there a way to set the DGN2200v4 as a modem only?
Yes. It is now added on firmware version 1.0.0.46. It can be
seen under
Device Mode on Advanced setup."
Seems like your first job is to make sure the firmware is up
to date on
both devices and then put the Netgear into modem mode surely.
It'll make
the subsequent steps easier as well.
Cheers
I speculatively imagine that if you put the Netgear into modem
mode then you will probably need to use PPPoE on the Draytek
rather than DHCP.
This would be better as the Draytek should then get the public
IP address on the WAN interface rather than the double-NAT in my
last post.