Double NAT happens when two routers sit in a row and both perform network address translation. It is common when an ISP gateway is still routing and your own router is connected behind it.
Does this affect you?
Use this if a router app, Eero, Orbi, Xbox, PlayStation, game, camera, or remote access tool warns about Double NAT, strict NAT, or port forwarding rules that never work even though they look correct.
Confirm you actually have double NAT
Check the WAN address on the router your devices use.
- Log into your main router, mesh app, or network map.
- Find WAN IP, Internet IP, or External IP.
- If that address starts with 192.168, 10., or 172.16 through 172.31, your router is receiving a private address from another router upstream. That is double NAT.
- If the WAN address looks public, double NAT is probably not the problem and you should troubleshoot port rules, firewall settings, or the service itself.
Fix it with bridge mode
The clean fix is to let only one router do routing.
- Log into the ISP-provided gateway. The address and password depend on the provider and are often printed on the device.
- Look for Bridge Mode, IP Passthrough, or Passthrough under advanced gateway settings.
- Enable the mode that stops the ISP gateway from acting as the main router.
- Restart the ISP gateway and your own router.
- Check your own router WAN IP again. It should no longer be a private 192.168, 10, or 172.16-31 address.
If bridge mode is not available
Use this less-clean workaround when the provider gateway cannot be bridged.
- Find your own router WAN IP address inside the ISP gateway device list.
- Open the ISP gateway DMZ or port forwarding settings.
- Point DMZ to your own router WAN IP address.
- Keep normal port forwarding and firewall rules on your own router.
- Test the service again.
More control
Why port forwarding fails under double NAT
A rule on your router does not help if the ISP gateway in front of it never forwards the incoming traffic. That is why hosted games, remote cameras, and console NAT checks often fail.
Mesh apps may detect it for you
Eero, Orbi, and similar systems often warn when the WAN address is private. That is the same test you can do manually in the router status page.
One router cannot create double NAT by itself
If there is only one gateway/router in the home, NAT trouble comes from settings on that single device or the provider network, not a second local router.
Sources
- Netgear Support – What is Double NAT and how do I fix it? (2025)
- Eero Support – Double NAT troubleshooting (2025)
- Xbox Support – NAT types and network troubleshooting (2025)